Okay, we're going to basically conclude the morning session with a speaker, Julia Gomez Candela, who is here from Infonavit and who will present a talk about Infonavit and the work more specifically from the perspective of working there. Julia is an architect. She's currently head of Housing Quality Improvement in the Research Center for Sustainable Development, or SIDS, which you've seen referenced this morning, at the National Workers Housing Fund Institute, or better known as Infonavit. I've had the pleasure to work with Julia now for nearly two years, also along with Carlos Sudilio in Infonavit on several projects, also with some of the colleagues who presented this morning. And her sort of daily tasks at any one time are of course talking with all of the architects, but also being on sites, working with contractors and navigating different types of situations, often rather disastrous. And I've had several occasions in trying to reach her to find out she's not in fact there in the office, but out on site and working on weekends. It's, I think, a very tireless job and effort that she undertakes with a lot of responsibility. So it's a great pleasure for us to have you here today. And I welcome you to the podium. Thank you, Hilary. And I will read because I don't speak, well, the English, but I will do my best. First of all, thank you, Hilary and Columbia for the invitation. This is the first time someone invites me to talk in a university. I am very excited and very happy and scared to that. I would like to thank Laila and Lucille for all the help and the travel and everything. I would like to apologize for my English again. I was born in Ecuador, raised in Mexico, and studied in Spain, so you can imagine. I will talk about what we do in front of it, what is the research center for sustainable development. I will show you some projects and our present housing laboratory. Very often, affordable housing is inadequate, inadequate housing is usually unaffordable. As they have been saying, the Mexican constitution indicates in its fourth article that the whole family has the right to enjoy decent and decorous housing. I am speaking of behalf of an amazing team, which is led by Carlos Cedillo, and then it's Jere and Armando. Armando used to study here, but we are like a big family, so I am only here for a short time. We'd like to start our presentations with these images that they have been talking about that all the morning, so I will go through. When we arrived at Infonavit in 2013, the housing problem in Mexico, and it is still something terrible, is repetition, the fireness of the houses that they don't see where they are placed. We have amazing territory in Mexico, and they don't pay attention. All the houses are facing the other way of the mountain, for instance, and then we have building houses in terrible sites with danger and everything. Well, what is Infonavit? The National Workers Housing Fund Institute, or Infonavit, is an autonomous fiscal entity founded in 1972. It was created as a social service organization to administer the National Housing Fund resources, as well as to establish and operate a financial system that allows its account holders to obtain affordable housing. It is structure comprises an equal representation of the workers, the private sector, and the government sector. Since 1992, Infonavit is part of the retirement-saving system, where the employer's contributions are registered in the Bidwall workers' account, and at the time of retirement, the balance is added to the rest of the pensionary monetary resources. So we give affordable housing and we help for them when you retire with the money. Okay, here it is. Our mission is to generate value for workers, their families, and the communities through housing and saving solutions that allow the workers to increase their equity and quality of life in a sustainable manner for a dignified retirement. We are recognized as a Mexican institution that has an autonomy, social solidarity, and tripartite model. How it works. We work to empower each individual entitled to make the best decisions about the confirmation of their equity and better quality of life. We provide financial products in order that each account holder has access to a quality housing solution. The quality is the main focus right now. We provide efficient returns to the account holder's savings to facilitate access to a home and complement savings for the retirement. So Infonavit is an autonomous fiscal entity that administers the housing fund for workers to buy, build, or improve homes, or maybe you can pay back a previously contracted mortgage. Well, some numbers I will give you, well you can read them, otherwise I can read them for you, but Infonavit has a flexibility to overcome challenges over time. So from 1970 to 1980, Infonavit was a market maker participating in both construction and housing financing due to the lack of supply and from buying land to individual credit lending. In 1990, Infonavit became the social mortgage lender leaving housing construction and consolidating as a social mortgage lender. It financed finished dwellings instead of constructing houses. It also developed and implemented dwelling construction rules that was before. From 2001 up to 2012, Infonavit helped in the reduction of housing deficit, consolidating the financial processes by accelerating its role as mortgage lender. All the normative role was transferred to state and municipalities. Now, nowadays, where our institutional strategy evolves to attend housing needs through financial solutions that improve quality of life, and our housing model is orientated to development of competitive and sustainable cities. Carlos, our boss says that if we improve houses, we improve cities. I work in the research center for sustainable development, we call it SEEDS, and as I told you, we are a family of Carlos who is the leader and then three of us. We promote sustainable development of housing financed by Infonavit through research and the implementation of strategies that encourage the integral development of community, maximizing its social and environmental benefits. We are an international entity that facilitates the development of social housing committed to sustainable development. I will go to the next one. What we do, as I told you, we are divided in three big groups. The first one is number 71 that is for the statutes of our institute and its improvement of housing quality and equity value that adds me. Then it's Jere who studied in Yale University who does the applied research and dissemination of methods, and then it's Armando Hashimoto who studied here and he's in charge of the inter-institutional collaboration. Here how it works. In the 71 that it's me, we propose and establish strategies to promote sustainable attributes to be applied to houses with the objective to increase quality of housing and life of the inhabitants. Jere, which is a 72, developed and published applied research, processes, strategies, public policy methods, and technologies that will facilitate sustainability on housing. And Hashi, which is 73, manage and establish a strategic agenda to secure a strong link between the center and the public private sector and also academic institutions. I will show you just a few projects and then I will go to the housing laboratory which I think it's what we are now more interested. We did this project of mejora y ampliación, which is improvement and enlargement, that in order to reduce overcrowding that is one of the most serious social problems in Mexico, Lacedato, which is a ministry of agrarian, territorial, and urban development implemented a strategy called un cuarto más or an additional room that we coordinated at Infornavit and in collaboration with five architects and we developed these five different prototypes to enlarge and improve existing houses with a minimum of nine square meters considering structural soundness affordable price and space efficiency. Here you have some images. All our projects and everything is on our library so if you want further information you can download it from there. Other of our projects is called They already talk about it. This project seeks to find combat strategies to stop the expansion of urban sprawl in different Mexican cities. We create 32 proposals that aims to reconfigure the urban fabric through the reuse of abandoned homes, achieving efficient and compact cities that provide a better quality of life for these inhabitants. So you have here some examples of this. Another of our projects is Regeneración Urbana retrofit it as a lot of names like Mejorando la Unidad, Proyecto Integral de Regeneración Urban y Social, it's a lot of names but it's the same thing that Infornavit in cooperation with architects and other allies implemented this project to carry out physical and social interventions in a preventive manner in housing complexes financed by Infornavit. Here are some pictures of the last four that we five projects that we did last year. This program seeks to retrofit the urban image and the community integration through physical interventions generated from collaborative design processes in housing developments where there is a high concentration of recovered or abandoned houses. I will put on a video that Francisco Pardo an architect did of one of these interventions. It's del territorio al habitante which is already been talked about. This project aims to improve the quality of self-production housing financed by the institute. We did 84 different proposals and through this project we seek to improve living standards for those who receive the mortgage loan intended for beneficiaries with low income and for lower income. Infornavit offer an amount destined for the construction of housing on a land already owned by the account holder. The self-production of housing consists of a process of construction and distribution of housing under the direct control of the user individually or collectively. Here we have the panel of 82 of these 84 proposals from 9-11 which is the first one to Sago architecture. It was an amazing project. We really enjoy it. And now I will talk about the housing laboratory in Apan. Since its creation Infornavit has researched methods and techniques to create affordable dignified and durable housing while optimizing design and construction. In 1982 some housing prototypes were built in La Greca since Infornavit used to build and buy land. They have a lot of available land across the country. La Greca was one of them and in this place they analyze experimental methods of construction and water saving. This showed the importance of research leading to the creation of the first Infornavit Housing Research and Experimental Experimentation Center that operated from 1989 to 1992. This previous center was focused on aspects of I won't be able to say that, and water saving and the use of alternative energies aimed to preserve ecological balance. Nowadays it is of great importance to return to this research in order to improve the quality of the houses that we financed. This is the main reason why Infornavit in our new Housing Research and Practical Experimentation Laboratory was created as an innovation space where the following activities