Systems and Network Security with eBPF
eBFP technology allows users to develop special programs that will be executed in the context of an operating system kernel. Initially, the project was aimed at packet filter development but later evolved to enable other operations such as observability, performance and security. This article describes the main concepts of eBPF, development tools and their application in the implementation of system and network security policies in GNU/Linux systems.
Authors
- Santiago Horacio Nicolau
- Juan Carlos Hernández (ORCID: https://orcid.org/0000-0002-3661-5352)
- Marino Arroyo (ORCID: https://orcid.org/0000-0003-1647-940X)
Publication Details
- Published
- 2024-09-18
- DOI
- https://doi.org/10.1109/argencon62399.2024.10735938
- Primary Topic
- Network Security and Intrusion Detection
- Type
- article
- Field-Weighted Citation Impact
- 0.00