Packets probes and eBPF filtering in Skydive

Efficient monitoring of large-scale networks poses a delicate balance between capture granularity on the one hand and the imposed overheads and performance penalties on the other. Skydive is an open source real-time network topology and protocol analyzer, featuring...

Qemu in UEFI

UEFI is a firmware specification created by Intel with portability in mind. The UEFI way of doing that was to provide special UEFI byte code (EBC). Unfortunately nobody really cared so compiler, firmware support and providers of EBC option roms ceased and basically...

State of CPU Isolation

The kernel is great at doing its job for your task, providing unified access to hardware, filesystem, network, scheduling your code when you need to, … But can’t it all be done quietly please, because your application is sensitive to headaches and is having a hard...

Atomic explosion: evolution and use of relaxed concurrency primitives

Over the past few years, the kernel has grown a modern, sophisticated memory model which is exposed directly to the developer and provides portable concurrency primitives across the 20+ architectures supported by mainline. These low-level primitives have been used to...

CLIP OS: Building a defense-in-depth OS around Linux kernel…

The French Network and Information Security Agency (ANSSI) just declassified and released the sources of its long-time internal hardened Linux distribution: CLIP OS. The project’s main goal is to build an operating system able to handle confidential information at...