Thomas Pasquier

Managing Big Data with Information Flow Control

2015

Concern about data leakage is holding back more widespread adoption of cloud computing by companies and public institutions alike. To address this, cloud tenants/applications are traditionally isolated in virtual machines or containers. But an emerging …

SafeBPF: Hardware-assisted Defense-in-depth for eBPF Kernel Extensions

2024 · arXiv (Cornell University)

The eBPF framework enables execution of user-provided code in the Linux kernel. In the last few years, a large ecosystem of cloud services has leveraged eBPF to enhance container security, system observability, and network management. …