Cross Container Attacks: The Bewildered {eBPF} on Clouds
The extended Berkeley Packet Filter (eBPF) provides powerful and flexible kernel interfaces
to extend the kernel functions for user space programs via running bytecode directly in the …
to extend the kernel functions for user space programs via running bytecode directly in the …
ViperProbe: Rethinking microservice observability with eBPF
J Levin, TA Benson - 2020 IEEE 9th International Conference …, 2020 - ieeexplore.ieee.org
Recent shifts to microservice-based architectures and the supporting servicemesh radically
disrupt the landscape of performance-oriented management tasks. While the adoption of …
disrupt the landscape of performance-oriented management tasks. While the adoption of …
Network-centric distributed tracing with deepflow: Troubleshooting your microservices in zero code
Microservices are becoming more complicated, posing new challenges for traditional
performance monitoring solutions. On the one hand, the rapid evolution of microservices …
performance monitoring solutions. On the one hand, the rapid evolution of microservices …
{BeeBox}: Hardening {BPF} against Transient Execution Attacks
The Berkeley Packet Filter (BPF) has emerged as the de-facto standard for carrying out safe
and performant, user-specified computation (s) in kernel space. However, BPF also …
and performant, user-specified computation (s) in kernel space. However, BPF also …
{λ-IO}: A Unified {IO} Stack for Computational Storage
The emerging computational storage device offers an opportunity for in-storage computing. It
alleviates the overhead of data movement between the host and the device, and thus …
alleviates the overhead of data movement between the host and the device, and thus …
Performance interfaces for network functions
Modern programmers routinely use third-party code, and infrastructure operators deploy
software they did not write. This would not be possible without semantic interfaces …
software they did not write. This would not be possible without semantic interfaces …
{Application-Informed} Kernel Synchronization Primitives
Kernel synchronization primitives are the backbone of any OS design. Kernel locks, for
instance, are crucial for both application performance and correctness. However, unlike …
instance, are crucial for both application performance and correctness. However, unlike …
Specification and verification in the field: Applying formal methods to {BPF} just-in-time compilers in the linux kernel
This paper describes our experience applying formal methods to a critical component in the
Linux kernel, the just-in-time compilers (" JITs") for the Berkeley Packet Filter (BPF) virtual …
Linux kernel, the just-in-time compilers (" JITs") for the Berkeley Packet Filter (BPF) virtual …
Simurgh: a fully decentralized and secure NVMM user space file system
The availability of non-volatile main memory (NVMM) has started a new era for storage
systems and NVMM specific file systems can support extremely high data and metadata …
systems and NVMM specific file systems can support extremely high data and metadata …
Dynamic multimedia encryption using a parallel file system based on multi-core processors
Securing multimedia data on disk drives is a major concern because of their rapidly
increasing volumes over time, as well as the prevalence of security and privacy problems …
increasing volumes over time, as well as the prevalence of security and privacy problems …