Skip to content
aiqbench takeAI Safety

aiqbench analysis

This presentation addresses the critical challenge of securing AI-generated code in production environments by leveraging eBPF for transparent traffic control. It demonstrates how kernel-level hooks can enforce prompt filtering and model restrictions without requiring application source code modifications or container restarts. The core value lies in establishing governance over unowned AI agents within Kubernetes clusters to mitigate security risks associated with autonomous code deployment.
Source coveringInfoQ
What this isA model's reading of the article and related coverage, written for aiqbench. Not the publisher's words.

Presentation: Enchant Your AI and APIs with eBPF Magic 🪄

InfoQ37 min read

Dan Finneran discusses the risks of unowned AI-generated code in production and demonstrates how eBPF can intercept and control AI API traffic in Kubernetes. He explains how kernel-level socket hooks enable transparent prompt filtering, model swapping, token limits, and syscall restrictions to secure AI agents without modifying application source code or restarting containers. By Dan Finneran

Dan Finneran: We're going to be talking a little bit about AI, APIs. We're going to talk about eBPF, which is a relatively low-level technology. We can look at some eBPF code if you really want to, or we can basically just talk about how eBPF works. I'm fully happy to delve into anything that makes sense to you. Who am I? I am part of a company called Isovalent, which is now part of Cisco, where I largely focus on helping the community understand technologies like eBPF, or the Cilium project. All of these are all open source. Cilium is networking for Kubernetes clusters, and eBPF is a technology that is part of the Linux kernel. If you have an Android phone on you right now, you will be running and using eBPF without actually realizing it. Then, in my spare time, I have created a number of cloud-native-based solutions that are part of the CNCF, so software-based load balancers for Kubernetes clusters, and bare metal provisioning tooling for Kubernetes clusters and things like that as well. To level set, this talk is largely around some of the things that we're seeing both in the cloud-native industry and in…

Excerpt shown under the publisher's RSS terms · 200 words · full text and figures are on the publisher's site

Related coverage