2 papers
cs.OS2023
Unleashing Unprivileged eBPF Potential with Dynamic Sandboxing
Soo Yee Lim, Xueyuan Han, Thomas Pasquier
For safety reasons, unprivileged users today have only limited ways to customize the kernel through the extended Berkeley Packet Filter (eBPF). This is unfortunate, especially sinc…
cs.CR2021
Secure Namespaced Kernel Audit for Containers
Soo Yee Lim, Bogdan Stelea, Xueyuan Han +1
Despite the wide usage of container-based cloud computing, container auditing for security analysis relies mostly on built-in host audit systems, which often lack the ability to ca…