Presentations and Papers

Presentations

2001 Linux Kernel Summit

• Security-Enhanced Linux, 2001.

Intros, Tutorials, and Retrospectives

• Integrating Flexible Support for Security Policies into the Linux Operating System, 2005.

• Type Enforcement, Flask & SELinux, 2007.

• Introduction to SELinux, 2010.

• Demystifying SELinux, OSCON 2013.

• Demystifying SELinux Part Two, OSCON 2014.

• Security-Enhanced Linux for Mere Mortals, Red Hat Summit 2018.

• Retrospective: 26 Years of Flexible MAC Slides Video, Linux Security Summit North America 2019.

• Retrospective: 30 Years of Cybersecurity R&D, Hot Topics in the Science of Security (HotSOS) 2024.

• SELinux All the Way Down: Namespaces for SELinux, Linux Security Summit North America 2025.

SELinux for Android

• Laying a Secure Foundation for Mobile Devices, 2013 Network and Distributed System Security (NDSS) Symposium.

• Security Enhanced Android: Bringing Flexible MAC to Android, 2013 Network and Distributed System Security (NDSS) Symposium.

• Security Enhancements for Android, 2014 Android Builders Summit.

• Protecting the Android TCB with SELinux, 2014 Linux Security Summit.

• SELinux in Android Lollipop and Marshmallow, 2015 Linux Security Summit.

• Honey, I Shrunk the Attack Surface - Adventures in Android Security Hardening, 2017 Black Hat USA.

• SELinux in Android Oreo or: How I Learned to Stop Worrying and Love Attributes, 2017 Linux Security Summit.

State of SELinux semi-annual presentations from Linux Security Summit (LSS)

• https://paul-moore.com/presentations

Papers

Two background papers that provide the motivation and explain the underlying security architecture that SELinux embodies.

• The Inevitability of Failure: The Flawed Assumption of Security in Modern Computing Environments, 21st National Information Systems Security Conference (NISSC), 1998.

• The Flask Security Architecture: System Support for Diverse Security Policies, 8th USENIX Security Symposium, 1999.

Papers describing the original SELinux design and reference implementation.

• Integrating Flexible Support for Security Policies into the Linux Operating System, 2001 USENIX Annual Technical Conference.

• Meeting Critical Security Objectives with Security-Enhanced Linux, 2001 Ottawa Linux Symposium.

Papers describing the Linux Security Module (LSM) framework on which SELinux is now based.

• Linux Security Module Framework, 2002 Ottawa Linux Symposium.

• Linux Security Modules: General Security Support for the Linux Kernel, 11th USENIX Security Symposium, 2002.

Technical report describing the re-implementation of SELinux using LSM.

• Implementing SELinux as a Linux Security Module, 2001-2006.

Paper describing the initial Android SELinux reference implementation that was later adopted into mainline Android.

• Security Enhanced Android: Bringing Flexible MAC to Android, 2013 Network and Distributed System Security (NDSS) Symposium.