corpus.blog
41554 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a08c62-d267-72fe-b989-1b79aefab30c

Sandboxing Untrusted Containers with gVisor: Lessons from G-Fuzz Vulnerability Research

williamzujkowski.github.io · published 25 September 2024

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at williamzujkowski.github.io Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
Links from this post
28
Words captured
2,651

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://nvd.nist.gov/vuln/detail/CVE-2024-21626
nvd.nist.gov
https://www.docker.com/blog/docker-security-advisory-multiple-vulnerabilities-in-runc-buildkit-and-moby/
docker.com
https://arxiv.org/abs/2409.13139
arxiv.org
Docker Runtime Security Hardening with Linux Security Modules Read at the source ↗
williamzujkowski.github.io
https://snyk.io/blog/leaky-vessels-docker-runc-container-breakout-vulnerabilities/
snyk.io
https://man7.org/linux/man-pages/man7/namespaces.7.html
man7.org
https://www.kernel.org/doc/Documentation/cgroup-v2.txt
kernel.org
https://www.kernel.org/doc/html/latest/userspace-api/seccomp_filter.html
kernel.org
https://9p.io/magic/man2html/5/intro
9p.io
https://github.com/google/syzkaller
github.com
https://k3s.io/
k3s.io
https://kubernetes.io/docs/concepts/containers/runtime-class/
kubernetes.io
https://linuxcontainers.org/incus/
linuxcontainers.org
Zero Trust Architecture: A Practical Implementation Guide Read at the source ↗
williamzujkowski.github.io
https://katacontainers.io/
katacontainers.io
https://firecracker-microvm.github.io/
firecracker-microvm.github.io
Building Your Own MITRE ATT&CK Threat Intelligence Dashboard Read at the source ↗
williamzujkowski.github.io
https://opensource.googleblog.com/2023/04/gvisor-improves-performance-with-root-filesystem-overlay.html
opensource.googleblog.com
https://gvisor.dev/blog/2024/02/01/seccomp/
gvisor.dev
https://gvisor.dev/docs/architecture_guide/performance/
gvisor.dev
https://github.com/kernelslacker/trinity
github.com
https://falco.org/
falco.org
https://www.openpolicyagent.org/
openpolicyagent.org
https://github.com/cilium/tetragon
github.com
https://gvisor.dev/docs/
gvisor.dev
https://www.usenix.org/system/files/hotcloud19-paper-young.pdf
usenix.org
https://gvisor.dev/blog/2021/12/02/running-gvisor-in-production-at-scale-in-ant/
gvisor.dev
https://cheatsheetseries.owasp.org/cheatsheets/Docker_Security_Cheat_Sheet.html
cheatsheetseries.owasp.org