Towards Secure Kernel Extensibility with eBPF
A talk on using isolation techniques to ensure the runtime memory safety of eBPF programs.
Sep 11, 2024
SafeBPF: Hardware-assisted Defense-in-depth for eBPF Kernel Extensions
The SafeBPF patch is available for download by clicking the CODE button above. The patch includes software-based isolation on both the x86 and ARM architecture, and hardware-assisted isolation on ARM. For more information about our software artifact, please refer to the paper or contact me via email.
Sep 9, 2024
FetchBPF: Customizable Prefetching Policies in Linux with eBPF
Jul 1, 2024
Unleashing Unprivileged eBPF Potential with Dynamic Sandboxing
Oct 1, 2023
Secure Namespaced Kernel Audit for Containers
The software artifacts are open-sourced. For more information, please refer to the paper or contact me via email.
Dec 1, 2021