ELASTIC D1.2: Security of Wasm and eBPF Technologies

Executable isolation is a key ingredient to the ELASTIC framework, allowing the safe and efficient execution of untrusted software in an isolated environment. In this document, we examine the security landscape of ELASTIC's two main executable isolation technologies, Wasm and eBPF, identifying and mitigating potential vulnerabilities, as well as presenting new technologies that will help to secure users' applications, protect the platform from malicious software, enable robust and secure orchestration of Wasm applications, ease development of secure eBPF software, and monitor running systems for potential intrusions with a greater level of performance and observability than the current state of the art.