{"id":"https://openalex.org/W7116697450","doi":"https://doi.org/10.23919/cnsm67658.2025.11297477","title":"BBArmor: a Dynamic BPF-to-BPF LSM-Based Enforcement Tool","display_name":"BBArmor: a Dynamic BPF-to-BPF LSM-Based Enforcement Tool","publication_year":2025,"publication_date":"2025-10-27","ids":{"openalex":"https://openalex.org/W7116697450","doi":"https://doi.org/10.23919/cnsm67658.2025.11297477"},"language":"en","primary_location":{"id":"doi:10.23919/cnsm67658.2025.11297477","is_oa":false,"landing_page_url":"https://doi.org/10.23919/cnsm67658.2025.11297477","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 21st International Conference on Network and Service Management (CNSM)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5008440124","display_name":"Fabio Piras","orcid":"https://orcid.org/0000-0003-0765-7710"},"institutions":[{"id":"https://openalex.org/I108290504","display_name":"University of Pisa","ror":"https://ror.org/03ad39j10","country_code":"IT","type":"education","lineage":["https://openalex.org/I108290504"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Fabio Piras","raw_affiliation_strings":["University of Pisa Pisa,Dept. of Information Engineering,Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Pisa Pisa,Dept. of Information Engineering,Italy","institution_ids":["https://openalex.org/I108290504"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5000191885","display_name":"Giuseppe Lettieri","orcid":"https://orcid.org/0000-0003-1005-7441"},"institutions":[{"id":"https://openalex.org/I108290504","display_name":"University of Pisa","ror":"https://ror.org/03ad39j10","country_code":"IT","type":"education","lineage":["https://openalex.org/I108290504"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Giuseppe Lettieri","raw_affiliation_strings":["University of Pisa Pisa,Dept. of Information Engineering,Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Pisa Pisa,Dept. of Information Engineering,Italy","institution_ids":["https://openalex.org/I108290504"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5051501620","display_name":"Gregorio Procissi","orcid":"https://orcid.org/0000-0001-5604-6129"},"institutions":[{"id":"https://openalex.org/I108290504","display_name":"University of Pisa","ror":"https://ror.org/03ad39j10","country_code":"IT","type":"education","lineage":["https://openalex.org/I108290504"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Gregorio Procissi","raw_affiliation_strings":["University of Pisa Pisa,Dept. of Information Engineering,Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Pisa Pisa,Dept. of Information Engineering,Italy","institution_ids":["https://openalex.org/I108290504"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I108290504"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.59776051,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.45100000500679016,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.45100000500679016,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.09830000251531601,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11986","display_name":"Scientific Computing and Data Management","score":0.07500000298023224,"subfield":{"id":"https://openalex.org/subfields/1802","display_name":"Information Systems and Management"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.7404000163078308},{"id":"https://openalex.org/keywords/enforcement","display_name":"Enforcement","score":0.5745000243186951},{"id":"https://openalex.org/keywords/trace","display_name":"TRACE (psycholinguistics)","score":0.5098000168800354},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.4805999994277954},{"id":"https://openalex.org/keywords/plug-in","display_name":"Plug-in","score":0.4212999939918518},{"id":"https://openalex.org/keywords/evasion","display_name":"Evasion (ethics)","score":0.3797999918460846},{"id":"https://openalex.org/keywords/drone","display_name":"Drone","score":0.35749998688697815},{"id":"https://openalex.org/keywords/kernel","display_name":"Kernel (algebra)","score":0.3237000107765198}],"concepts":[{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7491000294685364},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.7404000163078308},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6521000266075134},{"id":"https://openalex.org/C2779777834","wikidata":"https://www.wikidata.org/wiki/Q4202277","display_name":"Enforcement","level":2,"score":0.5745000243186951},{"id":"https://openalex.org/C75291252","wikidata":"https://www.wikidata.org/wiki/Q1315756","display_name":"TRACE (psycholinguistics)","level":2,"score":0.5098000168800354},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.4805999994277954},{"id":"https://openalex.org/C4924752","wikidata":"https://www.wikidata.org/wiki/Q184148","display_name":"Plug-in","level":2,"score":0.4212999939918518},{"id":"https://openalex.org/C2781251061","wikidata":"https://www.wikidata.org/wiki/Q5416089","display_name":"Evasion (ethics)","level":3,"score":0.3797999918460846},{"id":"https://openalex.org/C59519942","wikidata":"https://www.wikidata.org/wiki/Q650665","display_name":"Drone","level":2,"score":0.35749998688697815},{"id":"https://openalex.org/C74193536","wikidata":"https://www.wikidata.org/wiki/Q574844","display_name":"Kernel (algebra)","level":2,"score":0.3237000107765198},{"id":"https://openalex.org/C2780070844","wikidata":"https://www.wikidata.org/wiki/Q857815","display_name":"Plug and play","level":2,"score":0.31859999895095825},{"id":"https://openalex.org/C20136886","wikidata":"https://www.wikidata.org/wiki/Q749647","display_name":"Interoperability","level":2,"score":0.3156999945640564},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.31040000915527344},{"id":"https://openalex.org/C2780589192","wikidata":"https://www.wikidata.org/wiki/Q7285140","display_name":"Raising (metalworking)","level":2,"score":0.2913999855518341},{"id":"https://openalex.org/C29852176","wikidata":"https://www.wikidata.org/wiki/Q373338","display_name":"Critical infrastructure","level":2,"score":0.28870001435279846},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.2768000066280365},{"id":"https://openalex.org/C89611455","wikidata":"https://www.wikidata.org/wiki/Q6804646","display_name":"Mechanism (biology)","level":2,"score":0.2721000015735626},{"id":"https://openalex.org/C2779662365","wikidata":"https://www.wikidata.org/wiki/Q5416694","display_name":"Event (particle physics)","level":2,"score":0.2639999985694885},{"id":"https://openalex.org/C2779585090","wikidata":"https://www.wikidata.org/wiki/Q3457762","display_name":"Resilience (materials science)","level":2,"score":0.2597000002861023}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.23919/cnsm67658.2025.11297477","is_oa":false,"landing_page_url":"https://doi.org/10.23919/cnsm67658.2025.11297477","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 21st International Conference on Network and Service Management (CNSM)","raw_type":"proceedings-article"},{"id":"pmh:oai:arpi.unipi.it:11568/1345629","is_oa":false,"landing_page_url":"https://hdl.handle.net/11568/1345629","pdf_url":null,"source":{"id":"https://openalex.org/S4377196265","display_name":"CINECA IRIS Institutial research information system (University of Pisa)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I108290504","host_organization_name":"University of Pisa","host_organization_lineage":["https://openalex.org/I108290504"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/conferenceObject"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.6157076358795166,"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320321408","display_name":"Ministry of Education","ror":"https://ror.org/01p262204"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":6,"referenced_works":["https://openalex.org/W2095881341","https://openalex.org/W3035026831","https://openalex.org/W4393118739","https://openalex.org/W4402157048","https://openalex.org/W4403919243","https://openalex.org/W4408779760"],"related_works":[],"abstract_inverted_index":{"In":[0,74],"modern":[1],"day":[2],"applications,":[3],"eBPF":[4,44],"has":[5],"emerged":[6],"as":[7],"a":[8,79,99,102,109],"powerful":[9],"mechanism":[10],"for":[11,87],"extensible":[12],"networking,":[13],"observability,":[14],"and":[15,30,49,65,90,101,126,129,155],"security.":[16],"Yet":[17],"its":[18],"elevated":[19],"in-kernel":[20],"privileges":[21],"also":[22],"create":[23],"new":[24],"attack":[25,85],"avenues,":[26],"since":[27],"third-party":[28],"tooling":[29],"supply-chain":[31,154],"compromises":[32],"can":[33],"introduce":[34,105],"malicious":[35],"BPF":[36,95,117,121,132,143],"loaders.":[37],"A":[38],"stealthy":[39],"attacker":[40],"may":[41],"embed":[42],"trojaned":[43],"programs":[45,122],"in":[46],"legitimate":[47],"tools":[48],"application":[50],"or":[51],"exploit":[52],"vulnerable":[53],"plugins":[54],"to":[55,82],"gain":[56],"CAP_BPF":[57],"rights,":[58],"then":[59],"probe":[60],"syscalls,":[61],"trace":[62],"kernel":[63],"events":[64],"exfiltrate":[66],"sensitive":[67],"data;":[68],"often":[69],"without":[70],"raising":[71],"traditional":[72],"alarms.":[73],"this":[75],"paper":[76],"we":[77],"propose":[78],"threat":[80],"model":[81],"encompass":[83],"these":[84],"vectors":[86],"infrastructure":[88],"administrator":[89],"semi-trusted":[91],"cloud":[92],"environment":[93],"where":[94],"itself":[96],"becomes":[97],"both":[98],"tool":[100],"target.":[103],"We":[104],"BPF-to-BPF":[106],"Armor":[107],"(BBArmor),":[108],"prototype":[110],"solution":[111],"that":[112,140],"enforces":[113],"stricter":[114],"controls":[115],"over":[116],"syscall":[118,144],"usage,":[119],"isolates":[120],"based":[123],"on":[124],"provenance":[125],"trust":[127],"levels":[128],"blocks":[130],"anomalous":[131],"interactions":[133],"indicative":[134],"of":[135],"compromise.":[136],"Our":[137],"evaluation":[138],"demonstrates":[139],"BBArmor":[141],"mitigates":[142],"misuse":[145],"with":[146],"minimal":[147],"performance":[148],"overhead,":[149],"strengthening":[150],"security":[151],"against":[152],"evolving":[153],"software-supply":[156],"threats.":[157]},"counts_by_year":[],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-12-22T00:00:00"}