A Course Project

[Valdis.Kletnieks at vt.edu]

On Wed, 24 Sep 2014 11:12:55 -0400, El Mouatez Billah Karbab said:

> I am student in Concordia university Montreal, and I have a course about
> network security. The professor of this course wants us to do a project in
> both the field of security research with some practical application, and I
> have chosen kernel linux.
>
> I am looking for a problem to solve has a relation with network security
> and cryptography.
>
> I will be grateful if you give me any hints or ideas for my project.

Unfortunately, this may be difficult - a lot of the interesting stuff
(CISPO labelling, NFS labelling) is already done, and there's not a lot
of low-hanging fruit that can be successfully attacked in the context of
a 3-credit class by people who aren't already kernel hackers. (Most of the
really interesting stuff is usually done in userspace)

Something that could be interesting and doable in the time alloted is taking
the 'ipisforif' iptables match, which is old code with serious locking
problems, and fixing it so it can be upstreamed.

http://comments.gmane.org/gmane.comp.security.firewalls.netfilter.devel/15879

Also, this:

http://lists.netfilter.org/pipermail/netfilter-devel/2006-May/024613.html
http://lists.netfilter.org/pipermail/netfilter-devel/2006-May/024611.html
http://lists.netfilter.org/pipermail/netfilter-devel/2006-May/024612.html
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 848 bytes
Desc: not available
Url : http://lists.kernelnewbies.org/pipermail/kernelnewbies/attachments/20140924/4eeb7773/attachment.bin