Presentation 2021-06-21
An initial evaluation between C language and PRSafe for developing eBPF programs
Mahadevan Sai Veerya, Takano Yuuki, Miyaji Atsuko,
PDF Download Page PDF download Page Link
Abstract(in Japanese) (See Japanese page)
Abstract(in English) The eBPF ( Berkeley Packet Filter) in the Linux OS is a virtual machine for running user-space programs written in C language, inside the Linux kernel. However, in order for these C programs to run inside the Linux kernel, they need to be Non-Turing complete and successfully pass the safety checks of the eBPF verifier module inside eBPF. As C is a Turing-complete language, this puts the onus on developers to design a C program with restricted, Non-Turing complete functionality. In order to reduce the burden on developers, we had earlier created PRSafe. In this paper, we follow up with an initial evaluation between programs written for eBPF in C and PRSafe using some qualitative factors, i.e. 1) error-information returned by the respective language compiler 2) syntax related errors 3) ease-of installation and usage. We also attempt to extend this study using an evaluation with an alternate verifier, i.e. PREVAIL, a Polynomial-Runtime EBPF Verifier that uses an Abstract Interpretation Layer.
Keyword(in Japanese) (See Japanese page)
Keyword(in English) programming languageeBPFLLVMC languageverifier
Paper # IA2021-3,ICSS2021-3
Date of Issue 2021-06-14 (IA, ICSS)

Conference Information
Committee IA / ICSS
Conference Date 2021/6/21(2days)
Place (in Japanese) (See Japanese page)
Place (in English) Online
Topics (in Japanese) (See Japanese page)
Topics (in English) Internet Security, etc.
Chair Tomoki Yoshihisa(Osaka Univ.) / Katsunari Yoshioka(Yokohama National Univ.)
Vice Chair Toru Kondo(Hiroshima Univ.) / Yuichiro Hei(KDDI Research) / Hiroshi Yamamoto(Ritsumeikan Univ.) / Kazunori Kamiya(NTT) / Takahiro Kasama(NICT)
Secretary Toru Kondo(Osaka Univ.) / Yuichiro Hei(Kogakuin Univ.) / Hiroshi Yamamoto(NEC) / Kazunori Kamiya(KDDI labs.) / Takahiro Kasama(Mitsubishi Electric)
Assistant Daisuke Kotani(Kyoto Univ.) / Ryo Nakamura(Fukuoka Univ.) / Daiki Nobayashi(Kyushu Inst. of Tech.) / Toshihiro Yamauchi(Okayama Univ.) / Takeshi Sugawara(Univ. of Electro-Communications)

Paper Information
Registration To Technical Committee on Internet Architecture / Technical Committee on Information and Communication System Security
Language ENG
Title (in Japanese) (See Japanese page)
Sub Title (in Japanese) (See Japanese page)
Title (in English) An initial evaluation between C language and PRSafe for developing eBPF programs
Sub Title (in English)
Keyword(1) programming languageeBPFLLVMC languageverifier
1st Author's Name Mahadevan Sai Veerya
1st Author's Affiliation Osaka University(Handai)
2nd Author's Name Takano Yuuki
2nd Author's Affiliation Osaka University(Handai)
3rd Author's Name Miyaji Atsuko
3rd Author's Affiliation Osaka University(Handai)
Date 2021-06-21
Paper # IA2021-3,ICSS2021-3
Volume (vol) vol.121
Number (no) IA-68,ICSS-69
Page pp.pp.14-19(IA), pp.14-19(ICSS),
#Pages 6
Date of Issue 2021-06-14 (IA, ICSS)