Cross Container Attacks: The Bewildered {eBPF} on Clouds

Y He, R Guo, Y **ng, X Che, K Sun, Z Liu… - 32nd USENIX Security …, 2023 - usenix.org
The extended Berkeley Packet Filter (eBPF) provides powerful and flexible kernel interfaces
to extend the kernel functions for user space programs via running bytecode directly in the …

ViperProbe: Rethinking microservice observability with eBPF

J Levin, TA Benson - 2020 IEEE 9th International Conference …, 2020 - ieeexplore.ieee.org
Recent shifts to microservice-based architectures and the supporting servicemesh radically
disrupt the landscape of performance-oriented management tasks. While the adoption of …

Network-centric distributed tracing with deepflow: Troubleshooting your microservices in zero code

J Shen, H Zhang, Y **ang, X Shi, X Li, Y Shen… - Proceedings of the …, 2023 - dl.acm.org
Microservices are becoming more complicated, posing new challenges for traditional
performance monitoring solutions. On the one hand, the rapid evolution of microservices …

{BeeBox}: Hardening {BPF} against Transient Execution Attacks

D **, AJ Gaidis, VP Kemerlis - 33rd USENIX Security Symposium …, 2024 - usenix.org
The Berkeley Packet Filter (BPF) has emerged as the de-facto standard for carrying out safe
and performant, user-specified computation (s) in kernel space. However, BPF also …

{λ-IO}: A Unified {IO} Stack for Computational Storage

Z Yang, Y Lu, X Liao, Y Chen, J Li, S He… - 21st USENIX Conference …, 2023 - usenix.org
The emerging computational storage device offers an opportunity for in-storage computing. It
alleviates the overhead of data movement between the host and the device, and thus …

Performance interfaces for network functions

R Iyer, K Argyraki, G Candea - 19th USENIX Symposium on Networked …, 2022 - usenix.org
Modern programmers routinely use third-party code, and infrastructure operators deploy
software they did not write. This would not be possible without semantic interfaces …

{Application-Informed} Kernel Synchronization Primitives

S Park, D Zhou, Y Qian, I Calciu, T Kim… - 16th USENIX Symposium …, 2022 - usenix.org
Kernel synchronization primitives are the backbone of any OS design. Kernel locks, for
instance, are crucial for both application performance and correctness. However, unlike …

Specification and verification in the field: Applying formal methods to {BPF} just-in-time compilers in the linux kernel

L Nelson, J Van Geffen, E Torlak, X Wang - 14th USENIX Symposium on …, 2020 - usenix.org
This paper describes our experience applying formal methods to a critical component in the
Linux kernel, the just-in-time compilers (" JITs") for the Berkeley Packet Filter (BPF) virtual …

Simurgh: a fully decentralized and secure NVMM user space file system

N Moti, F Schimmelpfennig, R Salkhordeh… - Proceedings of the …, 2021 - dl.acm.org
The availability of non-volatile main memory (NVMM) has started a new era for storage
systems and NVMM specific file systems can support extremely high data and metadata …

Dynamic multimedia encryption using a parallel file system based on multi-core processors

OA Khashan, NM Khafajah, W Alomoush, M Alshinwan… - Cryptography, 2023 - mdpi.com
Securing multimedia data on disk drives is a major concern because of their rapidly
increasing volumes over time, as well as the prevalence of security and privacy problems …