OpenBSD and the security diaspora

Presented at BSides Austin 2017, May 5, 2017, 10:30 a.m. (60 minutes).

In this talk, I will discuss the OpenBSD's work to continue improving the security ecosystem by introducing safe and easy-to-use library extensions like arc4random, getentropy, reallocarray, strlcat/cpy, pledge, and more. I'll discuss the porting strategies for these extensions, and effects that the LibreSSL and other OpenBSD sub-projects have had on the larger operating system ecosystem, as others adopt OpenBSD extensions into their own systems. There will be some hits, some misses, and some open questions for the future and the relations between de-facto and POSIX standards.

Presenters:

• Brent Cook
  Brent Cook has been a software engineer for 18 years, working on hardware, firmware, OSes, and networking stacks. More recently, he is a contributor to Metasploit and OpenBSD, maintaining the portable LibreSSL and OpenNTPD projects.

Links:

• https://bsidesaustin2017.sched.com/event/AP25/openbsd-and-the-security-diaspora

Similar Presentations:

• DEF CON 15 (2007) / OpenBSD remote Exploit and another IPv6 vulnerabilities
• REcon 2005 / Improving Network Security by Adding Randomness
• Notacon 1 (2004) / Software Protection Mechanisms; Linux vs. OpenBSD