Deep Dive: Runtime Security With Falco in Userspace - Loris Degioanni Sysdig

Dont miss out! Join us at our upcoming events: EnvoyCon Virtual on October 15 and KubeCon CloudNativeCon North America 2020 Virtual from November 17-20.
Learn more at  conferences feature presentations from developers and end users of Kubernetes Prometheus Envoy and all of the other CNCF-hosted projects.
Deep Dive: Runtime Security With Falco in Userspace - Loris Degioanni Sysdig In this talk Loris will discuss the tradeoffs for using different backend drivers to access systemcall information for cloud native security with Falco.
We learn about eBPF kernel modules and ptrace2.
Loris will discuss other approaches considered and the performance impact with other solutions such as LD_PRELOAD.
Loris shares deep knowledge and expertise in the matter and draws on years of contributing to wireshark and creating sysdig and falco.

Источник: rutube.ru