Deep Dive: Runtime Security With Falco in Userspace - Loris Degioanni, Sysdig

Don’t miss out! Join us at our upcoming events: EnvoyCon Virtual on October 15 and KubeCon + CloudNativeCon North America 2020 Virtual from November 17-20. Learn more at https://kubecon.io The conferences feature presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.

Deep Dive: Runtime Security With Falco in Userspace - Loris Degioanni, Sysdig

In this talk Loris will discuss the tradeoffs for using different backend drivers to access systemcall information for cloud native security with Falco. We learn about eBPF, kernel modules, and ptrace(2). Loris will discuss other approaches considered and the performance impact with other solutions such as LD_PRELOAD. Loris shares deep knowledge and expertise in the matter and draws on years of contributing to wireshark, and creating sysdig and falco.

https://sched.co/cpBB