Subgraph OS - Hardening a Linux Desktop

Explore a comprehensive conference talk on Subgraph OS, a hardened Linux desktop designed to resist network and malware attacks. Delve into the operating system's key features, including a hardened kernel, application sandboxing with per-application network rules, an application firewall, and extensive security monitoring and alerting. Learn about the project's overall design, goals, and progress, with a detailed focus on the sandboxing implementation. Gain insights into adversary-resistant computing, exploit mitigation techniques, and strategic goals for enhancing desktop security. Watch a demonstration of Subgraph OS in action and understand how it aims to provide a more secure computing environment for users.

Introduction
Core Impact
Logo
Conceptual Diagram
Adversary Resistant Computing
Why Start the Project
High Level Goals
Kernel
Sandbox
VPN Firewall
Red column
Exploit mitigation
Why is exploit mitigation important
Rob
Linux Kernel
Golang
Koi
GR Security
Oz
Sandbox Policy
Application Privileges
Runtime Profiler
BPF
Firefox
Profiler
Networking
GPG
Sandboxes
Armor
Firewall
Sandbox awareness
TLS Guard
Tor
Event Notifier
Strategic Goal
Demo