{"id":"https://openalex.org/W4404515181","doi":"https://doi.org/10.1145/3689938.3694781","title":"SafeBPF: Hardware-assisted Defense-in-depth for eBPF Kernel Extensions","display_name":"SafeBPF: Hardware-assisted Defense-in-depth for eBPF Kernel Extensions","publication_year":2024,"publication_date":"2024-11-19","ids":{"openalex":"https://openalex.org/W4404515181","doi":"https://doi.org/10.1145/3689938.3694781"},"language":"en","primary_location":{"id":"doi:10.1145/3689938.3694781","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3689938.3694781","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 on Cloud Computing Security Workshop","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5087601921","display_name":"Soo Yee Lim","orcid":"https://orcid.org/0000-0002-3418-4982"},"institutions":[{"id":"https://openalex.org/I141945490","display_name":"University of British Columbia","ror":"https://ror.org/03rmrcq20","country_code":"CA","type":"education","lineage":["https://openalex.org/I141945490"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Soo Yee Lim","raw_affiliation_strings":["University of British Columbia, Vancouver, British Columbia, Canada"],"raw_orcid":"https://orcid.org/0000-0002-3418-4982","affiliations":[{"raw_affiliation_string":"University of British Columbia, Vancouver, British Columbia, Canada","institution_ids":["https://openalex.org/I141945490"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5065641569","display_name":"Tanya Prasad","orcid":null},"institutions":[{"id":"https://openalex.org/I141945490","display_name":"University of British Columbia","ror":"https://ror.org/03rmrcq20","country_code":"CA","type":"education","lineage":["https://openalex.org/I141945490"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Tanya Prasad","raw_affiliation_strings":["University of British Columbia, Vancouver, British Columbia, Canada"],"raw_orcid":"https://orcid.org/0009-0000-5378-1857","affiliations":[{"raw_affiliation_string":"University of British Columbia, Vancouver, British Columbia, Canada","institution_ids":["https://openalex.org/I141945490"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5043535867","display_name":"Xueyuan Han","orcid":null},"institutions":[{"id":"https://openalex.org/I47251452","display_name":"Wake Forest University","ror":"https://ror.org/0207ad724","country_code":"US","type":"education","lineage":["https://openalex.org/I47251452"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xueyuan Han","raw_affiliation_strings":["Wake Forest University, Winston-Salem, North Carolina, USA"],"raw_orcid":"https://orcid.org/0000-0003-1374-153X","affiliations":[{"raw_affiliation_string":"Wake Forest University, Winston-Salem, North Carolina, USA","institution_ids":["https://openalex.org/I47251452"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5005580571","display_name":"Thomas Pasquier","orcid":"https://orcid.org/0000-0001-6876-1306"},"institutions":[{"id":"https://openalex.org/I141945490","display_name":"University of British Columbia","ror":"https://ror.org/03rmrcq20","country_code":"CA","type":"education","lineage":["https://openalex.org/I141945490"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Thomas Pasquier","raw_affiliation_strings":["University of British Columbia, Vancouver, British Columbia, Canada"],"raw_orcid":"https://orcid.org/0000-0001-6876-1306","affiliations":[{"raw_affiliation_string":"University of British Columbia, Vancouver, British Columbia, Canada","institution_ids":["https://openalex.org/I141945490"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.9928,"has_fulltext":false,"cited_by_count":9,"citation_normalized_percentile":{"value":0.93212843,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"80","last_page":"94"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9954000115394592,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9944000244140625,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/kernel","display_name":"Kernel (algebra)","score":0.7106800675392151},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7028185725212097},{"id":"https://openalex.org/keywords/computer-hardware","display_name":"Computer