Results 71 to 80 of about 1,081 (200)

eBPF - A First Look

, 2019
BPF is executed in kernel space. BPF can be loaded into the kernel at runtime. BPF can be used to dynamically trace kernel function calls. BPF runs in a sandboxed environment, minimizing the risk of harm to the system.
openaire   +1 more source

High-Speed Network DDoS Attack Detection: A Survey. [PDF]

Sensors (Basel), 2023
Haseeb-Ur-Rehman RMA, Aman AHM, Hasan MK, Ariffin KAZ, Namoun A, Tufail A, Kim KH.   +6 more
europepmc   +1 more source

eSPADE-XR: Static-Runtime Cross-Verification of XR Permission Evidence in Android XR

IEEE Access
Static XR permission evidence does not necessarily indicate runtime use, while Binder IPC exposes only low-level metadata. Static artifacts may originate from unused libraries or framework code, and raw transaction codes remain interface-local unless ...
Hyojoong Ju, Hyeonjun Park, Seungsoo Lee
doaj   +1 more source

NETWORK SECURITY USING EBPF TECHNOLOGY

U ovom radu obrađena je primjena eBPF (extended Berkeley Packet Filter) tehnologije u području mrežne sigurnosti, s posebnim naglaskom na XDP (eXpress Data Path) mehanizam koji omogućuje obradu paketa na najnižoj razini mrežnog stoga.
Leko, Kata
core   +1 more source

Exploring Security Enhancements in Kubernetes CNI: A Deep Dive Into Network Policies

IEEE Access
With the explosive growth of Kubernetes adoption, Container Network Interfaces (CNIs) have become critical components for configuring and securing container networks, but a comprehensive analysis of their security capabilities and performance impact is ...
Bom Kim, Jinwoo Kim, Seungsoo Lee
doaj   +1 more source

In-Sender Reordering Compensation for RACK in Container Overlay Networks

IEEE Open Journal of the Communications Society
Container orchestrators like Kubernetes utilize packet encapsulation to construct container overlay networks, allowing for transparent communications among containers.
Sunjae Kim, Wonjun Lee
doaj   +1 more source

Optimus: association-based dynamic system call filtering for container attack surface reduction

Journal of Cloud Computing: Advances, Systems and Applications
While container adoption has witnessed significant growth in facilitating the operation of large-scale applications, this increased attention has also attracted adversaries who exploit numerous vulnerabilities present in contemporary containers ...
Seungyong Yang, Brent Byunghoon Kang, Jaehyun Nam   +2 more
doaj   +1 more source

Leveraging eBPF for programmable network functions with IPv6 segment routing

, 2018
With the advent of Software Defined Networks (SDN), Network Function Virtualisation (NFV) or Service Function Chaining (SFC), operators expect networks to support flexible services beyond the mere forwarding of packets.
Xhonneux, Mathieu, Bonaventure, Olivier, The 14th International Conference on emerging Networking EXperiments and Technologies, Duchene, Fabien   +3 more
core   +1 more source

On the stability & phase locking to a system reference of an optoelectronic oscillator with large delay. [PDF]

Sci Rep, 2023
Hasan M, Nicholls C, Hall T.
europepmc   +1 more source

Assurance of eBPF security with the eBPF verifier

The Linux eBPF subsystem is a framework that enables running custom programs inside of the kernel. It allows users to add functionality to the kernel, securing the programs with a verifier to the kernel.
Kuoppala, Tobias
core   +1 more source