This paper introduces state embedding, a novel and highly effective technique for validating
the correctness of the eBPF verifier, a critical component for Linux kernel security. To check …

Managing the performance of thousands of services across millions of servers demands a
networking stack that can dynamically adjust protocol settings to match diverse priorities and …

The eBPF framework enables execution of user-provided code in the Linux kernel. In the last
few years, a large ecosystem of cloud services has leveraged eBPF to enhance container …

eBPF is an inspiring technique in Linux that allows user space processes to extend the
kernel by dynamically injecting programs. However, it poses security issues, since the …

The uninterpretability of DNNs hinders their deployment to safety-critical applications.
Recent works have shown that Abstract-Interpretation-based formal certification techniques …

The extended Berkeley Packet Filter (eBPF) technology has been extending the capabilities
of current Operating Systems (OSs) rapidly in recent years. The eBPF community is well …

Differential testing can be an effective way to find bugs in software systems with multiple
implementations that conform to the same specification, like compilers, network protocol …

eBPF (extended Berkeley Packet Filter) significantly enhances observability, performance,
and security within the Linux kernel, playing a pivotal role in various real-world applications …

We develop a declarative DSL-ConstraintFlow-that can be used to specify Abstract
Interpretation-based DNN certifiers. In ConstraintFlow, programmers can easily define …

This paper describes our experience deploying automated verification techniques for
proving the correctness of value tracking components of the eBPF verifier in the Linux Kernel …