reassure selinux
play

ReAssure & SELinux Jacques Thomas, Pascal Meunier, Patrick - PowerPoint PPT Presentation

Apr 24, 2023 •297 likes •406 views

ReAssure & SELinux Jacques Thomas, Pascal Meunier, Patrick Eugster, and Jan Vitek ReAssure Firewall Image Server Managed Switch Experimental boxes Deploying VLAN 1 VLAN 2 Experimenting ! VLAN 1 VM VM VLAN 2 VM https:/

  1. ReAssure & SELinux Jacques Thomas, Pascal Meunier, Patrick Eugster, and Jan Vitek

  2. ReAssure Firewall Image Server Managed Switch Experimental boxes

  3. Deploying VLAN 1 VLAN 2

  4. Experimenting ! VLAN 1 VM VM VLAN 2 VM

  5. https:/ /reassure.cerias.purdue.edu Request Account Pascal Meunier

  6. Virtual Machines, Virtual Machines Virtual Security ? VM VM SELinux

  7. Accommodative Mandatory Access Control Capitalize on SELinux mechanisms Administrative model for SELinux Custom experiments without VM

  8. Healthy Testbed SELinux SELinux in. Malware out.

  9. Questions When is a machine considered clean ? How does our SELinux admin model work ? Interesting for GENI ? Why SELinux ? Thank you jthomas@cs.purdue.edu

Download Presentation
Download Policy: The content available on the website is offered to you 'AS IS' for your personal information and use only. It cannot be commercialized, licensed, or distributed on other websites without prior consent from the author. To download a presentation, simply click this link. If you encounter any difficulties during the download process, it's possible that the publisher has removed the file from their server.

Recommend

What is SELinux trying to tell me? The 4 key causes of SELinux errors. SELinux Problem

What is SELinux trying to tell me? The 4 key causes of SELinux errors. SELinux Problem

What is SELinux trying to tell me? The 4 key causes of SELinux errors. SELinux Problem Solutions 1.SELinux == Labeling 2.SELinux Needs to Know 3.SELinux Policy/Apps can have bugs. 4.You could be COMPROMISED!!!! SELinux == Labeling Every

611 views • 11 slides
Hands-on SELinux: A Practical Introduction Security Training Course Dr. Charles J. Antonelli

Hands-on SELinux: A Practical Introduction Security Training Course Dr. Charles J. Antonelli

Hands-on SELinux: A Practical Introduction Security Training Course Dr. Charles J. Antonelli The University of Michigan 2012 Roadmap Day 1: Why SELinux? Overview of SELinux Using SELinux SELinux Permissive Domains Day

1.71k views • 60 slides
Hands-on SELinux: A Practical Introduction Security Training Course Dr. Charles J. Antonelli

Hands-on SELinux: A Practical Introduction Security Training Course Dr. Charles J. Antonelli

Hands-on SELinux: A Practical Introduction Security Training Course Dr. Charles J. Antonelli The University of Michigan 2013 Roadmap Day 1: Why SELinux? Overview of SELinux Using SELinux SELinux Permissive Domains Day

693 views • 45 slides
SELinux Policy Within Package Managers Why policy is special 1 SELinux? Policy? What?

SELinux Policy Within Package Managers Why policy is special 1 SELinux? Policy? What?

SELinux Policy Within Package Managers Why policy is special 1 SELinux? Policy? What? SELinux is a MAC system for Linux Enabled by default on Fedora, RHEL Available on Ubuntu, Gentoo, Debian, etc Policies are available for

579 views • 16 slides
An Introduction to SELinux Presentation Toshaan Bharvani - VanTosh bvba < toshaan@vantosh.com

An Introduction to SELinux Presentation Toshaan Bharvani - VanTosh bvba < toshaan@vantosh.com

An Introduction to SELinux Toshaan Bharvani - VanTosh bvba Introduction How to use it SELinux states Managing SELinux FroSCon 2012 Policies 25 August 2012 The End An Introduction to SELinux Presentation Toshaan Bharvani - VanTosh

466 views • 29 slides
Communication Goals Reassure parents and families that WS/FCS is well-prepared for a safe

Communication Goals Reassure parents and families that WS/FCS is well-prepared for a safe

