项目介绍

Collection of Linux eBPF slides/documents.

PDF/slide列表

Security 安全

• US-22-Fournier-Return-To-Sender Detecting kernel exploits with eBPF.pdf
• Stories from BPF Security Auditing at Google - Brendan Jackman.pdf
• eBPF Summit 2021 - Stories from BPF Security Auditing at Google - Brendan Jackman.pdf
• Think eBPF for Kernel Security Monitoring - Falco at Apple.pdf
• eBPF, I thought we were friends.pdf
• Rex Guo Junyuan Zeng - Phantom Attack - Evading System Call Monitoring.pdf
• BPFContain_Fixing_the_Soft_Underbelly_of_Container.pdf
• 2021-Secure Namespaced Kernel Audit for Containers.pdf
• SSTIC2021-Article-runtime_security_with_ebpf-fournier_afchain_baubeau.pdf
• eBPF_and_the_future_of_osquery_on_Linux.pdf
• Kernel_Runtime_Security_Instrumentation.pdf
• Container_Security_Issues_Challenges_and_the_Road_Ahead.pdf
• Fast and Safe Production Monitoring of JVM Applications with BPF Magic.pdf
• Kernel Runtime Security Instrumentation.pdf
• Creating and countering the next generation of Linux rootkits using eBPF.pdf
• us-21-With-Friends-Like-EBPF-Who-Needs-Enemies.pdf
• Mitigating Attacks on a Supercomputer with KRSI.pdf
• Security Observability with eBPF Measuring Cloud Native Security Through eBPF Observability

networking 网络

• Efficient Software Packet Processing on FPGA NICs
• Fast-Packet-Processing-using-eBPF-and-XDP
• bpf-rethinkingthelinuxkernel
• bpf-turninglinuxintoamicroservices-awareoperatingsystem
• How-eBPF_XDP-Will-Revolutionize-the-Telco_5G-Space
• sigcomm-2018-netronome-eBPF-XDP-david_beckett-jakub_kicinski

tracing profiling 跟踪抽样

• Aug19_Designing_a_gRPC_Interface_for_Kernel_Tracing_with_eBPF_Leonardo_DiDonato
• Data-Centric Tracing with BPF - Alan Maguire
• Why is my eBPF code slow_ - Simar Singh
• Coverage_for_eBPF_programs
• Kernel tracing with ebpf-Unlocking God Mode on Linux
• COSCUP 2016 – Linux Kernel Tracing
• Kernel Analysis Using eBPF Daniel Thompson Linaro

observability monitoring 观测监控

• Advanced_BPF_Kernel_Features_for_the_Container_Age_FOSDEM
• Performance Analysis Superpowers with Linux eBPF
• Monitoring_Kafka_Without_Instrumentation_Using_eBPF
• lpc22 ebpf kernel scheduling with ghost

eBPF基础知识

• eBPF Library Ecosystem Overview in Go, Rust, Python, C and More - Kyle Quest
• Beginners_guide_to_eBPF_programming_for_networking
• 高效入门eBPF-西安邮电大学-贺东升
• LIz_Rice-Beginners_guide_to_eBPF
• XDP Hardware Offload: Current Work, Debugging and Edge Cases

eBPF进阶知识

• Peeking into BPF verifier
• eBPF ELFs JMPing Through the Windows
• LPC21_Towards_truly_portable_eBPF
• bpf internals tracing examples brendan gregg
• demystify-ebpf-jit-compiler
• eBPF Summit 2021 - BPF and Spectre - Daniel Borkmann - Final

android

• eBPF-super-powers-on-ARM64-and-android
• eBPF Android Reverse Engineering Superpowers
• BPFroid Robust Real Time Android Malware Detection Framework
• Modernizing Android BPF The Android BPF Security Model

经典BLOG/站点

见 BLOG.md