BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//pretalx.devconf.info//devconf-cz-2025//speaker//Z3FTKP
BEGIN:VTIMEZONE
TZID:CET
BEGIN:STANDARD
DTSTART:20001029T040000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000326T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=3
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-devconf-cz-2025-UHVMTF@pretalx.devconf.info
DTSTART;TZID=CET:20250614T123000
DTEND;TZID=CET:20250614T130500
DESCRIPTION:In today's computing world\, protecting userspace applications 
 is essential to mitigate security threats. The Linux kernel exposes approx
 imately 400 system calls\, each creating a potential vulnerability window 
 that attackers could exploit to compromise application stability. \n\nBPF\
 , Berkeley Packet Filter program can be used to observe events across a sy
 stem and report information about those events to user space tools. Secure
  Computing-eBPF provides a mechanism to restrict the system calls that an 
 application can make to the kernel. The fundamental concept involves imple
 menting system call filtering based on both system call numbers and their 
 arguments. Through this approach\, security policies can precisely define 
 which system calls should be permitted or prohibited\, with filters making
  runtime decisions.\n\nIn this session\, we will examine the implementatio
 n of seccomp-eBPF for improving application security\, demonstrating how t
 o create effective filtering rules that protect user space applications wi
 thout compromising functionality or performance. We will cover practical d
 emonstrations\, use cases\, common pitfalls to avoid\, and techniques for 
 balancing security with application requirements. \n\nAttendees will gain 
 insights into Linux system security for applications against kernel-level 
 exploits through system call restrictions.
DTSTAMP:20260722T103949Z
LOCATION:E105 (capacity 70)
SUMMARY:Understanding programmable system call security with Secomp-eBPF in
  Linux. - Kiran Kashinath Belle\, Ravina R. Jain
URL:https://pretalx.devconf.info/devconf-cz-2025/talk/UHVMTF/
END:VEVENT
END:VCALENDAR