{"id":"https://openalex.org/W4385993948","doi":"https://doi.org/10.1145/3609021.3609297","title":"Enabling BPF Runtime policies for better BPF management","display_name":"Enabling BPF Runtime policies for better BPF management","publication_year":2023,"publication_date":"2023-08-18","ids":{"openalex":"https://openalex.org/W4385993948","doi":"https://doi.org/10.1145/3609021.3609297"},"language":"en","primary_location":{"id":"doi:10.1145/3609021.3609297","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3609021.3609297","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3609021.3609297","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 1st Workshop on eBPF and Kernel Extensions","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3609021.3609297","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5010451479","display_name":"Raj Sahu","orcid":"https://orcid.org/0000-0001-5160-0362"},"institutions":[{"id":"https://openalex.org/I859038795","display_name":"Virginia Tech","ror":"https://ror.org/02smfhw86","country_code":"US","type":"education","lineage":["https://openalex.org/I859038795"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Raj Sahu","raw_affiliation_strings":["Virginia Tech, Blacksburg, United States of America"],"raw_orcid":"https://orcid.org/0000-0001-5160-0362","affiliations":[{"raw_affiliation_string":"Virginia Tech, Blacksburg, United States of America","institution_ids":["https://openalex.org/I859038795"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5045373894","display_name":"Dan Williams","orcid":"https://orcid.org/0000-0003-1537-0525"},"institutions":[{"id":"https://openalex.org/I859038795","display_name":"Virginia Tech","ror":"https://ror.org/02smfhw86","country_code":"US","type":"education","lineage":["https://openalex.org/I859038795"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Dan Williams","raw_affiliation_strings":["Virginia Tech, Blacksburg, United States of America"],"raw_orcid":"https://orcid.org/0000-0003-1537-0525","affiliations":[{"raw_affiliation_string":"Virginia Tech, Blacksburg, United States of America","institution_ids":["https://openalex.org/I859038795"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5010451479"],"corresponding_institution_ids":["https://openalex.org/I859038795"],"apc_list":null,"apc_paid":null,"fwci":0.9838,"has_fulltext":true,"cited_by_count":5,"citation_normalized_percentile":{"value":0.77053815,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":97,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"49","last_page":"55"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10772","display_name":"Distributed systems and fault tolerance","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10772","display_name":"Distributed systems and fault tolerance","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9972000122070312,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10933","display_name":"Real-Time Systems Scheduling","score":0.9965999722480774,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8153921961784363},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.6236786246299744},{"id":"https://openalex.org/keywords/leverage","display_name":"Leverage (statistics)","score":0.5275649428367615},{"id":"https://openalex.org/keywords/observability","display_name":"Observability","score":0.5188228487968445},{"id":"https://openalex.org/keywords/runtime-verification","display_name":"Runtime verification","score":0.4490358829498291},{"id":"https://openalex.org/keywords/runtime-system","display_name":"Runtime system","score":0.43385380506515503},{"id":"https://openalex.org/keywords/security-policy","display_name":"Security policy","score":0.4316330850124359},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.4176996350288391},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.2528671622276306},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.17688307166099548},{"id":"https://openalex.org/keywords/formal-verification","display_name":"Formal verification","score":0.14489921927452087}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8153921961784363},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.6236786246299744},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.5275649428367615},{"id":"https://openalex.org/C36299963","wikidata":"https://www.wikidata.org/wiki/Q1369844","display_name":"Observability","level":2,"score":0.5188228487968445},{"id":"https://openalex.org/C202973057","wikidata":"https://www.wikidata.org/wiki/Q7380130","display_name":"Runtime verification","level":3,"score":0.4490358829498291},{"id":"https://openalex.org/C2780870223","wikidata":"https://www.wikidata.org/wiki/Q1004415","display_name":"Runtime system","level":2,"score":0.43385380506515503},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.4316330850124359},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4176996350288391},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.2528671622276306},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.17688307166099548},{"id":"https://openalex.org/C111498074","wikidata":"https://www.wikidata.org/wiki/Q173326","display_name":"Formal verification","level":2,"score":0.14489921927452087},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C28826006","wikidata":"https://www.wikidata.org/wiki/Q33521","display_name":"Applied