will be carried out. We will support research for housing design. We will research on rationalized construction systems. We will research on water savings and alternative energies and ecotechnologies and it will be a permanent exhibition of research projects. This housing lab will follow up and prove the empirical knowledge that allows workers to improve their housing conditions and increase equity while having a better quality of life. So for this we invited Hilary and Michael from Moz to help us to choose the best prototypes from del territorio al habitante. They also help us to design the master plan and the welcome center. Here are some pictures from the process of selection. First in Mexico in our offices and then here in New York. That is Carlos. There it is. Okay. Then the project is in Apan. Hidalgo is a small town in the state of Hidalgo in Central Mexico, Northeast Mexico City and is meant to develop both new prototypes for single family houses and a new model of urbanism. The master plan followed the traditional processes of designing urban garden but it was re-engineered. Moz was asked to think about how all these prototypes could coexist together in a master plan for a new type of urbanism. Moz also designed the main entrance to this lab. It is a linear building hosting services for this new facility. Moz's proposal is based on a very different model of urbanism related much more to the notion of a vernacular or pictures ensemble. Here things connect via immediate relationships and not through the repetition of exceptional buildings. The most important thing is the space in between. So how do you improve the quality of architecture and induce a new sensibility toward material construction and landscape techniques? 32 projects were selected for their straightforward geometries and proportion. Each proposal exhibits potential for growth by aggregation, repetition or various strategies of extension, infill and addition. Some projects rethink the fundamentals of low income housing special organizations like corridors, courtyards or roofs and some rework labor and construction. Also some recast structure or material. Given the limited resources of low income housing each decision gains greater significance and has greater impact on the design and on the life of the inhabitants. I will show you some pictures of the construction processes of these prototypes. These are the 84. Then I will start with Jorge and Gabriela which I always refer as the palace because it's the biggest plot in all Apan. When architects go there they say why they have more money but no it's only the biggest plot. So Jorge and Gabriela's proposal is largely based on two minimum required elements for making a house that is the wall and the roof. The wall limits private property and the roof offers shelter from sun and rain. Then we have the Villar Chacon it's a Spanish office. I think this is the most experimental of all our houses and they understand occupation to be ephemeral. They propose housing units that doesn't construct its structure with permanent members. Its structure is clading materials of these reeling are rented. They are moved with the owner, recycled or entirely demountable. It is a system of scaffolding that envelopes all the spaces. Then we have Frida Escobedo. It's a multi-storey residence where all spaces fall under a vaulted roof. It was a disaster when I was starting to write this because I don't know how to say bóveda or temple al huevo and all the things that we are having but I hope you understand. Vaulted roof is okay. The primary element of this project is its primitive structural logic. A ground floor floor level for living and services open to the landscape on three sides ensures both private and public social interactions. All growth will occur vertically with the addition of a second story. Then we have Derek and Yashin here with a modular wood construction system that adopts the basic and familiar principles of vernacular architecture. The house is simply assembled and easily constructed. I will define it as elegant modesty. This home is immensely approachable and sociable. We have Rosana Montiel as well that should we design the traditional Morelos dwelling as a large semi-open space with multifunction roof. It is constructed with bamboo. The home is resolutely open offering minimal enclosure of living spaces while foregrounding public and private outdoor living. Then we have Suburbia. Suburbia is an office of Felipe Lorenzanz and Rodrigo Durán. They understood the housing problem as an infrastructural problem. They defined by the precarious access to basic services like potable water. This is a water house or a tank house that could have enough water to meet the weekly intake of 160 people or 35 families. Then we have Tallerda Arquitectura by Mauricio Rocha and Gabriela Carrillo. They propose a house that explores the vernacular materials like adobe and wood and construction techniques in two volumes intersecting in a portico. It was thought for Tlaxcala. Then we have Alberto Calac, Tax Arquitectura X. This hexagonal form of this house allows for aggregation in multiple orientations. Allows for abundant cross ventilation as no less than three walls on each level always remain open, oriented toward winds from any direction. The scale and orientation define its urban condition. The pre-rotation and grouping plans allow maximum flexibility. Then we have Griffin Enright. He proposed a world home. This project presents flat facade as its public front, but it has an overwhelming roof that has been difficult in construction. Then we have Tatiana Bilbao Studio from Tatiana. She plans separate program volumes around an open and enclosed courtyard. This proposal ties the private home to communal space without the undifferentiated repetition and identical of standard housing types. Most significant for this project is its social character, a result of a free organization of single program volumes around a publicly accessible primary element, which is the courtyard. Then we have Francisco Pardo. He proposed an exterior yard delimited by a standard modular fence. This fence works a community scale creating individual green space. This house has no clear front, and its primary element is a standard typological shape of like a generic house. Then we have Enrique Norden, Orten Architectos. He designed a modular metal frame structure sitting on concrete footings using standard angle connections that are efficient in cost and speed of construction. The house is also raised on this metal frame to avoid flooding. It was thought for Xochimilco. This project will accommodate some solar panels and water collection and storage systems. Then we have Sago. Sago is one of the biggest houses that we will have in Apan. It is arranged around two courtyards, one semi-public and another private. The home expands already generous interior through living spaces toward the exterior. Despite its walled edges, the house claims a more civic presence, and it will have a brightly roof. Then we have the funny proposal of Pita and Bloom, which with their familiar geometries and shapes we appear within these residents are applied to a new party wall or Medianera. I hope it's party walling is correct. In a manner that recasts typically inflexible boundaries between interior and exterior. Front and backyard, open and closed. They recuperate vernacular forms, material and constructive methods. The primary element of this house is the wall, which is almost graphic. Then we have Bernardo Gomez Pimienta or BGP. He designed with a future expansion in mind. This housing unit understands that one cannot limit or condition the characteristics and materials of the expansion. The initial constructive construction allows for significant infill, almost the triple of the initial home square footage. He devotes half of its footprint to outdoor spaces, and it's a very social project proposing commercial activities in it. Then we have Celera and Moye. They proposed a housing where all activity takes place in both interior and exterior. Every day life moves freely between enclosed interiors, semi-open roofed areas, covered terraces, and entirely open exterior spaces. It is a logic of edge-to-edge or corner-to-corner intersection that allows a freely informed arrangement of individual non-programmed volumes across the landscape. Here it is Accidental, Estudio Arquitectura, which is an office by Susana Pantoja and Gerardo Galicia. They constructed out lightweight columns and beams, allowing for easy reconfiguration and assembly. They hang everything in multiple levels from this structural frame. The home shifts ceiling heights based on programming. Spaces are separated without the extensive use of walls or doors and become more private with each level. All the unit growth, horizontal and vertical, occurs within the limits of this frame. Then we have Nuno Magregor and the Wen. It's a portico space created fluid and flexible living between interior and exterior. Its non-structural partitions allow for similar flexibility of the unit interior. It is a straightforward recuperation of vernacular house type. It's generous both in provision of the porch space and the interior layout. The master, Felix Sanchez, which is this one, Felix, begins with a basic square module that can be subdivided or multiplied. The initial building combines four of these small modules around the square central patio to create a cruciform-planned home. The house is open both at its center with a private interior courtyard and it is in the edges with publicly accessible and programmed corners. Then we have Carlos and Paloma Vera, which they propose a highly compact house and an initial seat for future growth. This proposal is designed to expand from its portico by a way of easily constructable, cheap and inhabitant-initiated additions. They use a special block called matching block, which is amazing, but it's also difficult. Here is Fernanda Canales' proposal. She proposed a house formed by a basic 35 square meter module with the ability to add additional modules, all articulated through patios. Patio dimensions are viable, determined according to the requirements of inhabitants and the desired proximity between multiple unit modules. The efficient concentration of facilities allow the organic arrangement of the dwelling and the flexible addition of modules according to future needs. The primary element is a sloped shed roof that can slop, I don't know, in either identical or opposite directions. Then we have Irene Thompson, architecture, that seeks to maximize interior architectural quality with a minimum building. It does not emphasize exterior form, but interior effects, like with a well proportioned and lead spaces. Then we have ProducTora. ProducTora, here the house is organized around three corridor access, one private, one public, and one of services. They are connected with this bolt, and all spaces are independently accessible and need not to rely on other spaces. Then we have Ricardo Agras' proposal. He organized a house around three walls running in its length, intended to reduce the cost and duration of construction by diminishing overall structure. These three walls give clear and efficient structural