Projets par an
Résumé
This paper examines the security of eBPF and WebAssembly (Wasm), two technologies that have gained widespread adoption in recent years, despite being designed for very different use cases and environments. While eBPF is a technology primarily used within operating system kernels such as Linux, Wasm is a binary instruction format designed for a stack-based virtual machine with use cases extending beyond the web. Recognizing the growth and expanding ambitions of eBPF, Wasm may provide instructive insights, given its design around securely executing arbitrary untrusted programs in complex and hostile environments such as web browsers and clouds. We analyze the security goals, community evolution, memory models, and execution models of both technologies, and conduct a comparative security assessment, exploring memory safety, control flow integrity, API access, and side-channels. Our results show that eBPF has a history of focusing on performance first and security second, while Wasm puts more emphasis on security at the cost of some runtime overheads. Considering language-based restrictions for eBPF and a security model for API access are fruitful directions for future work.
langue originale | Anglais |
---|---|
titre | eBPF 2023 - Proceedings of the ACM SIGCOMM 2023 Workshop on eBPF and Kernel Extensions |
Lieu de publication | New York, NY, USA |
Editeur | ACM Press |
Pages | 35–41 |
Nombre de pages | 7 |
ISBN (Electronique) | 9798400702938 |
ISBN (imprimé) | 9798400702938 |
Les DOIs | |
Etat de la publication | Publié - 10 sept. 2023 |
Série de publications
Nom | eBPF 2023 - Proceedings of the ACM SIGCOMM 2023 Workshop on eBPF and Kernel Extensions |
---|
Empreinte digitale
Examiner les sujets de recherche de « Comparing Security in eBPF and WebAssembly ». Ensemble, ils forment une empreinte digitale unique.Projets
- 1 Actif
-
CYBEREXCELLENCE: Le projet d’excellence de la cyber sécurité dans le cadre du plan de la Région Wallonne (CyberWal)
Colin, J., Schobbens, P. Y., Dejaeghere, J., Devroey, X., Nguyen, G., Rochet, F., Schumacher, L., Knockaert, M., Jacquet, J., Linden, I., Elkoulak, H., Poeng, K., Ouardi, D., Goffaux, L. & Barkallah, M.
1/01/22 → 31/12/27
Projet: Recherche
Activités
- 1 Participation à un atelier/workshop, un séminaire, un cours
-
1st Workshop on eBPF and Kernel Extensions
Jules Dejaeghere (Conférencier)
10 sept. 2023Activité: Participation ou organisation d'un événement › Participation à un atelier/workshop, un séminaire, un cours