Brief CV for James Morris (Internet version) -------------------------------------------- Personal Details Email jmorris@namei.org Web http://namei.org/ Australian citizen residing in Sydney, Australia. Current Role Consulting Member Of Technical Staff Oracle Corporation Australia Pty Limited Current Responsibilities o Manager of the Oracle mainline Linux kernel engineering team o Linux kernel security subsystem maintainer o Lead organizer of the Linux Security Summit Linux Kernel Development Background o Created Multi-Category Security (MCS), sVirt (secure virtualization for Linux) and Secmark (security labeling of network packets with iptables). o Original design of Labeled NFS, now an IETF draft o Lead kernel developer on the team at Red Hat which delivered SELinux to market, critically driving government adoption of enterprise Linux o Linux kernel co-maintainer of SELinux and networking o Author of the kernel cryptographic API o Member of the original Netfilter core team o Developer on the Linux Security Modules (LSM) project o Miscellaneous kernel development including work on PCI device drivers, VFS, virtualization and IPSec Publications o "Have You Driven an SELinux Lately?", Proceedings of The Linux Symposium, July 2008. o "Networking in NSA Security-Enhanced Linux", Linux Journal, January 2005. o "Filesystem Labeling in SELinux", Linux Journal, October 2004. o "The Linux Kernel Cryptographic API", Linux Journal, 2003. o "Linux Security Modules: General Security Support for the Linux Kernel", C. Wright, C. Cowan, S. Smalley, J. Morris, G. Kroah-Hartman. Usenix Security 2002. o "Linux Security Module Framework", C. Wright, C. Cowan, S. Smalley, J. Morris, G. Kroah-Hartman. 2002 Ottawa Linux Symposium. o Co-author of the Australian Personal Computer Magazine Linux Pocketbook (1998) o Miscellaneous Linux articles for Australian Personal Computer Magazine (1997-1999) (Also see more recently self-published articles in my blog). Selected Talks o China Linux Kernel Developer Conference 2012. Beijing, China (Keynote); o LinuxCon Japan 2012. Yokohama, Japan. - "State of the Linux Security Subsystem" o Linux Kernel Summit 2012. San Diego, CA, USA. - "Status report for the Linux Security Subsystem" o Linux Kernel Summit 2011. Prague, Czech Republic. - "Report on the 2011 Linux Security Summit" o FOSS.IN/2010. Bangalore, India (Keynote Talk); LinuxCon 2010. Boston, Massachusetts, USA. - "Linux Kernel Security: Adapting 1960s Technology to Meet 21st Century Threats" o Linux Conference Australia 2010. Wellington, NZ; FOSS.MY/2009. Kuala Lumpur, Malaysa; FOSS.IN/2009. Bangalore, India. - "Secure and Simple Sandboxing in SELinux" o LinuxCon 2009. Portland, Oregon, USA. - "Adding Extended Attribute Support to NFS" o Kernel Conference Australia 2009. Brisbane, Australia. - "Linux Kernel Security Overview" o Linux.conf.au 2009. Hobart, Australia. - "sVirt: Hardening Linux Virtualization with Mandatory Access Control" o FOSS.IN/2008. Bangalore, India; FOSS.MY/2008. Kuala Lumpur, Malaysia. - "Anatomy of Fedora Kiosk Mode" o 2008 Linux Symposium, Ottawa, Canada. - "Have You Driven an SELinux Lately?" o 8th Linux Foundation Japan Symposium (2008). Tokyo, Japan. - "Overview of the SELinux Project" o FOSS.IN/2007. Bangalore, India. - "How and Why You Should Be a Kernel Hacker" - "The State of SELinux" o Linux Kernel Networking Summit 2006 (Netconf), Tokyo, Japan. - "Better IPsec SA Resolution" - "OLPC Networking Overview" - "Mandatory Access Control Networking Update" o FOSS.IN/2005. Bangalore, India. - "Overview of NSA Security Enhanced Linux" - "SELinux Kernel Internals and Architecture" o Linux Kernel Networking Summit, 2005. Montréal, Canada. - "Directions in SELinux Networking" o SELinux Symposium 2004. Baltimore, USA. - "Architecture of SELinux Network Access Controls" o Linux Kernel Summit 2004. Ottawa, Canada. - "Directions in Linux Kernel Security" o Linux Kernel Networking Summit, 2004. Portland, Oregon, USA. - "Cryptographic Hardware Support for the Linux Kernel" Miscellaneous o US patent applications: 11/564,774 and 12/324,415 o Lead organizer of the Linux Security Summit 2010-current o Member of programme committee for the 2011 Linux Plumbers Conference o 'Runner' of the Security Track at Linux Plumbers Conference 2009, and member of the general proposal review team o Lead organizer for the SELinux Developer Summit 2008 and 2009 o Member of Technical Committee for the SELinux Symposium (2005-2007) o Maintainer of community web sites: - SELinux News (http://www.selinuxnews.org/wp/) - Planet SELinux (http://www.selinuxnews.org/planet/) - SELinux Project (http://selinuxproject.org/) - Linux Kernel Security Wiki (http://security.wiki.kernel.org/) Prior Career Roles o 2003 - 2012: Principal Software Engineer, Red Hat Ltd. SELinux kernel lead. o 1996 - 2003: Independent Consultant, Intercode Pty Ltd. Linux systems development and electronic commerce. o 1994 - 1996: Analyst/Programmer, Ingenico International (Pacific) Pty Ltd. Developed software for secure embedded terminals (EFTPOS, smartcards). o 1993: Office Manager/Technical Support/R&D, Av-Comm Pty Ltd. Communications (satellite and aviation) consultancy.