Blog
Nikos Mavrogiannopoulos

Nikos Mavrogiannopoulos

10 posts

Product Manager

Nikos Mavrogiannopoulos is a product manager at Canonical focused on security and compliance. He has a background in mathematics and holds a Ph.D. in cryptography. He has spent two decades in various roles in security software design and engineering for operating systems, leading and forming expert teams.

Nikos Mavrogiannopoulos
18 January 2022

CIS benchmark compliance: Introducing the Ubuntu Security Guide

Cloud and server Article

The CIS benchmark has hundreds of configuration recommendations, so hardening and auditing a Linux system manually can be very tedious. Every administrator of systems that need to comply with that benchmark would wish that this process is easily usable and automatable. Why is that? Manual configuration of such a large number of rules lead ...

Nikos Mavrogiannopoulos
16 December 2021

How we designed Ubuntu Pro for Confidential Computing on Azure

Confidential computing Confidential computing

Not all data is destined to be public. Moving workloads that handle secret or private data from an on-premise setup to a public cloud introduces a new attack surface with different risks. As the public cloud environment shares its hardware infrastructure, a flaw in the clouds’ isolation mechanisms can be detrimental to the protection of ...

Nikos Mavrogiannopoulos
23 November 2021

Cloud-optimized Linux kernels – what makes Ubuntu the top OS across the clouds

Cloud and server Article

Ubuntu is the platform of choice for deploying and running workloads on public clouds. No other operating system gives you better performance and consistency of experience across public clouds, including Amazon, Azure, Google, IBM and Oracle. There is a reason behind this exceptional experience. By design, Ubuntu images in public clouds i ...

Nikos Mavrogiannopoulos
13 September 2021

Managing Livepatch on-prem

Cloud and server Article

Ubuntu Livepatch is the service and the software that enables organizations to quickly patch vulnerabilities on the Linux kernel. It enables uninterrupted service while reducing fire drills during high and critical severity kernel vulnerabilities. With Ubuntu Livepatch on-prem we enhance our service to enable enterprises manage on private ...

Nikos Mavrogiannopoulos
6 September 2021

How to develop Linux applications for FIPS on Ubuntu

Apps Article

This is the second article in our series regarding FIPS 140 and Ubuntu. The first part of this series, this article, covers running FIPS 140 applications on Ubuntu while this part is focused on the development of FIPS 140 applications on Ubuntu. What is FIPS and why should a developer care? Developing applications for regulated ...

Nikos Mavrogiannopoulos
1 September 2021

Cybersecurity with Ubuntu

Cloud and server White paper

The cybersecurity state of affairs can be described as too complex today. There is an enormous number of threats endangering sensitive data for the average IT team to cope with. Threats ranging from exposure of physical assets stored in an office, to “social engineering” attacks resulting in unauthorized access, or even threats that explo ...

Nikos Mavrogiannopoulos
26 July 2021

Running FIPS 140 workloads on Ubuntu

Cloud and server Article

This is the first article in a two-article series regarding FIPS 140 and Ubuntu. The first part of this series, this article, covers running FIPS 140 applications on Ubuntu while the second part, is covering the development of FIPS applications on Ubuntu. What is FIPS and why do I need it? Even though cryptography is ...

Nikos Mavrogiannopoulos
9 July 2021

Linux kernel Livepatching

Cloud and server Article

Ubuntu Livepatch is the service and the software that enables organizations to quickly patch vulnerabilities on the Ubuntu Linux kernels. Livepatch provides uninterrupted service while reducing fire drills during high and critical severity kernel vulnerabilities. It is a complex technology and the details can be confusing, so in this post ...

Nikos Mavrogiannopoulos
14 April 2021

DISA has released the Ubuntu 20.04 LTS STIG benchmark

Security Article

The Security Technical Implementation Guides (STIG) are developed by the Defense Information System Agency (DISA) for the U.S. Department of Defense. They are configuration guidelines for hardening systems to improve security. They contain technical guidance which when implemented, locks down software and systems to mitigate malicious att ...

Nikos Mavrogiannopoulos
30 March 2021

What lies on the second phase of Ubuntu LTS? Two years of Ubuntu 14.04 in ESM

Security Article

Two years ago, we launched the Extended Security Maintenance (ESM) phase of Ubuntu 14.04, providing access to CVE patches through an Ubuntu Advantage for Infrastructure free or paid subscription. This phase extended the lifecycle of Ubuntu 14.04 LTS, released in April 2014, to a total of ten years, ending in April 2024. During the ESM ...