logic, creating a simple clear span interior. The bolted ceiling element translates the simplicity and efficiency of the building's structural system into an insulated, generously detailed interiors. Then we have Rodkin, who intends to demonstrate and develop the use of local vernacular building materials and systems while maintaining sufficient simplicity to allow from inhabitant-initiated construction. All constructive elements maintain their commercial dimensions to minimize waste. The house foregrounds passive means of environmental control, including burning portions of its facade in areas where interior light and building entry are demanded less. Then we have Táctica, which is an office by Juan Martín and Carlos Morán. They use the smallest possible number of components to achieve a greater economy of means, while using the most adaptable and modified forms possible. This is also the second biggest plot. Then we have Gaeta and Springal from Julio Gaeta and Luis Springal. The house is designed to transform the size and materiality of low-income housing while maintaining a strong relationship with its surrounding environment. This project primary element is its square shed roofed module. It was a mess. We did it last week. It was a mess. Then we have Taier Adegé from Alonso de Garay. He employed Stonewood reclaimed brick adobe and other vernacular materials. This house is composed of six modules, three of housing and three of services. Okay, we'll go faster. Taier 4M is Israel Rodríguez. I will do this proposal revolves around three by three meters structural grid. Here are some pictures. I am almost done. Then here is Cross Studio. Cross Studio is a model that is a double wall construction that assist with passive heating and cooling while full height windows and doors within each model maximize frost ventilation no matter the prevailing wind direction. I like the cold yards. Then we have Juan Carral and Victoria Bergengy. The primary element of these projects are the structure and the expansive roof that it supports. Here are some pictures as you can see it. And finally the CPP that is Alfonso de la Concha and Pablo Pérez Palacios. These proposals was thought for Coahuila. It's proximity to the U.S. by combining the typological characteristics of standard rural buildings with American one-level portico. They created this for the... Okay, now we also developed some project furnish to furnish these prototypes. We work with five industrial designers and develop these special lines of furniture to store, sleep and eat these housing prototypes. There are here are some examples of whatever. This is Ambrosi Echegaray. We have Dele Camp, Tatiana Bilbao and Fernanda Canales. And this is the Welcome Center. And while this special place will be open next November 26th, we want two people to sleep there and research in social housing. So hopefully next year you can come there and we can have this this conference there or something. You can sleep there. We can invite you. And that's it.


So, hello, welcome everyone on one of the last talk today. So it's going to be about securing the superpowers and who loaded the EVPF program, so basically auditing EVPF programs. So who is speaking today? I'm Natalia. I'm a security product lead at Isawayland and here is with me, John, who is a tetragone lead and silyum maintainer as well as staff engineer at Isawayland. So I wanted to start with the background and the motivation to this talk first. And as you already know, like EVPF is on the rise or already rose, it became one of the leading Linux kernel technology today. So more and more projects are using it under the hood for different use cases. For example, networking, observability, and security. So this is just a small subset of projects that are using EVPF, but this would give you a glimpse of what can be done in different areas. So for example, in networking, it can be used for high performance and load balancing in modern data centers as well as in cloud native environments. So one good example is Cutron, which is a high performance load balancing from Facebook that they created to replace IPVS. This is another software-based load balancing solution. So they switched actually to EVPF and so a massive performance increase. This is actually open source, so you can actually go to the GitHub repository and check it out. It's Facebook specific, but good for other Linux-based software infrastructure systems as well. So we have Celium, which is providing networking, load balancing, security for Kubernetes services. On the observability side in the middle, we have BCC and BPF trace. So these are for application profiling and tracing. So for example, understanding what my application is doing, what my application is not behaving the way we expect. For example, how many blockhouse it's using and so on. We have Hubble, which is the visibility component of Celium and it can be used for example for network policy troubleshooting, auditing. So for example, which network flows are denied by which network policy, what is the source pod and so on. And then for security, so we will dive into these use cases later, but we have Datragon and Falco, which is applying BPF for container on time security. So in-spectic kernel functions, system calls and figuring out if a malicious behavior has happened. We can also implement, for example, these privilege policies and then we can create profiles based on the observed event and then we should say like these are only the allowed events by that source pod and then we should prevent everything else. We can also use BPF for preventative security. So terminate any kernel functions or system calls inside the kernel instead of having like a user space agent observing it. So for example, these are two security use cases that we can do. One is data exfiltration, so security team can observe occupant's name space and figure out like which pods were the most outbound talkers in the last hour. Is it expected? Who sent out the most traffic? Can it be data exfiltration? And we can also do like file integrity monitoring. So which pods or workloads open sensitive files with which binaries, who was root and is it even expected? We can also do capability and namespace success monitoring. So security team can monitor, for example, certain namespaces and ask questions like which pods were running with Copsys admin or Cupnet rule. Do we expect this? Which pods had, for example, host bid or network namespace success? Do we even expect this? How long who started this pod and so on? So EVPS became cross-platform. It got on Windows machines with the Windows runtime recently. It's available on most Linux distributions. And then all the major cloud providers also support. So as a motivation, since EVPS became so powerful, security teams needs to answer questions like who is watching EVPF. To remain secure, it's actually important to keep track and audit which BPF programs were loaded and then which BPFs map were created. So what does audit mean exactly? Like who loaded it? Which Gbertis workload, which process, which binary from which ancestors? When was it loaded? Should this program be expected? Have we seen this program or process before? And should this process touch BPF at all? So these are the questions that we are trying to answer today with Tetragon. Great. Hey, everyone. Awesome. All right. So first I wanted to talk about Tetragon. So that's our tool, right? And we saw some of the use cases that it solves. And we saw some of the dashboards that you can create. And so I'm going to kind of talk a little bit about the architecture here from this cartoon, but at least it gives you the big kind of bullet points. And then from there we can dive into how we address the BPF monitoring piece of it, that specific part that the talk is going to focus on. So first what is Tetragon? It's our security observability and runtime enforcement. What this means is you take BPF, you hook the Linux kernel, and you can hook all of these locations, right? You have the TCP IP stack. You can hook system calls, process execution, file systems. You get all of your C groups in namespace monitoring, right? And what Tetragon can do inside of Kubernetes, since we're at the CNCF here, is you can take all of that kernel level data and put on top of it the Kubernetes metadata and get something that operators and people that monitor and manage Kubernetes environments can make some sense of, right? Because if you didn't do this and you just said, OK, I'm going to put a BPF Pro here. Maybe I'm running BPF Trace or I'm running BCC tools. If you're familiar with that, these are kind of low level BPF things. What you would really just get out of your system then is, you know, PID, name a random PID, launch some file, FD3, and by the way, it's in some random C group on some random node in your system, right? And so what you really want to do is up-level all of that. And that's what Tetragon is really good at doing, taking this low level data so you can monitor all your files, monitor all your execution, create a nice execution trace for anywhere in your cluster along with timestamps into a data stream, right? So then you can analyze all of that data, right? You can ask questions like what executed three days ago on this system and what programs did it run, what files did it open, who did it connect to, this question. You might even ask, you know, what are the DNS entries for those IP addresses that I saw these connects for and what's really interesting for today, what BPF programs did it launch, right? Because that's what we want to answer. So when we talk about BPF, the next thing we want to talk about is what is a BPF program, right? So typically I think of an application program, you're thinking of a set of like an executable, something that you launch and so on. But BPF is slightly different. For one, it runs in the kernel. That's also interesting, but what is kind of interesting from the question of what's running, is that BPF is not just a set of instructions, there's an entire runtime around it. So you can think of it as a set of instructions plus all this other stuff. And the other stuff here include core. What core does is when you load your BPF program, it's actually a runtime rewriting kind of framework. And so it takes the program, it loads it in, you're gonna replace a bunch of the instructions with kernel specifics. So if you think about, I want to read a structure, a field and a structure, maybe the PID of a task or something. And when you do that, that PID location, that structure, you're gonna say, read the task struct and then read the offset into that task struct. It's not the same across all the kernels. So what it will do when you load your program, what the core infrastructure does is rewrite those instructions so that they actually read what you're interested in. So for one, that's interesting because now your set of instructions that you downloaded onto your program is not the same instructions that you actually run. Just one point on why your BPF program is sort of different than just a set of instructions.  