BPF LSM (KRSI) in 2026: Writing Custom Kernel Security Policies with eBPF
Use BPF LSM (KRSI) to write dynamic kernel security policies in eBPF. Enable it on Linux 6.x, ship your first enforcement program, and stage audit-to-enforce rollouts safely.
eBPF Articles
eBPF Runtime Security with Falco and Tetragon: A 2026 Comparison
A hands-on comparison of Falco and Tetragon for eBPF-based runtime security on Kubernetes. Covers installation, custom policies, performance benchmarks, and when to use each tool — or both together.
eBPF Security on Linux: How to Defend Against Kernel-Level Rootkits and Backdoors
eBPF is both the most dangerous attack vector and the best defense on modern Linux. Learn how to harden the BPF subsystem against rootkits like BPFDoor and LinkPro, and deploy Tetragon, Falco, and Tracee for kernel-level runtime security monitoring.