Communication Goals Reassure parents and families that WS/FCS is well-prepared for a safe return to learning in the fall. Establish expectations of flexibility in order to ensure safety. Provide timely and accurate dissemination of

516 views • 19 slides
SENG: An Enhanced Policy SENG: An Enhanced Policy Language for SELinux Language for SELinux

SENG: An Enhanced Policy SENG: An Enhanced Policy Language for SELinux Language for SELinux

SENG: An Enhanced Policy SENG: An Enhanced Policy Language for SELinux Language for SELinux Paul Kuliniewicz <kuliniew@purdue.edu> CERIAS, Purdue University Overview Overview What's wrong with macros? Can we do better?

947 views • 60 slides
Security- -Enhanced Darwin: Enhanced Darwin: Security Porting SELinux to Mac OS X Porting

Security- -Enhanced Darwin: Enhanced Darwin: Security Porting SELinux to Mac OS X Porting

Security- -Enhanced Darwin: Enhanced Darwin: Security Porting SELinux to Mac OS X Porting SELinux to Mac OS X SELinux Symposium 2007 ELinux Symposium 2007 S Chris Vance Information Systems Security Operation, SPARTA, Inc.

700 views • 26 slides
State of SELinux Paul Moore September 2017 Kernel Changes Obligatory Container Slide

State of SELinux Paul Moore September 2017 Kernel Changes Obligatory Container Slide

State of SELinux Paul Moore September 2017 Kernel Changes Obligatory Container Slide Individual file labeling for cgroup, cgroup2, and tracefs Allows for labels unique to each container, enabling SELinux enforced separation for these

482 views • 16 slides
SELinux Example: I may chmod o+a the file containing 506 grades, which violates

SELinux Example: I may chmod o+a the file containing 506 grades, which violates

12/6/12 MAC vs. DAC By default, Unix/Linux provides Discretionary Access Control The user (subject) has discretion to set security policies (or not) SELinux Example: I may chmod o+a the file containing 506 grades,

412 views • 5 slides
Annual Report 2014/15 Police and Crime Plan 2013 to 18 Specific Aims; Reassure

Annual Report 2014/15 Police and Crime Plan 2013 to 18 Specific Aims; Reassure

Annual Report 2014/15 Police and Crime Plan 2013 to 18 Specific Aims; Reassure communities Improve trust and confidence in policing Work together to deliver services Established four priorities: Defend frontline

753 views • 16 slides
SElinux filesystem filesystem labeling labeling SElinux and type enforcement and type

SElinux filesystem filesystem labeling labeling SElinux and type enforcement and type

SElinux filesystem filesystem labeling labeling SElinux and type enforcement and type enforcement November 13, 2020 Administrative Administrative submittal instructions submittal instructions answer the lab assignments

356 views • 24 slides
Investment in ReAssure, a Leading Closed Book Life Consolidator in the UK October 6, 2017 Good,

Investment in ReAssure, a Leading Closed Book Life Consolidator in the UK October 6, 2017 Good,

Investment in ReAssure, a Leading Closed Book Life Consolidator in the UK October 6, 2017 Good, evening everyone. My name is Shiro Fujii, Executive Vice president and CFO of MS&AD Insurance Group Holdings, Inc. Thank you very much for taking

240 views • 23 slides
Proposed acquisition of ReAssure Group plc 6 December 2019 Classification: Confidential 1

Proposed acquisition of ReAssure Group plc 6 December 2019 Classification: Confidential 1

Proposed acquisition of ReAssure Group plc 6 December 2019 Classification: Confidential 1 Agenda Transaction overview Clive Bannister | Group Chief Executive Financial benefits of transaction Jim McConville | Group Finance Director

761 views • 31 slides
HIB OUR GOALS THIS EVENING INFORM EDUCATE REASSURE YOUR (NEW JERSEYS) ANTI-BULL

HIB OUR GOALS THIS EVENING INFORM EDUCATE REASSURE YOUR (NEW JERSEYS) ANTI-BULL

HIB OUR GOALS THIS EVENING INFORM EDUCATE REASSURE YOUR (NEW JERSEYS) ANTI-BULL YING LAW IS A BEAST SAMEER HINDUJ A- PH.D CO-DIRECTOR CYBERBULL YING RESEARCH CENTER WHAT IS HIB? A CONFLICT? IDLE TEASING? BULL YING?

