eBPF-Based ADR: Real-time App Defense
Leveraging eBPF for Application Defense via System Call Monitoring and Analysis.
Ebpf-Go
How to run code in kernel space? eBPF!
How to run sandboxed programs in the Linux kernel without changing kernel source code or loading a kernel module.