@inproceedings{f9e9db63a2264b5d9b08da61fd750387,
title = "Towards Provenance for Cybersecurity in Cloud-Native Production Infrastructure",
abstract = "System provenance models the interactions between system subjects and objects, enabling post-mortem and root-cause analyses of cyberattacks. Despite numerous contributions to provenance systems, there remains little consensus on the reliability of existing telemetry collection methods. Linux Security Module (LSM) interfaces present a promising alternative thanks to their inherent stability and safety for production environments. However, since LSM do not capture the full granularity of system calls, it is unclear whether they can support the creation of sound provenance graphs. In this work, we study the evolution of these kernel interfaces and their coverage.",
keywords = "Linux Security Module, Provenance, eBPF",
author = "Houssel, \{Paul R.B.\} and Sylvie Laniepce and Olivier Levillain",
note = "Publisher Copyright: {\textcopyright} 2025 IEEE.; 55th Annual IEEE/IFIP International Conference on Dependable Systems and Networks - Supplemental Volume, DSN-S 2025 ; Conference date: 23-06-2025 Through 26-06-2025",
year = "2025",
month = jan,
day = "1",
doi = "10.1109/DSN-S65789.2025.00023",
language = "English",
series = "Proceedings - 2025 55th Annual IEEE/IFIP International Conference on Dependable Systems and Networks - Supplemental Volume, DSN-S 2025",
publisher = "Institute of Electrical and Electronics Engineers Inc.",
pages = "227--229",
editor = "Marcello Cinque and Domenico Cotroneo and \{De Simone\}, Luigi and Matthias Eckhart and Lee, \{Patrick P. C.\} and Saman Zonouz",
booktitle = "Proceedings - 2025 55th Annual IEEE/IFIP International Conference on Dependable Systems and Networks - Supplemental Volume, DSN-S 2025",
}