Posts tagged observability.

If you run Falco, an EDR, or a generic host agent on a validator and a network-DoS attack against the node went undetected, this explains why. A technique-by-technique analysis of five reproduced P2P-infrastructure attacks against the syscall detection surface. Zero are detectable as attributable rules, and the reasons are structural, not a matter of tuning.

A deep dive into eXpress Data Path (XDP), how it hooks into the Linux kernel at the earliest stage of packet processing, and why it's becoming the foundation for next-gen network security and observability.