So the maps are the piece between BPF, between the kernel and user space that communicate between the different programs. So your kernel piece might write to that BPF map, but also multiple user space applications might write to that map, or multiple kernel pieces might write to that space. So if you think about it, it's almost like a message bus between different programs and applications. It can be memory mapped, for example. So that influences what map that program has attached to will influence kind of what the system is doing. And then there's what are you connected to, what type of program you are, and so on. And all that together, in my mind, is actually what you wanna monitor. You wanna monitor that bundle of BPF stuff because if you imagine a BPF program that's connected to the wrong map is gonna be buggy or worse malicious, a BPF program that's attached to the wrong function isn't gonna work either in the way you expect.  This is a diagram that Brendan Gregg made, and then we modified it slightly. Daniel Borkman, one of my colleagues, also modified it. And what it shows is that flow graph of what loading a BPF program involves. And so on the right side, you see the application side. What is the BPF application, sorry. Yeah, left side, you see the BPF application. And what we have over there is like the instructions, like we talked about. You have a compiler, so at some point you need to create, probably C code into byte code. And then you create your maps and all this kind of stuff. And then what we see between the left and the right side is the boundary between the kernel and the user space slide. And you see a bunch of different objects. You can modify the bottom. There you have Perfring, BPF ring buffer, shared maps. Perfring is just a high performance way to get stuff out of the kernel between user space and kernel. Shared BPF maps are any of the other map types we have. Hash maps, ray maps, stacks, so on. People are always adding new things there. And then the top is where you actually load your programs, which is actually done through a system call and loaded that way with an opcode. So when we think about monitoring this, the question is like how do we want to monitor this? Well, we don't want to hook the syscalls directly, usually, there's a good reason for that. One of them being that we don't want to hook every possible syscall that interfaces with BPF. And so what we do is we hook the BPF verifier. The verifier is the piece that when you load your program, it's gonna make sure your program is safe to run in the kernel. It's gonna make sure it's not writing to random data, trying not to make sure it's not reading random data. It'll also do other things for safety, check for divide by zero, those kind of things that you would think of which would normally cause segfaults in normal programs. So there's one reason to put it there is just because it's the central place where all BPF programs come through. The other advantage of having it there is it's after the user to kernel space copy, okay? So one thing about BPF, if you hook a syscall, what can happen is if you try to read user memory, which is just a pointer into user memory, it's entirely owned by the user space process at that point, right? So from a security standpoint, we don't wanna try to read user memory and race with a user, right? Cause a user owns the memory, they can change the data, right? So if we're trying to do a security property and we say I wanna read your instructions or read the name of your BPF program, and I'm gonna say do some analysis of that program from the BPF side, or even if I'm gonna copy it out to user space for sort of post analysis, I need to make sure that I can't do that copy and then have the user just change the data, right? There's also a more fundamental reason would be that user space can actually just fault, right? You try to read user memory, it's not in cache, it's gonna fault, and then because BPF on most instances does not wanna sleep, will not be able to pull that fault into the memory. And so what you'll get is just an error, you'll get no data, and now you have a big glaring gap in your security analysis tools, presumably running behind this. So that's why we hook BPF verify, the summary is we see every BPF program that's loaded, we've put a BPF program right on that call, anytime you load something, we'll get a call back and then I'll talk in the next couple of slides what we do with that call back. And then we also hook these other entries, you have to be a little bit careful for the syscall reason, they're actually done on the other side of the copy inside those syscalls. So they're not technically syscalls, but in this box, we just show them on the edge there. And those are for all your maps. And the important thing is, if you look at that dotted line, everything that's going from the user space to kernel space, going across that dotted line, can't get to the core networking part in this example, but we have other slides that show kind of K probes and other things, can't get to the far right without going from one of our red boxes from left to right. Yeah. Oh, okay, so the text in red is where we're going to put hooks, BPF hooks to capture the BPF loads. And so the, sorry if I wasn't clear, so when you look at like this flow chart going from left to right, we want to make sure that we go through a red box before we get to the far right where the programs actually run to ensure that our analysis tools that are running in BPF get an event that something happened from the application to the kernel side, is that clear? Great, perfect, thanks, sorry about that, if I didn't say that up front. So then once we get this flow chart instrumented with BPF, we now have a way to get these events. So then the question is like, what are we actually looking for and what do we care about? So the first case in our kind of cartoon picture here is the good case, where you have some application, I call it Alice here. That application probably has a hash associated with it, that's like a SHA-256 for the executable. I called it foo here, but usually it's 256, a SHA-256 or 512 or whatever you set up your system for. And then it has a program and some maps. So Alice.o is the BPF executable here and then I call it map A and map B are those two maps that let you push data between kernel and user space. What that application is then going to do is call that sysbpf call, that's the system call to load a BPF program. If you go back a slide to this, what that's gonna do is cause that BPF loader block in the middle top middle there to call the BPF verifier with that Alice.o, which is then gonna trigger our event system so that we get a notification that a program has actually been loaded. And then on the bottom here, as I put what our system spits out as that event, we see that event, we say there was a BPF load happened. This is annotated with the Kubernetes namespace. So we put the Kubernetes namespace there, BPF and S, the pod, Alice in this case, along with the application that loaded it, SBIN, Alice, we can put the SHA-256 there if you have the system set up for it. We gave a talk at QCon about that so I won't go into details there. We give you the program type which will tell you what kind of program it was. If you're familiar with BPF, there's K probes and there's networking hooks and there's security hooks and all this kind of stuff so you kind of wanna know that as well.  They have a name, Alice function here, extraction count. And because the BPF program now has access to the entire BPF op as it's being loaded, we can put arbitrary other data there as well for pretty printing, pick some things that we think are as interesting but we actually have access to the entire BPF instruction. So you can do things like copy that program out so that you have a copy of every BPF program that was loaded. They can be kind of large 4K instructions but one page BPF loading BPF programs is usually not something that you're doing very frequently so doing a copy of 4K bytes is usually negligible that depends on what your use case actually is. So this is the good case, program gets loaded, events happen, nice pretty printing of the auditing flow. So let's just explode our example slightly. Let's check my time. Explode our example slightly and we'll add Eve and Bob here. And of course they have their shaws and I think we called it bad and bar there. So the next question is what happens if Eve tries to load something and we don't expect Eve to load something, right? Well, just like before, since the tooling doesn't care, right? It's gonna give you the event for the two. But what's actually a little bit extra interesting about this is I think you would make the argument that if Eve is running in its own pod you probably should never give it cat BPF if it wasn't meant to load BPF programs, right? Like basic capabilities here for pods. But what's extra interesting about this is even if Eve happens to be running in Alice which you gave cat BPF because you needed Alice to load a BPF program you still get the audit. So if for some reason something inside your pod is loading BPF programs besides what you expect to you'll get an audit record for it. And the next interesting thing is with Tetragon we have enforcement and which allows you to say match on binaries or SHA-256s if you want. It's easier to look at program names than SHA names. What you can say is if I see this call and it's not Alice, stop it from happening. So even if they're in the same pod so you need to have cat BPF but you know exactly what programs should be loading BPF programs you can encode that into your policy. That's a CRD in Tetragon world. And then what happens is if anything else inside that pod tries to load the program under BPF program, we'll block it outright. An extra layer of protection from things trying to load BPF programs for you. And of course like I mentioned you could also use SHA's but that's a different talk. Requires a little bit of extra setup. So the next question would be what happens if you have a file system problem where you have since maps inside BPF are usually file descriptors or they're always file descriptors. Sometimes those file descriptors are pinned into a file system. And so you might say well Eve tries to access a file from Alice and this could be like a policy file it might have sensitive data in it and so on. Well your first layer of defense should be well don't let Eve actually access the file. Maintain your amounts. But if you can't do that for some other reason Tetragon can also monitor file access so you'll be able to see which BPF programs access which files. Those files are to maps so you can see Eve is accessing map B there and again you can enforce or you can just create an audit trail for it. So this is so that if this is the other discussion we're talking about Bob loading BPF and I'll just skip this one I think for now. So in summary what we've covered then is Alice is the good case Alice loads a program we get a nice audit log for it. Eve is the malicious program or at least erroneous program tries to load something gets blocked even when it's in the same pod because we built this policy. And then we have the file monitoring. So there is one case that I wanted to call out that we're working on inside the BPF foundation and there's kind of a working group around this if you're interested is what