Are all BSDs are created equally? A survey of BSD kerne
Comparative security audit of NetBSD, OpenBSD, and FreeBSD kernels to identify vulnerability patterns.
Summary
Research Question
Given limited security kernel bug advisories released annually, the question arises: why are there so few BSD kernel bugs compared to other systems? Limited and outdated sources make this difficult to answer.
Audit Methodology
Active investigation and auditing is conducted across all 3 major BSD distributions: NetBSD, OpenBSD, and FreeBSD. Code review, fuzzing, and runtime testing target specific areas where bugs are likely to be found.
Research Process
Detailed investigation precedes thorough code review in candidate areas. Samples and demos illustrate findings. The presentation covers bug discovery methodology and results across the three distributions.
Comparative Analysis
The presentation identifies the clear winner and loser among BSD distributions based on bug findings. Code quality observations are detailed with pointers for improvement. The presentation answers the question of why so few kernel bug advisories exist compared to other operating systems.
Related talks
DragonJAR - Hacking y Seguridad Informática·1 hr 3 min
Demonstrates freeBSD Insecure by default and evaluates key implications for security practitioners.
Ekoparty Security Conference·46 min
Provides #Eko2020 BSDar: Instalación, configuración y administración de OpenBSD en una VM (hands-on) and evaluates key implications for security practitioners.
Ekoparty Security Conference·21 min
Explores #Eko2020 BSDar: Introducción al mundo BSD and evaluates key implications for security practitioners.