1 - 3 September | Vancouver, Canada BC View More Details & Registration The schedule is subject to change, so please check back before the event for the most up-to-date information.
Please note that all session times are listed below in Pacific Daylight Time (PDT), UTC-7.
Sign up or log in to add sessions to your schedule and sync them to your phone or calendar.
A critical part of secure system design is isolating data plane connectivity between different sensitivity domains. This is sound security practice because crossing data planes is tricky for attackers, however it also makes life difficult for end users - sometimes you want to connect to the Internet without walking to a different terminal. We have implemented a software based architecture that provides a secure method to separate the display source from a different security domain and allow real time user interaction without compromising on either security or usability. seL4 is a critical part of this architecture by providing a framework for building a set of different interacting protection domains separated by a trusted, minimal footprint, kernel broker - the only software component in our architecture with access to both security domains. This has many applications for use cases to allow mediated interaction across a security domain boundary without opening up unfettered data plane attack surface.