you can say well what if Alice or Bob in this case is allowed to load BPF programs but they load a different BPF program than they are supposed to. Meaning you launch Bob you checks you did some integrity check to make sure it has the right shot somewhere along its lifetime it decided to load some random instructions that are not the instructions you expect. Which it's allowed to do but these are perhaps instructions you didn't want it to load like a malicious program because maybe Bob has been compromised somehow. So there's a couple things you can do. One thing we've suggested is if you just keep a log of all these programs that are loaded copy the instructions out at least you'll know what programs are loaded and you can kind of post analysis and say this application is loading this BPF program it's not the one I expect it's a new one I've never seen this one before please fire an alert off to my alerting tools. There's a working group also going on about how to get the right how to put a SHA on that BPF program itself. And this is actually more difficult than it may sound on the surface because if you go back to when I talked about the core that application is not static it's being rewritten by the runtime. So if you were to just take a SHA of the program up front it wouldn't match what the SHA was after the program's been rewritten to load on your kernel. So what we're doing is trying to get the kernel to do a lot of these rewrites and have sort of a consistent SHA before and after the modifications. Find me afterwards if you wanna talk about it it's really quite interesting but it's a kind of a work in progress I don't think anyone has it fully deployed yet although some of the newer kernels can support most of the base functionality for that. And I think in summary, like you said, Alice is good to load, we get an audit, we can block Eve, we can watch the files and then we got a plan at least to audit the kind of erroneous program loading bad instructions and then in the future we'll have a full solution for signing the BPF programs. Yeah, so in the last 10 minutes, five 10 minutes I will just show you like a quick demo like how could we actually do it with Tetragon. So how we will do it, we will introduce a test environment, apply a security policy, which would actually observe BPF program loads and then map creations and then we will have like a simple use case just from like a test pod, it's called BPF droid and then the last one will be, we will actually see like what kind of BPF program selium loads and then what kind of BPF map selium case during its boot up. So how the test environment looks like, it's going to be a one node GK cluster, we are going to have Tetragon deployed on it as a demon set and then we will apply a security policy which would generate events during BPF program loads and then BPF map creation. So for example, if you would have like multiple node cluster, then you would deploy Tetragon on each node as well and then you would use a GRPC collector to observe actually all these events. So this is how actually the policy would look like. We are going to observe like three main kernel functions, BPF check. So this is when the verifier actually checks the program before loading it. We have security perf event alloc. So this is actually creating a map to transfer events between user space and the kernel and then the last one is security BPF map alloc. This is basically when we create a BPF map. So we have a simple pod and then what it's doing, it's actually loading a BPF programs yet a BPF prog and then via BPF tool and then it's going to sleep for 30 seconds and then it's going to create a map a Tetragon BPF map with hash type and then it's going to sleep for 30 seconds as well. And then this is actually how the events look like. So we extract it as JSON events and this is just a CLI like pretty printing it. And then basically in the first row we can see that the BPF tool proglot process started. We can see the Kubernetes namespace and then the pod. We can see Washington namespace and the Seattle BPF draw it pod. And then on the third row we can actually see like that our program was loaded. We can see the function name, the amazing function and then the instructions and then a couple of rows later we can actually see like when the map was created. So we can see like it's Tetragon BPF. We can see the key and values and then we can see also the hash map type. So for Celium it's a bit more complicated. So I will just like highlight certain events and steps that are executed during the boot up. So it's going to probe a bunch of features and maps that are available in the current version. And then it's going to check and remove some IP table rules. And then it's going to execute a script. Basically figuring out like which programs to load and then what network devices to load them on. And then basically it's going to compile those programs and then basically it's gonna load those programs for each pod on the node. So basically this is the screenshot that was captured by during the demo and then we will see it alive. So these are all the programs that are going to be loaded for each pod on the node. So we can actually see here for example, an example like a program named sand drop node. So this is basically when we send a notification whenever a packet was dropped. We can actually see how many instructions did it count. We can also see the call handling programs. We can also see policy handle. So this is related to how Selium handles actually that for policies and so on. So I will just switch to the terminal and then show it live if it works. So I'm just connected to the GK cluster and I should have Tetra going running on it. All right, here we go. So let me just start to observe the events related to the BPF trade, the test pod first and then after I will show the Selium use case as well. All right, so I will just apply the pod and then once it gets created we should see some events as well. All right, so basically we will see like the BPF2 prog load. We can see the program type here. Like BPF prog type CREPO. We can see the functions and the instructions and then we can see actually the sleep and then we can see also the Kubernetes information here like Washington namespace and the Seattle BPF droid pod source pod. And then it's going to stay for 30 seconds and then we are going to see actually the map creation. So it's BPF map log. Then we can actually see the BPF map, the hash map. It's a hash map and then we can see the type here and then we can actually see the name, the map name and then basic key and values and then mock centuries. So I will actually just stop this and then I will start to observe the events from Selium. I actually have Selium set up on a different namespace. It's the Selium namespace. So it's actually running on the Selium namespace. So I will just restart the agent and then we will see all the BPF program loads and map creations. So it's going to load or going to probe a bunch of features like what features are available on that kernel version and what BPF map types are available on that kernel version. So we will see a bunch of probes in the beginning. Okay, so we will see actually the termination. We will see the put up. So these are all the probes that Selium is actually like running to figure out like what features are available and what map types are available. We will see some IP table rules like figuring out like what IP table rules are loaded and then what should it delete. So I will just like highlight the ones which are related to program loads. So there is always like a recurring pattern here and then it always starts with like filter replace and then basically it ends when the command exits. So for example, these are all the BPF programs that are loaded for example for each pod and then we can see for example, the send drop notification here and then for example, all the telcal related ones and then we can also see for example, handle policy which is like how Selium handle policies and then basically it just does it for each pod on that specific node. So this is for example like a real world example like how could we create for example, audit list for each programs like from each pod from each binary and then basically keep track of like what has been loaded and should we expect this or not. So let me just switch back to these slides. All right, so as I wrap up like ABPF is on the rise and then we see more and more applications for networking, observability and security. It's basically cross platform and then what is important to keep track and that would it like who is watching ABPF like which programs and maps were created by who and when and then basically we saw an implementation how Tetragon could do it. So a bit more on like how to contribute. There we go. How to contribute, yeah. So join the Slack channel, come to the get up page and I'll slip it up there, sorry. Oh, we're always looking for more use cases. So if you go to the Tetragon repo there's the CRD's examples. They're sort of incomplete list of things that we care about but mostly it's things that I thought were interesting but either contribute or if you just file an issue and say like I have this use case. The nice thing about getting them in there is that we generally run those before we do a release. So if you're using Tetragon for something or you want to use Tetragon for something put your use case in there and that's a really good way to make sure that we know if we break it somehow. Even better would be to write a CI test case but hey, we do run those before we release so that's kind of your first gate. Yeah and any feedback let us know if you find a bug let us know of course we are always fixing things and adding new things. So if you have it a new use case let us know and documentation and all that good stuff would be great. So thanks a lot. Okay, thank you. Any questions, right? We have just a few minutes for questions if anybody's got anything? If not. Yeah. Yeah, go ahead. Yeah, okay. I'll just repeat the question. The question is does Tetragon use BPFL-SM for anything to preemptively block things? No, we do not use BPFL-SM. We do preemptively block things so we have a synchronous way to use to kill processes. So instead of blocking the call, we just kill the process if it's violated in the policy. The action would not have gone through because we do the send happens in line in the kernel. So we kill the process from the BPF program which will then cause all of the cores on the application to see it as a terminating signal that it cannot block because it's a SIG kill. So your application cannot catch and block a SIG kill from the kernel. SIG kill from the BPF probe. From a BPF probe, yeah. So there's a BPF helper to do it, yeah. Yeah, and so that does it. There is some slight caution. You can't do that from anywhere in the kernel but when we deploy this we ensure that we do it from the right places in the kernel. So it requires some care when using but is doable. Anything else? Maybe I just add, that's where that, when you looked at the BPF, when we stop block the BPF program, that's how we did that. Anything else? Cool. All right, well, thanks for coming. Yeah, thank you for coming. Thank you.


