Tag: Cybersecurity

eBPF IDS Linux
eBPF Use Cases

Create eBPF IDS on Linux

I will walk you through a working eBPF IDS Linux setup that hooks kernel events, streams signals to user space, and keeps performance predictable. I start from how the verifier and JIT work in the linux kernel so you can pick the right attach points. I explain kprobes, tracepoints, uprobes, XDP, and LSM in plain […]

William 
eBPF port scanning detection
Security Tools

Detect Port Scans with eBPF

The eBPF port scanning detection approach shows how kernel-level programs can answer TCP SYNs without leaving the fast path. I guide you through a compact XDP example that reads Ethernet, IPv4, and TCP headers in the kernel. You will see how a simple program spots a SYN and replies with a SYN-ACK to emulate an […]

William