MOAT: Towards Safe BPF Kernel Extension

Hongyi Lu, Shuai Wang, Yechang Wu +2

The Linux kernel extensively uses the Berkeley Packet Filter (BPF) to allow user-written BPF applications to execute in the kernel space. The BPF employs a verifier to check the se…