Hello and welcome to the session. Let us discuss the following question. Question says, integrate the following functions. Given function is 6x plus 7 upon square root of x minus 5 multiplied by x minus 4. Let us now start with the solution. Now we have to find integral of the function 6x plus 7 upon square root of x minus 5 multiplied by x minus 4 with respect to x. First of all, let us find out the product x minus 5 multiplied by x minus 4. It is equal to x square minus 9x plus 20. Now let us express 6x plus 7 as a multiplied by d by dx of x square minus 9x plus 20 plus b. Now we get 6x plus 7 is equal to a multiplied by 2x minus 9. We know differentiating this expression with respect to x. We get 2x minus 9. And we will write plus b as it is. Now equating the coefficients of x on both the sides we get a is equal to 6 upon 2 that is 3. Now equating the constant terms on both the sides we get minus 9a plus b is equal to 7. Now substituting value of a is equal to 3 in this expression we get minus 9 multiplied by 3 plus b is equal to 7. Now this further implies b is equal to 7 plus 27. Now we get b is equal to 34. Now substituting values of a and b in this expression we get. Now we have to find out this integral. Now this integral can be written as integral of 6x plus 7 upon square root of x square minus 9x plus 20. Multiplying these two brackets we get these three terms and here we will write dx.  Now let us name these integrals as i1 and i2. So we can write this expression as 3i1 plus 34 i2 First of all let us find out i1. You know i1 is equal to integral of 2x minus 9 upon square root of x square minus 9x plus 20 dx. Now put x square minus 9x plus 20 is equal to t. Now differentiating both the sides with respect to x we get 2x minus 9 is equal to dt upon dx. Now this further implies 2x minus 9 dx is equal to dt. Now we can write i1 as integral of dt upon root t. We know this expression is equal to t and 2x minus 9 dx is equal to dt. Now this integral is further equal to 2 root t plus c. Now 1 upon root t means t raised to the power minus 1 upon 2. To find the integral of t raised to the power minus 1 upon 2 we will use this formula of integration. Now substituting this expression for t here we get 2 multiplied by square root of x square minus 9x plus 20 plus c. Now let us find out i2. You know i2 is equal to integral of dx upon square root of x square minus 9x plus 20. Now x square minus 9x plus 20 is equal to whole square of x minus 9 upon 2 minus 1 upon 2 square. Now we can write this integral as i2 is equal to integral of dx upon square root of x minus 9 upon 2 whole square minus square of 1 upon 2. Now put x minus 9 upon 2 equal to t. Differentiating both sides with respect to x we get dx is equal to dt. Now we get i2 is equal to integral of dt upon square root of t square minus square of 1 upon 2. We know dx is equal to dt and x minus 9 upon 2 is equal to t. Now this integral is further equal to log of t plus square root of t square minus square of 1 upon 2 plus c. For finding this integral we have used this formula. Here x has been replaced by t and a has been replaced by 1 upon 2.  Now i2 can be further written as log of x minus 9 upon 2 plus x square minus 9x plus 20 plus c. Now substituting values of i1 and i2 in this expression we get integral of 6x plus 7 dx upon square root of x minus 5 multiplied by x minus 4 is equal to 3 multiplied by 2 square root of x square minus 9x plus 20 plus 34 multiplied by log of x minus 9 upon 2 plus square root of x square minus 9x plus 20 plus c. Now this can be further written as 6 multiplied by square root of x square minus 9x plus 20 plus 34 multiplied by log of x minus 9 upon 2 plus square root of x square minus 9x plus 20 plus c. Remember that c is the constant of integration. So this is our required answer. Take care and have a nice day.


to the Matrix of Peace show brought to you by Think Tech Hawaii. I'm your host, Phyllis Blyse, and the CEO of Peedies Through Commerce. Our guest today is Don Larson. He's the founder of the Sunshine Nut Company, calling in from corporate headquarters in Moatsambique. We are discussing part two of the show called Business Co-Creating Peace in Africa. Using the Sunshine Business Model Developed by Don, Aloha Don. Buon Nite. Oh, I love hearing that. Yeah. Now, it's 12 o'clock at night. Well, it's actually in the morning. Use that, say, bondia, but that's for when the sun is shining. So, Buon Nite is also a greeting. Okay. That's from Moatsambique. I've met very few people who've ever heard the language of Moatsambique. So, thank you for bringing that to us and for bringing in this information about the model. I think what we'll do to start is we're going to pick up from where the first show ended on this topic and that show dropped on March 2nd, 2024. We will review the first part of the video about your work there and we'll show it right now. It's possible to create a premium food product and transform lives and communities at the same time. We're doing it every day with cashews here in Mozambique. I'm Don Larson, founder and CEO of the Sunshine Nut Company. And I'm Terry Larson, director of Social Impact. The cashew deteriorates from the moment that it's taken out of its shell. Most cashews, they sit around for three to six months unroasted getting stale. We roast within three weeks because we're right here in Africa where they're grown. I came to Africa in 2004 as the director of cocoa operations for the Hershey Company. I was one of the largest cocoa buyers in the world and was surprised at the extreme poverty of the African farming communities. So many international companies benefit from the resources of Africa while the people of Africa remain in poverty. In 2011, we sold everything and moved to Mozambique to create the Sunshine Nut Company. The Sunshine Approach is a sustainable business model that brings lasting transformation. Wow. And how many years ago has that been now, Don? 13 years ago that we moved here. Yeah, it's been 13 interesting years, challenging years, but also very rewarding. Well, we're going to frame that rewarding work within the context of the Matrix-of-Peace Whole Systems model, which is a model of society. It's a simple Venn diagram, but it, like all simple diagrams, it can reveal a lot of complex relationships, which is what this one does. And just as a bit of a refresher for the audience, the model, the outside three sectors of the model are the traditional three sectors of society, the public, private, and civil society sectors. So you can see them now when what we call they are in sector silo mode. And when you ended your introduction of the Sunshine Approach in the video, you said when you came to Africa or you came to Mozambique, there was a lot of poverty, which was what brought you there. And the model when we show those three sectors visually, not intersecting, but three separate circles, that's a paradigm view of a society not working with prosperity or justice or sustainability. It takes all three sectors working intersectionally to co-produce those outcome, which the Venn diagram, if we go back to the first, the second slide, we can see how when they come together intersectionally, the public sector, when it's supporting the private sector, you co-create prosperity. When the public sector is being watched dog by the civil society sector, it can create justice rather than just laws. And when the private sector is being watched dog by the civil society sector, it can co-create long-term sustainability. The model goes on to show that it takes all three of those outcomes, prosperity, justice, and sustainability to co-create what shows up as the supra intersection of those three, and that's peace or long-term societal peace. So what we want to do is sort of work from the non-intersectionality version of the model when all three sectors are working in what we call sector silo mode. And some of the conditions that keep a society in sector silo mode show up in our slide four. And those practices have to do with a private sector, dog eat dog, business cultures might makes right, paying bribes, you've got a public sector that rules by fiat, not law, and limited human rights and civil rights, corruption and bribery. And in the civil society sector, you have almost no operating civil institutions. Religions can be exclusive. There aren't really well-operated health or service benefit programs. And civil society's really in a survival mode. They're not coming together after their day job and supporting each other. They're just existing. Those are practices that we talk about in the matrix of peace and in the new book coming out on the model. In the next slide, we can see the consciousness conditions that drive those kinds of practices. Largely, this is the work of Richard Barrett in the main. And he has identified fear, fear, fear, fear of I am not enough, fear of I am not loved enough, fear to preserve. That's in the civil society sector. In the public sector, you have fear of not being able to preserve status, power or control. And in the private sector, you have the fears driving the group feeling it does not have enough, in which case it moves into control, domination, caution, greed. So we have these conditions of well articulated in the book on the society building model, the matrix of peace. Would you share with us some of those conditions that you walked into? We have a slide six and seven. Don, take us through some of the conditions that you walked into when you first got to Mozambique. Yeah, well, you know, I think that the key to this is really the commerce brings, I'll say that the engine is the country. Commerce and business brings the oil to make it run smooth. Without commerce and without incoming cash and the ability to make everything run, including the civil society, the public sector and the private sector, it's a country of chaos in many ways. And fear strikes, one of the things as a change management expert, one of the things that was striking as we entered into Mozambique is the realization that people have set ways to survive. And each area, these set ways are there. And when you try and change that, it strikes fear. And it also strikes the desire to keep things of the way they are, until you can demonstrate a better way and a better model. And that better way is through commerce. And so what we came up with, if you look at slide six, the typical things that we addressed were exploitation, heavy exploitation.  