Alice in Kernel Land: Lessons Learned From the eBPF Rabbit Hole
Kernel Runtime Security Instrumentation LSM+BPF=KRSI
Stochastic streams: Runtime instrumentation of the Linux kernel with eBPF and Rust
2017 High-performance Linux monitoring with eBPF
Think eBPF for Kernel Security Monitoring – Eric Sage & Melissa Kilby, Apple
Secure the Linux Kernel with eBPF Linux Security Module - Vandana Salve, Independent Consultant
