Coursera Flash Sale
40% Off Coursera Plus for 3 Months!
Grab it
Explore how Extended Berkeley Packet Filter (eBPF) technology can revolutionize Linux security on Ubuntu systems in this 26-minute conference talk from UbuCon Asia 2025. Learn to overcome the limitations of traditional security systems like static firewalls, antivirus software, and intrusion detection systems by implementing eBPF's programmable approach to real-time system behavior analysis. Discover how eBPF enables safe and efficient monitoring of kernel-level activities without modifying kernel code, providing comprehensive visibility and effective threat mitigation against sophisticated modern attacks. Understand eBPF's capability to examine system calls, network packets, and process events through sandboxed programs executing within the Linux kernel. Gain insights into Ubuntu's compatibility and ecosystem support for eBPF-based security applications, with practical demonstrations of monitoring system calls, filtering network traffic, and detecting suspicious activities. Follow real-world deployment examples of eBPF security tools including Falco, Cilium, and BPFtrace, and see how they enhance security in Ubuntu environments. Master the implementation of eBPF for runtime protection, network security enforcement, real-time observability, anomaly detection, and security monitoring to leverage this powerful technology in your own security strategies.
