(Ab)using eBPF as a security tool

No ratings

Presented at BSidesVarazdin 2019 by

eBPF unlocks God mode on Linux. Why not (ab)use it as a security tool then?In this talk I will present few real-world examples where eBPF fits perfectly as a security tool. Since we live in a containerized world my focus will be on such environments.