Attacking the Linux Kernel (2-days course)

Andrey Konovalov

Andrey Konovalov

Xairy Labs

Abstract

This training guides researchers through the field of Linux kernel security. In a series of exercise-driven labs, the training explores the process of finding, assessing, and exploiting kernel bugs in modern Linux distributions on the x86-64 architecture.

Besides providing a foundation for writing Linux kernel exploits, the training covers the no-less important areas of finding kernel bugs and evaluating their security impact. This includes chapters on using dynamic bug-finding tools and writing custom fuzzers.

The training is targeted at beginners but covers a few intermediate topics as well

Trainer Info

Andrey Konovalov

Andrey Konovalov is a Security Researcher focusing on the Linux kernel and a Managing Director at Xairy Labs.

Andrey found multiple zero-day bugs in the Linux kernel and published proof-of-concept exploits to demonstrate the impact. Andrey is a contributor to several security-related Linux kernel subsystems and tools: KASAN — a fast dynamic bug detector, syzkaller — a production-grade kernel fuzzer, and Arm Memory Tagging Extension — an exploit mitigation.

Andrey spoke at security conferences such as OffensiveCon, Android Security Symposium, Linux Security Summit, LinuxCon North America, and PHDays. Andrey also maintains a collection of Linux kernel security–related materials at and a channel on Linux kernel security.

See xairy.io for Andrey's articles, talks, and projects.

Organizer

Organizer Logo

Partner Company

Partner Company Logo

Sponsors

POC Conference is made possible thanks to the support of our sponsors. Their continued partnership has played a vital role in sustaining and growing POC over the years. We sincerely thank them for their contribution.


Sponsors

Supporting Friends

Supporting Friends