OWASP AppSec Days Singapore 2024

In this session we will leverage the Extended Berkeley Packet Filter (eBPF) technology for enhanced File Integrity Monitoring (FIM) solution for Kubernetes. This talk will cover the basics of eBPF, its advantages over traditional FIM methods, and practical implementation techniques. We will showcase OWASP KubeFIM which is an open source FIM solution for Kubernetes, and discuss future prospects for eBPF in security applications. Attendees will gain practical knowledge on setting up eBPF for FIM, understanding its benefits, and navigating potential challenges.