The Future of Code Integrity Enforcement - Extending IMA

Explore the future of code integrity enforcement in this 25-minute conference talk by Fan Wu from Microsoft. Delve into Integrity Policy Enforcement (IPE) and the limitations of IMA Appraise. Examine the implementation of DM Verity Support prototype and new control interfaces prototype. Witness a demonstration and discuss the difficulties and limitations of extending IMA. Gain insights into potential advancements in Linux security mechanisms and their implications for system integrity.

Intro
Integrity Policy Enforcement (IPE)
IMA Appraise Limitations
Implementation of DM Verity Support protype
IMA Policy control Limitations
Implementation of new control interfaces prototype
Demo
IMA Extending Difficulties and its Limitations
Discussion