{"id":"https://openalex.org/W4388954858","doi":"https://doi.org/10.1145/3605770.3625206","title":"Enforcing SBOMs through the Linux kernel with eBPF and IMA","display_name":"Enforcing SBOMs through the Linux kernel with eBPF and IMA","publication_year":2023,"publication_date":"2023-11-23","ids":{"openalex":"https://openalex.org/W4388954858","doi":"https://doi.org/10.1145/3605770.3625206"},"language":"en","primary_location":{"id":"doi:10.1145/3605770.3625206","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3605770.3625206","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3605770.3625206","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2023 Workshop on Software Supply Chain Offensive Research and Ecosystem Defenses","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3605770.3625206","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5060915571","display_name":"A.-M. Crawford","orcid":null},"institutions":[{"id":"https://openalex.org/I4210097046","display_name":"Fitbit (United States)","ror":"https://ror.org/00z8s7v19","country_code":"US","type":"company","lineage":["https://openalex.org/I4210097046"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Alex Crawford","raw_affiliation_strings":["EdgeBit, Inc., San Francisco, CA, USA"],"raw_orcid":"https://orcid.org/0009-0007-9149-3320","affiliations":[{"raw_affiliation_string":"EdgeBit, Inc., San Francisco, CA, USA","institution_ids":["https://openalex.org/I4210097046"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5093328446","display_name":"Eugene Yakubovich","orcid":"https://orcid.org/0009-0009-9760-9309"},"institutions":[{"id":"https://openalex.org/I4210097046","display_name":"Fitbit (United States)","ror":"https://ror.org/00z8s7v19","country_code":"US","type":"company","lineage":["https://openalex.org/I4210097046"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Eugene Yakubovich","raw_affiliation_strings":["EdgeBit, Inc., San Francisco, CA, USA"],"raw_orcid":"https://orcid.org/0009-0009-9760-9309","affiliations":[{"raw_affiliation_string":"EdgeBit, Inc., San Francisco, CA, USA","institution_ids":["https://openalex.org/I4210097046"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5093328447","display_name":"Rob Szumski","orcid":"https://orcid.org/0009-0004-9809-9965"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Rob Szumski","raw_affiliation_strings":["EdgeBit, Inc., Richmond, VA, USA"],"raw_orcid":"https://orcid.org/0009-0004-9809-9965","affiliations":[{"raw_affiliation_string":"EdgeBit, Inc., Richmond, VA, USA","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.3442,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":{"value":0.49942736,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":94},"biblio":{"volume":null,"issue":null,"first_page":"77","last_page":"78"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11181","display_name":"Advanced Data Storage Technologies","score":0.9790999889373779,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11181","display_name":"Advanced Data Storage Technologies","score":0.9790999889373779,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10772","display_name":"Distributed systems and fault tolerance","score":0.9635000228881836,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9541000127792358,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.8354229927062988},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7864460945129395},{"id":"https://openalex.org/keywords/reboot","display_name":"Reboot","score":0.7334280014038086},{"id":"https://openalex.org/keywords/container","display_name":"Container (type theory)","score":0.6875349283218384},{"id":"https://openalex.org/keywords/kernel","display_name":"Kernel (algebra)","score":0.6624199151992798},{"id":"https://openalex.org/keywords/linux-kernel","display_name":"Linux kernel","score":0.6234424710273743},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.5305398106575012},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.5201114416122437},{"id":"https://openalex.org/keywords/installation","display_name":"Installation","score":0.4711560010910034},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.1226525604724884}],"concepts":[{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.8354229927062988},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7864460945129395},{"id":"https://openalex.org/C120524526","wikidata":"https://www.wikidata.org/wiki/Q1709148","display_name":"Reboot","level":2,"score":0.7334280014038086},{"id":"https://openalex.org/C2781018962","wikidata":"https://www.wikidata.org/wiki/Q5164884","display_name":"Container (type theory)","level":2,"score":0.6875349283218384},{"id":"https://openalex.org/C74193536","wikidata":"https://www.wikidata.org/wiki/Q574844","display_name":"Kernel (algebra)","level":2,"score":0.6624199151992798},{"id":"https://openalex.org/C553261973","wikidata":"https://www.wikidata.org/wiki/Q14579","display_name":"Linux kernel","level":2,"score":0.6234424710273743},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.5305398106575012},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.5201114416122437},{"id":"https://openalex.org/C146778888","wikidata":"https://www.wikidata.org/wiki/Q836862","display_name":"Installation","level":2,"score":0.4711560010910034},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.1226525604724884},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C114614502","wikidata":"https://www.wikidata.org/wiki/Q76592","display_name":"Combinatorics","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3605770.3625206","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3605770.3625206","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3605770.3625206","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2023 Workshop on Software Supply Chain Offensive Research and Ecosystem Defenses","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3605770.3625206","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3605770.3625206","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3605770.3625206","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2023 Workshop on Software Supply Chain Offensive Research and Ecosystem Defenses","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4388954858.pdf","grobid_xml":"https://content.openalex.org/works/W4388954858.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W2347997421","https://openalex.org/W2484510436","https://openalex.org/W2070989512","https://openalex.org/W4388140715","https://openalex.org/W2345419794","https://openalex.org/W4254229464","https://openalex.org/W4383106378","https://openalex.org/W2902538727","https://openalex.org/W2614013133","https://openalex.org/W2993664738"],"abstract_inverted_index":{"At":[0],"build-time,":[1],"we":[2],"generate":[3],"SBOMs":[4],"and":[5,16,37,71,86],"sign":[6],"containers.":[7],"But":[8],"at":[9],"run-time,":[10],"tools":[11],"like":[12],"Open":[13],"Policy":[14],"Agent":[15],"Kyverno":[17],"only":[18,33],"check":[19],"the":[20,27,39,63],"signatures":[21,36],"or":[22,101,118,130],"Kubernetes":[23,116],"Pod":[24],"attributes,":[25],"not":[26],"full":[28],"contents.":[29],"Let's":[30],"go":[31],"beyond":[32],"checking":[34,42],"container":[35,45],"explore":[38],"possibility":[40],"of":[41,50],"an":[43,126],"entire":[44],"against":[46],"its":[47],"software":[48],"bill":[49],"materials":[51],"(SBOM)":[52],"in":[53,62],"real":[54],"time.":[55],"This":[56,106],"paper":[57],"will":[58],"discuss":[59],"how":[60],"features":[61],"Linux":[64],"kernel":[65,104],"-":[66,73],"Integrity":[67],"Measurement":[68],"Architecture":[69],"(IMA)":[70],"eBPF":[72],"could":[74],"eventually":[75],"be":[76],"used":[77],"on":[78],"a":[79,99,115,122,132],"cluster's":[80],"nodes":[81],"to":[82,93,111,124],"secure":[83],"running":[84],"containers":[85],"potentially":[87],"other":[88],"software.":[89],"We":[90],"are":[91],"aiming":[92],"provide":[94],"this":[95],"protection":[96],"without":[97,121],"requiring":[98],"reboot":[100],"installing":[102],"non-standard":[103],"modules.":[105],"would":[107],"allow":[108],"end":[109],"users":[110],"protect":[112],"machines":[113],"via":[114],"DaemonSet":[117],"systemd":[119],"unit":[120],"need":[123],"tweak":[125],"operating":[127],"system":[128],"image":[129],"use":[131],"custom":[133],"kernel.":[134]},"counts_by_year":[{"year":2025,"cited_by_count":1}],"updated_date":"2026-08-26T07:47:46.906454","created_date":"2025-10-10T00:00:00"}