Aqua Security

DECEMBER 14, 2022

An application of this vulnerability would be to write on the host from an unprivileged container. In this blog we’ll show how Tracee, which is designed with a deep understanding of the Linux kernel, allows for runtime monitoring when this vulnerability would be exploited.

Technical Review 145

Technical Review Analysis Linux Programming 145

Aqua Security

OCTOBER 7, 2021

eBPF technology is seeing strong growth, being widely adopted in the cloud native ecosystem for monitoring, networking, and security goals. At Aqua, along with being used in commercial products, eBPF powers our open source project Tracee to detect events in running containers.

Open Source 118

Open Source Tools Network Cloud 118

Aqua Security

NOVEMBER 6, 2019

T his week at Velocity Berlin, I’ll be giving a talk called A Beginner’s Guide to eBPF. To coincide with it, we’re opening up a new Aqua Security open source project called Tracee , which uses eBPF to trace events in containers.

Open Source 16

Open Source Tools Development Cloud 16

Lacework

OCTOBER 6, 2022

There are several ways to detect threats using system call (syscall) and kernel tracing in Linux. Different deployment models for tracing programs. Based on the monitoring mechanisms, tracing programs can be deployed as kernel modules, eBPF programs, or user space programs. . The Shaky Foundation. The Shaky Foundation.

Linux 52

Linux Cloud Tools Storage 52

O'Reilly Media - Ideas

OCTOBER 5, 2021

Is self-healing cybersecurity possible by killing affected containers and starting new ones? Rootkits are hardly new, but now they’re being used to attack containers. Tracee is a new tool, built with eBPF, that may help to detect successful attacks. It integrates with Amazon products like Ring and Alexa Guard.

Trends 123

Trends Open Source Artificial Inteligence Study 123

Kentik

APRIL 3, 2023

eBPF is a lightweight runtime environment that gives you the ability to run programs inside the kernel of an operating system, usually a recent version of Linux. In this post, we’ll look at what eBPF is, how it works, and why it’s become such a common technology in observability. What is eBPF? How does eBPF work?

Programming 110

Programming Load Balancer Linux Network 110

Netflix Tech

NOVEMBER 22, 2019

December 3 11:30am-12:30pm NFX 208 Netflix’s container journey to bare metal Amazon EC2 Andrew Spyker , Compute Platform Engineering Manager Abstract : In 2015, Netflix started supporting containers as part of their compute platform. It launches more than four million containers per week across thousands of underlying hosts.

AWS 15

AWS Open Source Linux Engineering Management 15