Securing the Cloud: Implementing eBPF Subsystem

To design and implement a secure home lab environment using a Linux system, demonstrating appropriate skills in system administration and cybersecurity. Cloud computing has changed the way businesses and organizations manage, store and process data. However, changes in cloud environments also present various security challenges, especially in terms of protecting critical data and maintaining system integrity. Originally designed to intercept network packets, the eBPF subsystem has become a powerful, programmable monitoring tool for the Linux kernel system kernel internally implemented, this proposed work aims to demonstrate how eBPF use cloud environment can be secured, provide fine-grained visibility and control over system actions, enforce security measures, detect abnormal activities, and mitigate the attack surface. This function integrates the eBPF subsystem in the cloud architecture, focusing on functional issues such as network security, system traceability, threat detection, etc. We implement and test eBPF-based programs that manage cloud performance, testing network traffic, and show bad behavior in real time. The results show that eBPF can deliver significant security benefits without severe performance penalties, making it an ideal solution for modern cloud environments.