And so they've learned a way to survive by going along. So the exploitation, the corruption, when we go into the villages, it'd be malnutrition, where people are dying for lack of a $5 malaria pill, just inadequate healthcare. The education deficiencies, the curriculum's good. We do a lot of work with the teaching groups, but there's no money, there's no supplies, there's no resources, there's no real ability to pay the teachers well. There's lack of opportunities. The government said that 80% of the country is involved in agriculture. Yet 99.9%, they say, is subsistence farming of the agriculture activities. So that means pretty much the entire population is growing food to survive. Then you have the moral decay and the abandonment. We have, part of our business model is to take care of orphans. And it's a big passion of ours to, they've said that there are 2 million orphans in Mozambique, so it's like 8% of the population. So it's a major problem here. If I, I didn't mean to cut you off, but I wanna point out that you were the lead at Hershey Foods for buying the largest amount of cocoa in the world. Yeah. That's a business. Yeah. And what attracted you to Mozambique was this combination of using business as a force for good to change the conditions that alarmed you on the ground. So I just wanna point out the way John Mackey talks as well, he's the co-founder of our nonprofit Peace Through Commerce. He's the co-founder of Whole Foods Market. And it was his belief that unless you treat your stakeholders just as, which includes the shareholder, but other stakeholders are your customers, are your suppliers, are your team members, your employees, so that's three more stakeholders in addition to the shareholder. And then fifthly, there is the business, community, air, water, and environment. So if you were to put chairs around a boardroom table, you would have a chair there for the environment and a chair for the community, which are co-opted and providing you pretty much free, especially in Africa, the resources and sources that you draw upon just to be there. And you are articulating and seeing those invisible board members for many businesses. And then some are innocently not seeing those representations or those stakeholders in the businesses we all start around the world. You were seeing what John Mackie saw and other visionaries that there is a multi-stakeholder approach to doing business. And you began it right away. And unless they're doing well, you won't do well. Hershey is a good example of that if I can share. I was put on the cocoa desk. I was their turnaround guy, their change agent, the ones that went into the messes to straighten them out. Well, the Hershey brand was being accused of child slavery in the cocoa market and even slavery and all these things where we didn't have anyone on the ground. We bought off of houses that did the cocoa collection and did those types of things. So sitting at the table was not the farmers. And so what we've done here in Mozambique, now here's the thing, Hershey is owned by an orphanage. The Milton Hershey fund 100 years ago, they've taken care of probably hundreds of thousands of orphans. People don't know that, that they're owned by an orphanage, literally. The controlling interest is the Milton Hershey school. My father-in-law was a graduate of that school. And that's what really excited me about being part of a wonderful organization. Well, what we did and what I decided to do is take this concept of taking care of the employees, taking care of the farming communities and taking care of the orphan population and bring that to Africa. Milton Hershey used to take care of the farming communities with the farmers, the milk farmers and then the sugar farmers in Cuba. What we do is we've taken that and we have the model that takes care of all three of those. And it's very difficult to go down to this subsistence farmer level and do it effectively. It's just a rot with problems. So how did you accept- But that's where the real rewards come. Right, so you had to have some visits with them and gain their trust. I think you've got a slide for us showing you. Yeah, I think that's like seven. So did you say how many? There were like 100,000 people unemployed when you were gathering people around to talk to you? Well, no, this is the northern area where there's an Islamic insurgency for the last seven years and over a million people have been displaced and over 4,000 people have been killed. And so we were perched by the government and some large companies to come up and implement our model to bring peace through prosperity, okay? And people just want a job and there are no jobs. So what we did is we specifically designed the model to have a branded product in the stores, the Sunshine Nut Company brand and for this case it's cashiers because Mozambique is known for their cashiers. They have a long history of being the king of cashiers but Civil War decimated their industry 30, 40 years ago. We are now in those conflict regions and we were meeting with the displaced people there. The people camps, there's 5,000 per camp over a million displaced. So there's a lot of camps but we were learning from them about their communities and would this model work and we presented the model. And so for the last two years we've been in these conflict regions working with five villages in total. In implementing this program where it's a community farm and it's a village concept in each community. So I'm imagining those conversations and I wanna do what in the law we call a practice note. So I wanna bring up slide eight. And to keep the narrative, we have two narratives. One is how you're implementing this on the ground and the other narrative in this show is how this model is diagramming what's going on on the ground so that we can like look through modeling, mimicking what's going on on the ground and then run with the model and then come back to the ground on the ground. So what the model is showing right now is when you're talking to the people about what's right about helping each other about getting gainfully employed where you care about their education.  Those, you're introducing values which in our model we say unite people. You have to talk too much yet about how you manage the beliefs that also can divide. But you obviously did. So in a modeling standpoint when you brought in shared, and let's go to the next slide, the kind of values that I'm talking about that bring people into the intersections are self-awareness, love, tolerance, honoring the group and I, we, those are the values that I've probably were being expressed in your conversations. So let me, I can see you wanna jump in. We can have you jump in now. How did this conversation go or maybe we can get into your engagement in slide 10? Yeah. So the interesting part is they didn't trust anyone. The government doesn't trust business. The people don't trust business because there's generations of, first there's no jobs, but those who do, there's a lot of exploitation and there's a lot of bullying. So then comes in people that wanna help and there's a lot of groups that wanna help. So what we had to do was overcome the trust issues, but also, there's a whole history of dependency of these people and entitlement, getting handouts. And so the key is you've got to transition them to the things that will be good for them, which is a stable job, dignity in their job, unity with the people that you're working for. The concept of hard work and for providing the feeling of earning a paycheck, all of these are new concepts that we are overcoming. And it's what people want. What I found with all of the people that we talked to, those who were like looking for the best deal, well, we exited. We were looking for people who motivated in villages that were motivated to do what was necessary to pull them out of abject poverty for good. And what business does, it provides the means for them to do it on their own. And it's very important for them to do it on their own. Let's look at yours. We were looking and we're gonna, I wish we had two hours here. We were looking at some of those conversations in the last slide. You could maybe talk about what manifested, what grew out of these conversations. You're showing the Sunshine family in slide seven and how that model looks. Yeah, so these conversations, this is the displaced camps. So those models were really trying to identify what communities were ready. And then we went to the community. So slide seven is the communities that we want to talk to. If you can bring up slide seven. So seven is where we're discussing with the communities. It just so happened that we had, I had to have soldier escorts and everything. There's soldiers on all four corners of the building watching for ambushes. You know, this is a hostile territory. But the look, we were initially going to do one community only. The look in the people's eyes, the desire to do something productive with their lives, to be given an opportunity, be given dignity, just a job, you know. We expanded the role, they expanded the number of communities. And so now we've got these community farms going into a lot of these different communities in the area. And we asked for 300 hectares, not to be put in our name, but for the community to allocate this land so that we can give two hectares to each family. And those two