CIISE - INVITED SPEAKER SEMINAR - Harnessing eBPF for Next-Generation Cybersecurity: Case Studies on Containerized Environments

Date: Friday, November 7, 2025, from 9:30 a.m. 

Location: EV 3.101

Abstract

EBPF, the successor to the Berkeley Packet Filter (BPF), is a Linux technology utilized for kernel instrumentation which provides observability and control deep within the operating system. Such instrumentation can be used for different tasks, including those related to cybersecurity. The talk will focus on how eBPF can be leveraged to detect and prevent threats within a specific environment: Linux containers. Although containers offer various benefits, they also introduce unique security challenges. The talk will include case studies, each highlighting a particular security issue in containers and demonstrating how eBPF can effectively address it.

Biography

Dr. Jéferson Campos Nobre is a Professor at the Institute of Informatics at the Federal University of Rio Grande do Sul (UFRGS), Brazil. His primary research interests include Network Management and Cybersecurity, encompassing autonomic and distributed approaches, kernel instrumentation and programmability, green networks, and quantum networks. Jéferson currently co-chairs the Network Management Research Group (NMRG) of the Internet Research Task Force (IRTF) and the Internet Engineering Task Force -  Latin America (IETF-LAC). He has received several awards and scholarships, including best paper awards at the Brazilian Database Symposium (2020) and the Symposium on Knowledge Discovery, Mining and Learning (2020), and a best poster award at the LANCOMM Student Workshop of the ACM SIGCOMM (2019). Other honors include an Internet Society Fellowship to the Internet Engineering Task Force and the Applied Networking Research Workshop Travel Grant. With more than 100 peer-reviewed academic publications, he has also led the organization of many academic conferences and workshops, such as the IEEE International Conference on Cloud Networking (2020).