# ebpf-slide **Repository Path**: wedvefv/ebpf-slide ## Basic Information - **Project Name**: ebpf-slide - **Description**: No description available - **Primary Language**: Unknown - **License**: MIT - **Default Branch**: master - **Homepage**: None - **GVP Project**: No ## Statistics - **Stars**: 0 - **Forks**: 0 - **Created**: 2025-03-06 - **Last Updated**: 2025-03-06 ## Categories & Tags **Categories**: Uncategorized **Tags**: None ## README # 项目介绍 Collection of Linux eBPF slides/documents. # PDF/slide列表 ## Security 安全 * [US-22-Fournier-Return-To-Sender Detecting kernel exploits with eBPF.pdf](security/US-22-Fournier-Return-To-Sender.pdf) * [Stories from BPF Security Auditing at Google - Brendan Jackman.pdf](security/Stories_from_BPF_Security_Auditing_at_Google_-_Brendan_Jackman.pdf) * [eBPF Summit 2021 - Stories from BPF Security Auditing at Google - Brendan Jackman.pdf](security/eBPF_Summit_2021_-_Stories_from_BPF_Security_Auditing_at_Google_-_Brendan_Jackman.pdf) * [Think eBPF for Kernel Security Monitoring - Falco at Apple.pdf](security/Think_eBPF_for_Kernel_Security_Monitoring_-_Falco_at_Apple.pdf) * [eBPF, I thought we were friends.pdf](security/eBPF,_I_thought_we_were_friends.pdf) * [Rex Guo Junyuan Zeng - Phantom Attack - Evading System Call Monitoring.pdf](security/Rex_Guo_Junyuan_Zeng-Phantom_Attack_Evading_System_Call_Monitoring.pdf) * [BPFContain_Fixing_the_Soft_Underbelly_of_Container.pdf](security/BPFContain_Fixing_the_Soft_Underbelly_of_Container.pdf) * [2021-Secure Namespaced Kernel Audit for Containers.pdf](security/2021-Secure_Namespaced_Kernel_Audit_for_Containers.pdf) * [SSTIC2021-Article-runtime_security_with_ebpf-fournier_afchain_baubeau.pdf](security/SSTIC2021-Article-runtime_security_with_ebpf-fournier_afchain_baubeau.pdf) * [eBPF_and_the_future_of_osquery_on_Linux.pdf](security/eBPF_and_the_future_of_osquery_on_Linux.pdf) * [Kernel_Runtime_Security_Instrumentation.pdf](security/Kernel_Runtime_Security_Instrumentation.pdf) * [Container_Security_Issues_Challenges_and_the_Road_Ahead.pdf](security/Container_Security_Issues_Challenges_and_the_Road_Ahead.pdf) * [Fast and Safe Production Monitoring of JVM Applications with BPF Magic.pdf](security/Fast_and_Safe_Production_Monitoring_of_JVM_Applications_with_BPF_Magic.pdf) * [Kernel Runtime Security Instrumentation.pdf](security/Kernel_Runtime_Security_Instrumentation.pdf) * [Creating and countering the next generation of Linux rootkits using eBPF.pdf](security/Creating_and_countering_the_next_generation_of_Linux_rootkits_using_eBPF.pdf) * [us-21-With-Friends-Like-EBPF-Who-Needs-Enemies.pdf](security/us-21-With-Friends-Like-EBPF-Who-Needs-Enemies.pdf) * [Mitigating Attacks on a Supercomputer with KRSI.pdf](security/Mitigating_Attacks_on_a_Supercomputer_with_KRSI.pdf) * [Security Observability with eBPF Measuring Cloud Native Security Through eBPF Observability](security/isovalent_security_observability.pdf) ## networking 网络 * [Efficient Software Packet Processing on FPGA NICs](networking/Efficient_Software_Packet_Processing_on_FPGA_NICs.pdf) * [Fast-Packet-Processing-using-eBPF-and-XDP](networking/Fast-Packet-Processing-using-eBPF-and-XDP.pdf) * [bpf-rethinkingthelinuxkernel](networking/bpf-rethinkingthelinuxkernel-200303183208.pdf) * [bpf-turninglinuxintoamicroservices-awareoperatingsystem](networking/bpf-turninglinuxintoamicroservices-awareoperatingsystem-181105194737.pdf) * [How-eBPF_XDP-Will-Revolutionize-the-Telco_5G-Space](networking/How-eBPF_XDP-Will-Revolutionize-the-Telco_5G-Space.pdf) * [sigcomm-2018-netronome-eBPF-XDP-david_beckett-jakub_kicinski](networking/sigcomm-2018-netronome-eBPF-XDP-david_beckett-jakub_kicinski.pdf) ## tracing