mathematics","level":1,"score":0.0},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3609021.3609297","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3609021.3609297","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3609021.3609297","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 1st Workshop on eBPF and Kernel Extensions","raw_type":"proceedings-article"},{"id":"pmh:oai:vtechworks.lib.vt.edu:10919/116400","is_oa":true,"landing_page_url":"http://hdl.handle.net/10919/116400","pdf_url":"https://vtechworks.lib.vt.edu/bitstreams/9fc2f151-1edf-43ca-b60b-5d5b86bd3266/download","source":{"id":"https://openalex.org/S4306400248","display_name":"VTechWorks (Virginia Tech)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I859038795","host_organization_name":"Virginia Tech","host_organization_lineage":["https://openalex.org/I859038795"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Text"}],"best_oa_location":{"id":"doi:10.1145/3609021.3609297","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3609021.3609297","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3609021.3609297","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 1st Workshop on eBPF and Kernel Extensions","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2148503985","display_name":null,"funder_award_id":"CNS-2236966","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"pdf":true,"grobid_xml":false},"content_urls":{"pdf":"https://content.openalex.org/works/W4385993948.pdf"},"referenced_works_count":23,"referenced_works":["https://openalex.org/W59298299","https://openalex.org/W95608104","https://openalex.org/W1583175181","https://openalex.org/W1968005108","https://openalex.org/W2090100767","https://openalex.org/W2108748002","https://openalex.org/W2120064069","https://openalex.org/W2133420723","https://openalex.org/W2139649276","https://openalex.org/W2169086742","https://openalex.org/W2535617737","https://openalex.org/W2814127929","https://openalex.org/W2898689050","https://openalex.org/W2909139149","https://openalex.org/W2920143100","https://openalex.org/W2966560304","https://openalex.org/W3003678351","https://openalex.org/W3022000908","https://openalex.org/W3046500481","https://openalex.org/W4221079727","https://openalex.org/W6602361438","https://openalex.org/W6676238899","https://openalex.org/W7014563061"],"related_works":["https://openalex.org/W2078356878","https://openalex.org/W1873717324","https://openalex.org/W2111817603","https://openalex.org/W1583523918","https://openalex.org/W2889423159","https://openalex.org/W2528673213","https://openalex.org/W1593942753","https://openalex.org/W209133351","https://openalex.org/W2034425895","https://openalex.org/W2051845749"],"abstract_inverted_index":{"As":[0],"eBPF":[1],"increasingly":[2],"and":[3,11,50,59,86,159],"rapidly":[4],"gains":[5],"popularity":[6],"for":[7,53,156,174,202],"observability,":[8],"performance,":[9],"troubleshooting,":[10],"security":[12],"in":[13,125,190],"production":[14],"environments,":[15],"a":[16,67,112],"problem":[17],"is":[18,131],"emerging":[19],"around":[20],"how":[21],"to":[22,40,76,132,140],"manage":[23],"the":[24,31,80,122,134,138,143,184,191],"multitude":[25],"of":[26,34,69,83,146,161,183,186,193],"BPF":[27,57,84,103,203],"programs":[28,58,85],"installed":[29],"into":[30,79],"kernel.":[32],"Operators":[33],"distributed":[35],"systems":[36,94],"are":[37],"already":[38],"beginning":[39],"use":[41],"BPF-orchestration":[42],"frameworks":[43],"with":[44,102,151],"which":[45],"they":[46],"can":[47,55],"set":[48,89],"load":[49,56],"access":[51,60],"policies":[52,90,118],"who":[54],"their":[61,93],"resultant":[62],"data.":[63],"However,":[64],"other":[65],"than":[66],"guarantee":[68],"eventual":[70],"termination,":[71],"operators":[72],"currently":[73],"have":[74],"little":[75],"no":[77],"visibility":[78],"runtime":[81,113,144,154,176,204],"characteristics":[82],"thus":[87],"cannot":[88],"that":[91,110,119],"ensure":[92],"still":[95],"meet":[96],"crucial":[97],"performance":[98],"targets":[99],"when":[100],"instrumented":[101],"programs.":[104],"In":[105],"this":[106,187],"paper,":[107],"we":[108,168],"propose":[109],"having":[111],"estimate":[114,173,195],"will":[115,120],"enable":[116],"better":[117],"govern":[121],"allowed":[123],"latency":[124],"critical":[126],"paths.":[127],"Our":[128],"key":[129],"insight":[130],"leverage":[133],"existing":[135],"architecture":[136],"within":[137],"verifier":[139],"statically":[141],"track":[142],"cost":[145],"all":[147],"possible":[148],"branches.":[149],"Along":[150],"dynamically":[152],"determined":[153],"estimates":[155],"helper":[157],"functions":[158],"knowledge":[160],"loop-based":[162],"helpers'":[163],"effects":[164],"on":[165],"control":[166],"flow,":[167],"generate":[169],"an":[170],"accurate---although":[171],"broad---range":[172],"making":[175],"policy":[177],"decisions.":[178],"We":[179],"further":[180],"discuss":[181],"some":[182],"limitations":[185],"approach,":[188],"particularly":[189],"case":[192],"broad":[194],"ranges":[196],"as":[197,199],"well":[198],"complementary":[200],"tools":[201],"management.":[205]},"counts_by_year":[{"year":2025,"cited_by_count":5}],"updated_date":"2025-12-22T23:10:17.713674","created_date":"2025-10-10T00:00:00"}