Results 11 to 20 of about 1,081 (200)

Understanding the Security of Linux eBPF Subsystem

Proceedings of the 14th ACM SIGOPS Asia-Pacific Workshop on Systems, 2023
Linux eBPF allows a userspace application to execute code inside the Linux kernel without modifying the kernel code or inserting a kernel module. An in-kernel eBPF verifier preverifies any untrusted eBPF bytecode before running it in kernel context ...
Wang, Xiaoguang, Ravindran, Binoy, Noor Mohamed, Mohamed Husain   +2 more
core   +4 more sources

Comparing Security in eBPF and WebAssembly [PDF]

Proceedings of the 1st Workshop on eBPF and Kernel Extensions, 2023
This paper examines the security of eBPF and WebAssembly (Wasm), two technologies that have gained widespread adoption in recent years, despite being designed for very different use cases and environments. While eBPF is a technology primarily used within
Dejaeghere, Jules; id_orcid, Pulls, Tobias, Dejaeghere, Jules, Gbadamosi, Bolaji, Gbadamosi, Bolaji,, Pulls, Tobias,, Rochet, Florentin, Rochet, Florentin,, Dejaeghere, Jules,   +8 more
core   +5 more sources

BRF: eBPF Runtime Fuzzer

CoRR, 2023
The eBPF technology in the Linux kernel has been widely adopted for different applications, such as networking, tracing, and security, thanks to the programmability it provides.
Hung, Hsin-Wei, Sani, Ardalan Amiri
core   +4 more sources

EBPF Programming Made Easy with eCLAT

2022 18th International Conference on Network and Service Management (CNSM), 2022
With the rise of the Network Softwarization era, eBPF has become a hot technology for efficient packet processing on commodity hardware. However the development of custom eBPF solutions is a challenging process that requires highly qualified human ...
Loreti P., Bracciale L., Lungaroni P., Salsano S., Bianchi G., Mayer A.   +5 more
core   +2 more sources

Programmable System Call Security with eBPF

CoRR, 2023
System call filtering is a widely used security mechanism for protecting a shared OS kernel against untrusted user applications. However, existing system call filtering techniques either are too expensive due to the context switch overhead imposed by ...
Xu, Tianyin, Zhu, YiFei, Williams, Dan, Jia, Jinghao, Franke, Hubertus, Skarlatos, Dimitrios, Feldman-Fitzthum, Tobin, Arcangeli, Andrea, Canella, Claudio, Gruss, Daniel   +9 more
core   +4 more sources

The eBPF Runtime in the Linux Kernel

CoRR
Extended Berkeley Packet Filter (eBPF) is a runtime that enables users to load programs into the operating system (OS) kernel, like Linux or Windows, and execute them safely and efficiently at designated kernel hooks.
Pulls, Tobias, Gbadamosi, Bolaji, Sorce, Simo, Høiland-Jørgensen, Toke, Ferlin-Reiter, Simone, Brunström, Anna, Leonardi, Luigi   +6 more
core   +5 more sources

A Theory-Led Evaluation of a Scalable Intervention to Promote Evidence-Based, Research-Informed Practice in Schools to Address Attainment Gaps

Education Sciences, 2022
Evidence-based practice is a salient solution that has been presented to address the persistent educational attainment gap linked to economic disadvantage.
Riikka Hofmann, Sonia Ilie
doaj   +1 more source

Practical and Flexible Kernel CFI Enforcement using eBPF

, 2023
Enforcing control flow integrity (CFI) in the kernel (kCFI) can prevent control-flow hijack attacks. Unfortunately, current kCFI approaches have high overhead or are inflexible and cannot support complex context-sensitive policies.
Williams, Dan, Jia, Jinghao, Jamjoom, Hani, Le, Michael V., Ahmed, Salman   +4 more
core   +1 more source

Unleashing Unprivileged eBPF Potential with Dynamic Sandboxing [PDF]

, 2023
For safety reasons, unprivileged users today have only limited ways to customize the kernel through the extended Berkeley Packet Filter (eBPF). This is unfortunate, especially since the eBPF framework itself has seen an increase in scope over the years ...
Han, Xueyuan, Pasquier, Thomas, Lim, Soo Yee   +2 more
core   +1 more source

Composing eBPF Programs Made Easy With HIKe and eCLAT

, 2023
With the rise of the Network Softwarization era, eBPF has become a hot technology for efficient packet processing on commodity hardware. However the development of custom eBPF solutions is a challenging process that requires highly qualified human ...
Sidoretti G., Loreti P., Bracciale L., Lungaroni P., Salsano S., Bianchi G., Mayer A.   +6 more
core   +1 more source