ReAssure & SELinux Jacques Thomas, Pascal Meunier, Patrick - - PowerPoint PPT Presentation

reassure selinux
SMART_READER_LITE
LIVE PREVIEW

ReAssure & SELinux Jacques Thomas, Pascal Meunier, Patrick - - PowerPoint PPT Presentation

ReAssure & SELinux Jacques Thomas, Pascal Meunier, Patrick Eugster, and Jan Vitek ReAssure Firewall Image Server Managed Switch Experimental boxes Deploying VLAN 1 VLAN 2 Experimenting ! VLAN 1 VM VM VLAN 2 VM https:/


slide-1
SLIDE 1

ReAssure & SELinux

Jacques Thomas, Pascal Meunier, Patrick Eugster, and Jan Vitek

slide-2
SLIDE 2

ReAssure

Firewall Image Server Managed Switch Experimental boxes

slide-3
SLIDE 3

VLAN 1 VLAN 2

Deploying

slide-4
SLIDE 4

VLAN 1

Experimenting !

VLAN 2 VM VM VM

slide-5
SLIDE 5

https:/ /reassure.cerias.purdue.edu

Request Account Pascal Meunier

slide-6
SLIDE 6

Virtual Machines

SELinux

Virtual Machines, Virtual Security ?

VM VM

slide-7
SLIDE 7

Accommodative Mandatory Access Control

Capitalize on SELinux mechanisms Administrative model for SELinux Custom experiments without VM

slide-8
SLIDE 8

Healthy Testbed

SELinux in. Malware out.

SELinux

slide-9
SLIDE 9

Questions

When is a machine considered clean ? How does our SELinux admin model work ? Interesting for GENI ? Why SELinux ?

Thank you

jthomas@cs.purdue.edu