heise+ | Schutz bis zum Patch: Cisco Live Protect für Netzwerk-Switches im Test
Live Protect erkennt per eBPF-Agent verdächtiges Verhalten auf Netzhardware mit ungepatchtem Betriebssystem und blockiert Exploits, bevor sie Schaden anrichten.
heise+ | eBPF: Wie der Kernel programmierbar wurde
Der Artikel beschreibt, wie eBPF den Linux-Kernel programmierbar macht und dadurch neue Möglichkeiten in den Bereichen Networking, Security und Observability eröffnet.
Frequently Asked Questions
Q:What is Cisco Live Protect?
Cisco Live Protect is a security solution designed for network switches, providing protection until patches are applied.
Q:What does eBPF stand for?
eBPF stands for extended Berkeley Packet Filter, a technology that allows for programmable execution within the Linux kernel.
Q:How does eBPF enhance the Linux kernel?
eBPF enhances the Linux kernel by allowing developers to run custom programs in response to various events, improving performance and security.
Q:What is the primary use of eBPF?
The primary use of eBPF is for network monitoring, performance analysis, and security enforcement in Linux systems.
Q:What are the benefits of using Cisco Live Protect?
The benefits of using Cisco Live Protect include real-time protection for network switches and reduced risk of vulnerabilities until patches are deployed.