Open & Secure: Novel Sandboxing Technique for Any Open Source Library
Gal Elbaz
BSides NYC 2024 · Day 1 · Tech - Blue
In this compelling talk at BSides NYC, Gal Elbaz, CTO and co-founder of Oligo Security, unveiled a groundbreaking approach to securing the ubiquitous world of open-source software. The presentation, titled "Open & Secure: Novel Sandboxing Technique for Any Open Source Library," addresses a critical vulnerability in modern application development: the inherent trust placed in third-party code. Elbaz highlights how a single vulnerability in an open-source package can grant an attacker full control over an application, simply because these libraries inherit all of the host application's permissions.
AI review
Competent eBPF-for-runtime-security talk from a credible speaker with real zero-day chops. The core idea — behavioral baselining of OSS libraries via eBPF to catch deviations without signatures — is sound and practically motivated, but the technique isn't novel enough to headline: Falco, Tetragon, and Aqua have been doing eBPF-based behavioral enforcement in production for years, and KRSI/LSM+eBPF is well-documented territory. The XZ backdoor walkthrough is a clean illustrative example, but the skipped live demo and the vendor-adjacent framing blunt what could have been a sharper research…