2013-08 DevSummit Security session

• What do we want for the long term?
• What can we do in time for 10.0?
• Pawel's attachtimes patch for early entropy gathering
• random_adaptor framework
• HWRNG support:
  • As an entropy source for Yarrow / Fortuna
  • As a backend for /dev/random
  • Selectable mixer

• Walkthrough actual state of security mitigation in FreeBSD
  • ASLR (exprimental patches on people.freebsd.org/~sbz/aslr)
  • DEP (nxstack)
  • Counter recent exploits (ptrace etc..)
  • redzone
  • …

Topics:

• Using CPE in VuXML

• Security Testing and Operations
  • Security infrastructure (PKI)
  • Response to incident quickly (why not having a security operation team ? (like dedicated soc on behalf of clusteradm)
• …