Journal article
Journal of Wireless Mobile Networks, Ubiquitous Computing, and Dependable Applications, vol. 12, 2021, pp. 89 β 108
APA
Click to copy
Zuppelli, M., Carrega, A., & Repetto, M. (2021). An Effective and Efficient Approach to Improve Visibility Over Network Communications. Journal of Wireless Mobile Networks, Ubiquitous Computing, and Dependable Applications, 12, 89β108. https://doi.org/10.22667/JOWUA.2021.12.31.089
Chicago/Turabian
Click to copy
Zuppelli, Marco, Alessandro Carrega, and Matteo Repetto. βAn Effective and Efficient Approach to Improve Visibility Over Network Communications.β Journal of Wireless Mobile Networks, Ubiquitous Computing, and Dependable Applications 12 (2021): 89β108.
MLA
Click to copy
Zuppelli, Marco, et al. βAn Effective and Efficient Approach to Improve Visibility Over Network Communications.β Journal of Wireless Mobile Networks, Ubiquitous Computing, and Dependable Applications, vol. 12, 2021, pp. 89β108, doi:10.22667/JOWUA.2021.12.31.089.
BibTeX Click to copy
@article{zuppelli2021a,
title = {An Effective and Efficient Approach to Improve Visibility Over Network Communications},
year = {2021},
journal = {Journal of Wireless Mobile Networks, Ubiquitous Computing, and Dependable Applications},
pages = {89 β 108},
volume = {12},
doi = {10.22667/JOWUA.2021.12.31.089},
author = {Zuppelli, Marco and Carrega, Alessandro and Repetto, Matteo}
}
π¬ Efficient Network Monitoring with eBPF: Architecture, Performance, and Security Applications
Modern cloud-native and distributed infrastructures demand scalable, flexible, and resource-efficient network monitoring mechanisms.
Our research investigates eBPF-based packet inspection for collecting statistical information from IPv4, IPv6, TCP, and UDP headers to support the detection of network covert channels.
We introduce bccstego and experimentally compare its performance against Zeek and libpcap, evaluating CPU utilization, memory consumption, throughput, packet loss, and jitter.
π Key findings: eBPF provides flexible, low-overhead monitoring with negligible impact on network transmission in the evaluated scenarios. However, the Python-based implementation introduces additional resource costs compared with native C implementations.

π¦Έ Unmasking Hidden Threats with eBPF! ππ
What if malicious communications could hide inside ordinary network packets?
Discover how eBPF transforms network monitoring by enabling lightweight, programmable inspection directly within the Linux kernel.
Through a manga-inspired journey, explore how our research tackles covert channels, improves network visibility, and supports efficient security monitoring in modern distributed environments.