hectares, we supply about 500 cashew trees to each family for free. So one time that giving something for free is important, including the water wells and, you know, other things. But that really brings about the ability to produce income. And for each family, the average for a subsistence farmer in Mozambique, I've been told is about $33 per year of income. We're gonna bring them close to $5,000 a year in income, which is twice the monthly living wage for a Mozambican family. And that is going to have significant transformation. And in our model, we would call that creating stakeholders out of each one of them. So they're holding the raw resources in the trees and the cashews. And then you are their partner in getting them to market, which they could never do without you. Let's take a look. We've got about five minutes. Let's look at the sunshine families. Is there something in this slide you wanted to talk about? Yeah, well, so our company, our mission is really a combination of for-profit and non-profit because the for-profit does the actual interaction in the marketplace. You know, we've been in Whole Foods. They were our first customer. One of the owners came, and it wasn't John Mackie, but came to discover us about 12 years ago. Nice. 10 years ago, 2014, we entered Whole Foods. But that was the catalyst to us starting to take off and being able to sell the product. When we sell the product, we donate 90% of the distributed profits. Now, we take care of the company with the cash needs and everything. But that goes to do philanthropic work in the communities. And the villages project with the community farms and the village factories is under the Sunshine Villages Project. Our orphan care, where we have eight homes, over 30 children now that we've signed for. So hold your thought. I want to shift down to slide 13. We can start showing some of these outcomes. Yeah. Your homes, your employment. Yeah, so the Villages Project is where we do the community farms with each family. This woman that you see in the picture, she planted 500 trees on her own. She has about 50 trees a day, but she just took off with wanting to spend for herself and provide for herself. The employment project, we have a top-notch factor. I've managed a lot of different factories for different companies, including Hershey. And I've never had a better group of employees more dedicated than our group in the middle there. And then on the left is our Sunshine children living in the Sunshine homes, where we put Mozambican children that have been in desperate circumstances, orphans, and we pair up a woman that's also vulnerable with four to six orphans in a Mozambican house, in a Mozambican community, raised in a Mozambican culture, and we put them through private school and they're just blossoming and flourishing. And your wife, Terri, is involved in the education too, right? And then those services, I want to bring in Terri. Yeah, so Terri runs the foundation really. I do the community farms and the village factories. She runs the orphan care and brings in teams and does the community work. She's out in the villages every day, but yeah, it's been very exciting work for us. Very rewarding as well. Well, and what I want to do, let's just do a quick look to state, to go back to our other story, which is how we modeled this work using the matrix of peace. And this tool can be so valuable to people in education and in philanthropy and in business. So let's look at slide 14. So as I said at the opening, we need all three intersections, prosperity, sustainability, and justice. So talk a minute, just a little bit, if you want, about the prosperity intersection and what Sunshine Approach does to bring the private sector and the public sector together in co-creating those outcomes. The civil society does too, but the primary practices are happening in those two outside sectors, private and public. Yeah, well, obviously when you come in, there were a lot of people asking for a lot of things and there's corruption and all. What I found though at a higher level, they did not want that, but people through fear need to provide for themselves. And so they have an established way of taking care of their families. And so we were not part of that. And you have to go through, there's a lot of scars that you don't see on my body, from trying to go through this, but you have to go through and do things honestly, ethically, for all of the reasons of making the model work. And so what you do is you establish a new way. Someone's got to show a better way and it can be painful, but that's where when it breaks through, then many other companies can follow and you start getting an understanding of how there's a better way, there's a more fruitful way and then more, which ultimately lends itself to a much more peaceful way. Well, and I'm gonna have to leave it there for your contributions. Let's just show briefly slide 16. The audience can see that through the work of the sunshine net approach, we can have an intersectionality society in Mozambique versus a lot of developing Africa on the right side of the model, is still in what we call outside sector mode. And with that, I'll have to leave it there. Please go back, stop the film, take a harder look at each of those slides and turn into this show. You've been watching The Matrix of Peace at Think Tech, Hawaii. I'm your host, Phyllis Bleece, and the CEO of Peace Through Commerce. We've been discussing with Don Larson, the topic of business co-creating peace in Africa using the Sunshine Business Model. Mahalo Don for joining us, and Mahalo to our viewers for tuning in. Aloha. If you liked this show, why don't you give us a like or subscribe to our channel? Thanks so much.


Good morning. Good morning predictors. Welcome to predict 2019. While those of you who made it through the rain and the traffic and got here on time, well done. So it's that time of year where we take a break from our double screened computers to lift our head above, have talk about data science, technology, AI and business. So this is the fifth year of predict and we couldn't be more excited to get the day kicked off. We started, our CREM Global started predict in 2015. And the reason we did it was at the time it was a 10th birthday of the company. And we really wanted, we've been travelling, most of our business is international and we've travelling all around the world and we've seen some good conferences but we didn't really see a great conference and we wanted to bring together technologists, practitioners, business people and researchers all in one place and do that in a fun and inspiring venue and event. And that's why we started predict. We wanted to kind of give something back to the Irish community as well. We wanted to showcase data science, showcase Ireland as a place which is great for data science and since then I think we've really in the last five years really matured and really have become recognized as a leader in this industry. So it's great to be part of that conversation. Our goal was really to demystify data science for business practitioners but also have technical nuts and bolts type presentations for people who want to discuss the real technology challenges around data science. A lot of work has gone into predict and I have to really thank the CREM Global team who you'll see around the event who worked tirelessly to put this event together. As you can imagine these things take a lot of work but also our valued and esteemed partners who you can see on the screen. Without them this event would not be possible. So really appreciate the engagement and the support of these partners which we've had this year and a number of them have been with us throughout the years. So thank you so much to all of you. The major themes this year are of course AI and machine learning. It is the area of AI. AI is really starting to deliver on its promise and this first session will explore that in a lot of detail. We also have streams on health and life sciences, technology and society which will explore issues like sustainability and then some more business focused streams here at the last session here data science and business on the customer first session. So I think that'll be fascinating. So as well as all the great talks we have our experience zone. So I'd encourage you to engage with the partners. Most of them have brought experts with them and that will be on the stands you know to engage in robust conversation and debate around data science. You'll also find in the experience zone an art exhibition of code generated art which is absolutely amazing. I have no idea how they do it. You'll see it on screen here from time to time but you'll also see it in the exhibition experience zone. There's all day coffee in there, lunches will be in there and there's a drinks reception in the evening in the experience zone. So please do stay around. Speakers in particular please stay around. We've got a tight schedule. We might not have time for a lot of question and answer sessions so I'd love it if people could have a chat at the coffee breaks. That's what predict is all about. It's about conversations. So you can tweet into hash predict conf all day. We'll be monitoring that for questions. If there's time I might be able to ask a quick question at the end of each talk but as I said we're on a tight schedule. Perhaps the speakers can answer on Twitter and write a nice long what do you call it tweet storm or something in response to your question if we don't have time to discuss it but do color them at the break. They're more than happy to speak to you. Ask them at the break. Okay. Without further ado, first session of the morning. Big thinkers so very excited. The caliber of speakers and talks this year is surpassing anything I can remember in the five years of predict. I'm actually so excited about the session today. This first session and all of the different sessions.