Soo Yee Lim

SafeBPF: Hardware-assisted Defense-in-depth for eBPF Kernel Extensions

2024 · arXiv (Cornell University)

The eBPF framework enables execution of user-provided code in the Linux kernel. In the last few years, a large ecosystem of cloud services has leveraged eBPF to enhance container security, system observability, and network management. …