Carleton University - School of Computer Science Honours Project
Winter 2022
Automatic Policy Generation for BPFContain
Jake Jazokas
SCS Honours Project Image
ABSTRACT
Given the relative difficulty of generating security policies for BPFContain, this project aims to automatically generate these policies using capabilities provided by the Extended Berkeley Packet Filter (eBPF). The automatic policy generation program is divided into two subsystems, a tracing program that logs events occurring across a Linux system and a translation program that parses the logged data into a valid security policy for BPFContain. The combination of these two programs results in an efficient system for the automatic generation of security policies used to confine the operations of any given program.