EvoSec 2025W Lecture 19
Readings
- Findlay, "bpfbox: Simple Precise Process Confinement with eBPF." (CCSW 2020)
- Findlay, "Bpfcontain: Fixing the soft underbelly of container security." (arXiv 2021)
Discussion Questions
- Is the complexity of Linux security mechanisms due more to functional requirements or evolutionary processes?
- What is the relationship between trust and confinement?