812 views • 18 slides
Using SELinux with container runtimes Because privileged containers are scary Lukas Vrabec

Using SELinux with container runtimes Because privileged containers are scary Lukas Vrabec

Using SELinux with container runtimes Because privileged containers are scary Lukas Vrabec Senior Software Engineer Security Technologies 1 Who am I ? Lukas Vrabec SELinux Evangelist Member of Security Technologies team at Red

971 views • 70 slides
Acknowledgement to: Capturing the Moment When Fusion is Lost in Strabismus NATIONAL EYE

Acknowledgement to: Capturing the Moment When Fusion is Lost in Strabismus NATIONAL EYE

In Flagrante Delicto: Acknowledgement to: Capturing the Moment When Fusion is Lost in Strabismus NATIONAL EYE INSTITUTE Research to Prevent Blindness Alcon Research Institute That Man May See Wayne and Gladys Valley

261 views • 4 slides
Modeling Contacts in Macro-molecular assemblies: from Inference to Assessment

Modeling Contacts in Macro-molecular assemblies: from Inference to Assessment

Modeling Contacts in Macro-molecular assemblies: from Inference to Assessment Frederic.Cazals@inria.fr Overview PART 1: Connectivity Inference from Native Mass Spectrometry Data PART 2: Building Coarse Grain Models PART 3: Handling uncertainties

1.54k views • 121 slides
Monitoring Minimal Residual Disease in AML with molecular markers Giuseppe Saglio University of

Monitoring Minimal Residual Disease in AML with molecular markers Giuseppe Saglio University of

Monitoring Minimal Residual Disease in AML with molecular markers Giuseppe Saglio University of Turin, Italy 23 genes recurrently mutated in AML The Cancer Genome Atlas Research Network, New Engl J Med 2013;368:20592074. Challenges to

679 views • 48 slides
Table of Contents Why DNA Computing? The Structure of DNA DNA Computing Operations on

Table of Contents Why DNA Computing? The Structure of DNA DNA Computing Operations on

Table of Contents Why DNA Computing? The Structure of DNA DNA Computing Operations on DNA Molecules Reading DNA Example of a Molecular Computer Information Processing with DNA Molecules Christian Jacob Why DNA Computing?

400 views • 7 slides
Affinity Group December 18, 2018 The University of Wisconsin Service Center will Serve

Affinity Group December 18, 2018 The University of Wisconsin Service Center will Serve

Affinity Group December 18, 2018 The University of Wisconsin Service Center will Serve the people of the University of Wisconsin System Collaborate by being supportive and constructive Act with Integrity always and in all

417 views • 26 slides
SY306 Web and Databases for Cyber Operations Set #10: Cookies in JavaScript and Python

SY306 Web and Databases for Cyber Operations Set #10: Cookies in JavaScript and Python

SY306 Web and Databases for Cyber Operations Set #10: Cookies in JavaScript and Python https://www.w3schools.com/js/js_cookies.asp https://docs.python.org/3/library/http.cookies.html

138 views • 9 slides
2020 020-2021 SECC A Applicati tion R Review March 4 4, 2 2020 020 IMPORTANT D T DATE

2020 020-2021 SECC A Applicati tion R Review March 4 4, 2 2020 020 IMPORTANT D T DATE

2020 020-2021 SECC A Applicati tion R Review March 4 4, 2 2020 020 IMPORTANT D T DATE TES Applications are due by 5p.m. on April 3, 2020 For an initial review. Secondary and Final Review April 24, 2020 All corrective

344 views • 6 slides
Curricular Practical Training (CPT) How Do I Obtain CPT Authorization? HOW DO I OBTAIN CPT

Curricular Practical Training (CPT) How Do I Obtain CPT Authorization? HOW DO I OBTAIN CPT

Curricular Practical Training (CPT) How Do I Obtain CPT Authorization? HOW DO I OBTAIN CPT AUTHORIZATION? 1. Register for and attend a MANDATORY CPT Information Session. You can register and find dates on Handshake by Mid-February YOU

320 views • 17 slides

More recommend