Active Projects - Revision history

KeesCook: /* ASLR for kernel code */

2015-11-04T22:46:25Z

ASLR for kernel code

← Older revision		Revision as of 22:46, 4 November 2015
Line 57:		Line 57:
	== ASLR for kernel code ==		== ASLR for kernel code ==

	Project Owner: Google		Kernel text and module base address now randomized on x86. Next will be arm64 and arm.

			Project Owner: Google, Linaro

CoreyBryant: /* Valgrind */

2012-11-20T20:39:56Z

Valgrind

← Older revision		Revision as of 20:39, 20 November 2012
Line 27:		Line 27:
	= Dynamic Analysis =		= Dynamic Analysis =

	== ~~Valgrind~~ ==		== kmemcheck, kmemleak ==

	[http://~~valgrind~~.~~org~~/ ~~Valgrind~~] ~~is an instrumentation framework for building dynamic~~ analysis ~~tools and there are Valgrind tools for automatically detecting many memory management and threading bugs~~.		Linux Kernel debugging features for detecting memory issues.

			Run by: ?

			== KEDR ==

			[http://kedr.berlios.de/ KEDR] provides runtime analysis of Linux kernel modules including device drivers, file system modules, etc.

	Run by: ?		Run by: ?

CoreyBryant at 18:03, 15 November 2012

2012-11-15T18:03:59Z

← Older revision		Revision as of 18:03, 15 November 2012
Line 1:		Line 1:
	The [[Linux Security Workgroup]] has put together this page in an effort to bring the Linux security community together in hardening the Linux Kernel and to help prevent duplication of efforts. There are a number of active Linux Kernel hardening projects and this page gives details on some of them~~. If you have an update for this page, please email the kernel-hardening mailing list at kernel-hardening@lists.openwall.com~~.		The [[Linux Security Workgroup]] has put together this page in an effort to bring the Linux security community together in hardening the Linux Kernel and to help prevent duplication of efforts. There are a number of active Linux Kernel hardening projects and this page gives details on some of them.

	= Static Analysis =		= Static Analysis =

CoreyBryant at 22:14, 14 November 2012

2012-11-14T22:14:00Z

← Older revision		Revision as of 22:14, 14 November 2012
Line 15:		Line 15:
	[http://en.wikipedia.org/wiki/Coverity Coverity] provides static analysis tools for C, C++, and other languages. Red Hat's Coverity license allows results to be shared with upstream projects.		[http://en.wikipedia.org/wiki/Coverity Coverity] provides static analysis tools for C, C++, and other languages. Red Hat's Coverity license allows results to be shared with upstream projects.

	Run by:		Run by: Paul Moore at Red Hat against what trees?
	* Paul Moore at Red Hat against what trees?

	== Smatch ==		== Smatch ==
Line 32:		Line 31:
	[http://valgrind.org/ Valgrind] is an instrumentation framework for building dynamic analysis tools and there are Valgrind tools for automatically detecting many memory management and threading bugs.		[http://valgrind.org/ Valgrind] is an instrumentation framework for building dynamic analysis tools and there are Valgrind tools for automatically detecting many memory management and threading bugs.

	Run by:		Run by: ?
	* ?

	= Fuzz Testing =		= Fuzz Testing =
Line 41:		Line 39:
	[http://codemonkey.org.uk/projects/trinity/ Trinity] is a Linux system call fuzzer.		[http://codemonkey.org.uk/projects/trinity/ Trinity] is a Linux system call fuzzer.

	Run by:		Run by: Dave Jones and Fengguang Wu
	* Dave Jones and Fengguang Wu ~~are running Trinity.~~

	== Metasploit ==		== Metasploit ==
Line 48:		Line 45:
	[http://www.metasploit.com/ Metasploit] software is used for identifying security issues. It includes many capabilities, including fuzzer support.		[http://www.metasploit.com/ Metasploit] software is used for identifying security issues. It includes many capabilities, including fuzzer support.

	Run by:		Run by: ?
	* ?

	= Development =		= Development =
Line 55:		Line 51:
	== ASLR for kernel code ==		== ASLR for kernel code ==

	Owner: Google		Project Owner: Google

CoreyBryant at 22:13, 14 November 2012

2012-11-14T22:13:03Z

← Older revision		Revision as of 22:13, 14 November 2012
Line 53:		Line 53:
	= Development =		= Development =

	* ASLR for kernel code		== ASLR for kernel code ==

	Owner: Google		Owner: Google

CoreyBryant at 22:12, 14 November 2012

2012-11-14T22:12:03Z

← Older revision		Revision as of 22:12, 14 November 2012
Line 53:		Line 53:
	= Development =		= Development =

	* ASLR for kernel code (Google)		* ASLR for kernel code
			Owner: Google

CoreyBryant at 22:11, 14 November 2012

2012-11-14T22:11:24Z

← Older revision		Revision as of 22:11, 14 November 2012
Line 46:		Line 46:
	== Metasploit ==		== Metasploit ==

	[http://www.metasploit.com/ Metasploit] software is used for identifying security issues. It includes many capabilities, including ~~fuzz testing~~.		[http://www.metasploit.com/ Metasploit] software is used for identifying security issues. It includes many capabilities, including fuzzer support.

	Run by:		Run by:

CoreyBryant at 22:10, 14 November 2012

2012-11-14T22:10:22Z

← Older revision		Revision as of 22:10, 14 November 2012
Line 31:		Line 31:

	[http://valgrind.org/ Valgrind] is an instrumentation framework for building dynamic analysis tools and there are Valgrind tools for automatically detecting many memory management and threading bugs.		[http://valgrind.org/ Valgrind] is an instrumentation framework for building dynamic analysis tools and there are Valgrind tools for automatically detecting many memory management and threading bugs.

			Run by:
			* ?

	= Fuzz Testing =		= Fuzz Testing =

CoreyBryant at 22:09, 14 November 2012

2012-11-14T22:09:46Z

← Older revision		Revision as of 22:09, 14 November 2012
Line 25:		Line 25:
	* Dan Carpenter - Running against linux-next x86_64 allmodconfig		* Dan Carpenter - Running against linux-next x86_64 allmodconfig
	* Fengguang Wu - Running against what trees?		* Fengguang Wu - Running against what trees?

			= Dynamic Analysis =

			== Valgrind ==

			[http://valgrind.org/ Valgrind] is an instrumentation framework for building dynamic analysis tools and there are Valgrind tools for automatically detecting many memory management and threading bugs.

	= Fuzz Testing =		= Fuzz Testing =
Line 34:		Line 40:
	Run by:		Run by:
	* Dave Jones and Fengguang Wu are running Trinity.		* Dave Jones and Fengguang Wu are running Trinity.

			== Metasploit ==

			[http://www.metasploit.com/ Metasploit] software is used for identifying security issues. It includes many capabilities, including fuzz testing.

			Run by:
			* ?

	= Development =		= Development =

	* ASLR for kernel code (Google)		* ASLR for kernel code (Google)

CoreyBryant at 19:44, 14 November 2012

2012-11-14T19:44:56Z

← Older revision		Revision as of 19:44, 14 November 2012
Line 34:		Line 34:
	Run by:		Run by:
	* Dave Jones and Fengguang Wu are running Trinity.		* Dave Jones and Fengguang Wu are running Trinity.

			= Development =

			* ASLR for kernel code (Google)