hardware","score":0.3736664652824402},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.0886625349521637}],"concepts":[{"id":"https://openalex.org/C74193536","wikidata":"https://www.wikidata.org/wiki/Q574844","display_name":"Kernel (algebra)","level":2,"score":0.7106800675392151},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7028185725212097},{"id":"https://openalex.org/C9390403","wikidata":"https://www.wikidata.org/wiki/Q3966","display_name":"Computer hardware","level":1,"score":0.3736664652824402},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0886625349521637},{"id":"https://openalex.org/C114614502","wikidata":"https://www.wikidata.org/wiki/Q76592","display_name":"Combinatorics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3689938.3694781","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3689938.3694781","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 on Cloud Computing Security Workshop","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320323817","display_name":"Universitas Brawijaya","ror":"https://ror.org/01wk3d929"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":29,"referenced_works":["https://openalex.org/W1976721395","https://openalex.org/W2052705820","https://openalex.org/W2079029390","https://openalex.org/W2086795351","https://openalex.org/W2105349588","https://openalex.org/W2142208662","https://openalex.org/W2146878883","https://openalex.org/W2151124307","https://openalex.org/W2163596137","https://openalex.org/W2605597658","https://openalex.org/W2903038868","https://openalex.org/W2912122742","https://openalex.org/W2954549386","https://openalex.org/W3009605901","https://openalex.org/W3119412359","https://openalex.org/W3165162036","https://openalex.org/W3205121985","https://openalex.org/W3206390034","https://openalex.org/W3214883374","https://openalex.org/W4226358880","https://openalex.org/W4229646679","https://openalex.org/W4235021791","https://openalex.org/W4286203032","https://openalex.org/W4381611552","https://openalex.org/W4383816204","https://openalex.org/W4384471250","https://openalex.org/W4385437264","https://openalex.org/W4385993975","https://openalex.org/W4387870216"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"The":[0],"eBPF":[1,25,54,59,80],"framework":[2],"enables":[3],"execution":[4],"of":[5,20,38,69,85],"user-provided":[6],"code":[7],"in":[8],"the":[9,13,44,70,83,86],"Linux":[10],"kernel.":[11],"In":[12],"last":[14],"few":[15],"years,":[16],"a":[17,75,98,103,110],"large":[18],"ecosystem":[19],"cloud":[21],"services":[22],"has":[23],"leveraged":[24],"to":[26,51,61,88,126],"enhance":[27],"container":[28],"security,":[29],"system":[30],"observability,":[31],"and":[32,109],"network":[33],"management.":[34],"Meanwhile,":[35],"incessant":[36],"discoveries":[37],"memory":[39,90],"safety":[40,68,91],"vulnerabilities":[41,92],"have":[42],"left":[43],"systems":[45],"community":[46],"with":[47],"no":[48],"choice":[49],"but":[50],"disallow":[52],"unprivileged":[53],"programs,":[55],"which":[56],"unfortunately":[57],"limits":[58],"use":[60],"only":[62],"privileged":[63],"users.":[64],"To":[65],"improve":[66],"run-time":[67],"framework,":[71],"we":[72],"introduce":[73],"SafeBPF,":[74],"general":[76],"design":[77],"that":[78,113,122],"isolates":[79],"programs":[81],"from":[82,93],"rest":[84],"kernel":[87],"prevent":[89],"being":[94],"exploited.":[95],"We":[96,120],"present":[97],"pure":[99],"software":[100],"implementation":[101,112],"using":[102],"Software-based":[104],"Fault":[105],"Isolation":[106],"(SFI)":[107],"approach":[108],"hardwareassisted":[111],"leverages":[114],"ARM's":[115],"Memory":[116],"Tagging":[117],"Extension":[118],"(MTE).":[119],"show":[121],"SafeBPF":[123],"incurs":[124],"up":[125],"4%":[127],"overhead":[128],"on":[129],"macrobenchmarks":[130],"while":[131],"achieving":[132],"desired":[133],"security":[134],"properties.":[135]},"counts_by_year":[{"year":2026,"cited_by_count":4},{"year":2025,"cited_by_count":5}],"updated_date":"2026-08-18T07:49:30.821534","created_date":"2025-10-10T00:00:00"}