Results 61 to 70 of about 1,010 (196)

Exploring Security Enhancements in Kubernetes CNI: A Deep Dive Into Network Policies

IEEE Access
With the explosive growth of Kubernetes adoption, Container Network Interfaces (CNIs) have become critical components for configuring and securing container networks, but a comprehensive analysis of their security capabilities and performance impact is ...
Bom Kim, Jinwoo Kim, Seungsoo Lee
doaj   +1 more source

Studi Literatur dan Analisis tentang Malware berbasis eBPF [PDF]

Penelitian ini bertujuan untuk melakukan studi literatur mengenai malware berbasis eBPF (eBPF-based malware), dengan fokus memberikan tinjauan singkat tentang malware berbasis eBPF yang ada saat ini.
Melvindo Goszal, Christopher Gerald
core   +1 more source

Assurance of eBPF security with the eBPF verifier

The Linux eBPF subsystem is a framework that enables running custom programs inside of the kernel. It allows users to add functionality to the kernel, securing the programs with a verifier to the kernel.
Kuoppala, Tobias
core   +1 more source

Optimus: association-based dynamic system call filtering for container attack surface reduction

Journal of Cloud Computing: Advances, Systems and Applications
While container adoption has witnessed significant growth in facilitating the operation of large-scale applications, this increased attention has also attracted adversaries who exploit numerous vulnerabilities present in contemporary containers ...
Seungyong Yang, Brent Byunghoon Kang, Jaehyun Nam   +2 more
doaj   +1 more source

KubeRosy: A Dynamic System Call Filtering Framework for Containers

IEEE Access
With the rapid adoption of cloud environments, container technology has become crucial for the efficient operation of large-scale applications. Although container technology offers high efficiency and scalability through low-level isolation via shared ...
Jin Her, Chi Hyeon Jo, Taejune Park, Seungsoo Lee   +3 more
doaj   +1 more source

eBPF - A First Look

, 2019
BPF is executed in kernel space. BPF can be loaded into the kernel at runtime. BPF can be used to dynamically trace kernel function calls. BPF runs in a sandboxed environment, minimizing the risk of harm to the system.
openaire   +1 more source

Cost-Effective Sub-THz Signal Generation and Transmission Using a Directly Modulated Laser

IEEE Photonics Journal
This paper presents a comprehensive experimental analysis of a cost-effective and spectrally efficient approach for sub-terahertz (sub-THz) signal generation and transmission, consisting of a directly modulated laser (DML) combined with carrier ...
M. Botella-Campos, P. T. Dat, K. Akahane, J. Mora, B. Ortega   +4 more
doaj   +1 more source

High-Speed Network DDoS Attack Detection: A Survey. [PDF]

Sensors (Basel), 2023
Haseeb-Ur-Rehman RMA, Aman AHM, Hasan MK, Ariffin KAZ, Namoun A, Tufail A, Kim KH.   +6 more
europepmc   +1 more source

Механізм захисту SIP-серверів на основі технології eBPF [PDF]

Дипломна робота: 61 ст., 5 табл., 18 джерел. Тема: Механізми захисту SIP-серверів на основі технології eBPF Робота присвячена дослідженню та розробці механізмів захисту SIP-серверів від мережевих атак з використанням технології eBPF.
Хаща, Іван Станіславович
core   +1 more source

A hybrid eBPF/ML intrusion detection system with two-model heterogeneous ensemble learning and real-time gateway-mode network blocking

Journal of King Saud University: Computer and Information Sciences
Network intrusion detection systems (IDS) face a persistent trade-off between detection accuracy and processing latency. Conventional ML-based IDS implementations operate entirely in user space, introducing per-packet overhead from kernel-to-user-space ...
Yahya Alnattaf, Hanaa F. Mahmood
doaj   +1 more source