SJULTRA’s article on eBPF for Security: Extinction or Revolution? was included in Episode 63 of the eCHO news, a bi-weekly wrap up of all things eBPF and Cilium.
This newsletter is a great resource to keep up on the latest in cloud native networking, observability, and security.
Big thanks to Bill Mulligan, who leads community @ Isovalent working on Cilium and eBPF. It’s been ace to find some great people doing great eBPF work — all thanks to Bill’s efforts at building a community.
The SJULTRA team have pulled out some key parts of the newsletter that piqued our interested, but there’s more in the newsletter!
ALSO check out Bill’s LinkedIn Newsletter – eCHO News.
There's an eBPF Summit!
I wouldn’t have known about the eBPF summit if it wasn’t for Bill’s community work and this newsletter. THANKS BILL!
It’s September 11 in London and kicks off late afternoon.
Check out the details on the eBPF London Summit.
eBPF for anything: Turing complete?
This was fun read, but it reminds me of something serious: eBPF has many applications… including Game of Life!
I love articles that are fun but also share unique perspectives, it’s how we make progress, right?
Have your mind opened / challenged with eBPF for Anything.
eBPF a mitigation for Crowdstrike-type problems?
The WSJ gave eBPF an honourable mention in How the CrowdStrike Tech Outage Reignited a Battle Over the Heart of Microsoft Systems.
eBPF for Security: Evolution or Revolution?
One of our CNAPP engineers, Tom Howarth, wrote a paper for Accuknox — Technical Report: Protecting your containers from themselves with AccuKnox.
After that he put something together with me specifically about eBPF for Security: Evolution or Revolution?
More and more organizations and technologies are using eBPF for security. eBPF (extended Berkeley Packet Filter) is the new standard to program Linux kernel capabilities in a safe and efficient manner without requiring to change kernel source code or loading kernel modules. It has enabled a new generation of high performance tooling to be developed covering networking, security, and observability use cases. eBPF is a core and increasingly ubiquitous technology for networking, observability, and security. eBPF has been evolving in Linux kernels for a decade, it has matured as *the* way to secure workloads running on both Linux and also Windows– and it’s the increasing use cases and scope that is revolutionizing security across the cloud and the internet. When security and development pros use eBPF for security, they are doing so to answer these questions:
- What happens after a project or product has been delivered?
- How do we create an secure environment of continual improvement?
- How do we make sure that our secure deployment or application stays secure?
- How to we identify vulnerabilities and spot potential anomalies?
Video: eBPF in 120 seconds
Impossible….?
Summary
These are just a few bits – check out the newsletter for much more.
Also, here’s the list of people that Bill included in the thank you for contributing to the eCHO newsletter:
Content from:
