eBPF Offensive Capabilities – Get Ready for Next-Gen Malware

Originally published by Sysdig.
Written by Daniele Linguaglossa.
It’s not a mystery that eBPF (Extended Berkeley Packet Filter) is a powerful technology, and given its nature, it can be used for good and bad purposes. In this article, we will explore some of the offensive capabilities that eBPF can provide to an attacker and how to defend against them.
eBPF has gained a lot of attention since its first release in 2014 into the Linux kernel (Kernel 4.4). This powerful …

article bad berkeley packet filter capabilities ebpf extended berkeley packet filter filter gen good malware nature next offensive offensive capabilities packet sysdig technology written