profiling 跟踪抽样 * [Aug19_Designing_a_gRPC_Interface_for_Kernel_Tracing_with_eBPF_Leonardo_DiDonato](tracing_profiling/Aug19_Designing_a_gRPC_Interface_for_Kernel_Tracing_with_eBPF_Leonardo_DiDonato.pdf) * [Data-Centric Tracing with BPF - Alan Maguire](tracing_profiling/Data-Centric_Tracing_with_BPF-Alan_Maguire.pdf) * [Why is my eBPF code slow_ - Simar Singh](tracing_profiling/Why_is_my_eBPF_code_slow-Simar_Singh.pdf) * [Coverage_for_eBPF_programs](tracing_profiling/Coverage_for_eBPF_programs.pdf) * [Kernel tracing with ebpf-Unlocking God Mode on Linux](tracing_profiling/kernel_tracing_with_ebpf.pdf) * [COSCUP 2016 – Linux Kernel Tracing](tracing_profiling/linux-kernel-tracing.pdf) * [Kernel Analysis Using eBPF Daniel Thompson Linaro](tracing_profiling/Kernel-Analysis-Using-eBPF-Daniel-Thompson-Linaro.pdf) ## observability monitoring 观测监控 * [Advanced_BPF_Kernel_Features_for_the_Container_Age_FOSDEM](observability_monitoring/Advanced_BPF_Kernel_Features_for_the_Container_Age_FOSDEM.pdf) * [Performance Analysis Superpowers with Linux eBPF](observability_monitoring/USENIX_ATC2017_BPF_superpowers.pdf) * [Monitoring_Kafka_Without_Instrumentation_Using_eBPF](observability_monitoring/Monitoring_Kafka_Without_Instrumentation_Using_eBPF.pdf) * [lpc22 ebpf kernel scheduling with ghost](observability_monitoring/lpc22-ebpf-kernel-scheduling-with-ghost.pdf) ## eBPF基础知识 * [eBPF Library Ecosystem Overview in Go, Rust, Python, C and More - Kyle Quest](eBPF_basic/eBPF_Library_Ecosystem_Overview_in_Go_Rust_Python_C_and_More.pdf) * [Beginners_guide_to_eBPF_programming_for_networking](eBPF_basic/Beginners_guide_to_eBPF_programming_for_networking.pdf) * [高效入门eBPF-西安邮电大学-贺东升](eBPF_basic/高效入门eBPF-西安邮电大学-贺东升.pdf) * [LIz_Rice-Beginners_guide_to_eBPF](eBPF_basic/LIz_Rice-Beginners_guide_to_eBPF.pdf) * [XDP Hardware Offload: Current Work, Debugging and Edge Cases](eBPF_basic/xdp-hardware-offload-current-work-debugging-and-edge-cases.pdf) ## eBPF进阶知识 * [Peeking into BPF verifier](eBPF_advanced/Peeking_into_BPF_verifier.pptx) * [eBPF ELFs JMPing Through the Windows](eBPF_advanced/eBPF_ELFs_JMPing_Through_the_Windows.pdf) * [LPC21_Towards_truly_portable_eBPF](eBPF_advanced/LPC21_Towards_truly_portable_eBPF.pdf) * [bpf internals tracing examples brendan gregg](eBPF_advanced/bpf_internals_tracing_examples_brendan_gregg.pdf) * [demystify-ebpf-jit-compiler](eBPF_advanced/demystify-ebpf-jit-compiler.pdf) * [eBPF Summit 2021 - BPF and Spectre - Daniel Borkmann - Final](eBPF_advanced/eBPF-Summit-2021-BPF-and-Spectre-Daniel-Borkmann-Final.pdf) ## android * [eBPF-super-powers-on-ARM64-and-android](android/eBPF-super-powers-on-ARM64-and-android.pdf) * [eBPF Android Reverse Engineering Superpowers](android/eBPF-Android-Reverse-Engineering-Superpowers.pdf) * [BPFroid Robust Real Time Android Malware Detection Framework](android/BPFroid-Robust_Real_Time_Android_Malware_Detection_Framework.pdf) * [Modernizing Android BPF The Android BPF Security Model](android/LPC2023_Modernizing_Android_BPF_The_Android_BPF_Security_Model.pdf) # 经典BLOG/站点 见 [BLOG.md](BLOG.md)