## Identity Aware Threat Detection and Network Monitoring by using eBPF Natalia Reka Ivanko, Isovalent eBPF Summit ## I ntroduction ● Wide variety of eBPF use cases (logging, CPU over overhead) • Today:

permissionless blockchain technologies are unable (presently) to deliver. In addition, in many use cases, the identity of the participants is a hard requirement, such as in the case of financial transactions where Know-Your-Customer specifically architected to have a modular architecture. Whether it is pluggable consensus, pluggable identity management protocols such as LDAP or OpenID Connect, key management protocols or cryptographic libraries MSP Implementation with Identity Mixer: A way to keep identities anonymous and unlinkable through the use of zero-knowledge proofs. There is a tool that can generate Identity Mixer credentials in test environments

## Overview Casdoor is a UI-first Identity Access Management (IAM) / Single-Sign-On (SSO) platform based on OAuth 2.0, OIDC, SAML, and CAS. You need to enable JavaScript to run this app. Casdoor serves Casdoor. By entering the correct username and credentials into the login page, Casdoor now knows the identity of the user and is about to send two pieces of information back to the callback URL set in Step casdoor-go-sdk ## Provider Casdoor is a federated single sign-on system that supports multiple identity providers via OIDC, OAuth, and SAML. Casdoor can also send verification codes or other notifications

vision 05 1.1 values 06 1.2 tone of voice 07 1.3 audience & key messages 08 ## visual identity 2.0 logo overview 13 2.0.1 logo use 14 2.1 color 16 2.2 typography 17 ## the mascot 2.0 supports needs specific to open source communities and Go + High demand for Go programmers ## visual identity ## // logo overview Our logo represents our team, the project and the community. It follows the

trigger direct calls to Mixer's API. pilot-agent Istio Pilot agent. ✓ istio_ca Istio Certificate Authority (CA). ✓ istio control interface. mixs Mixer is Istio's abstraction abstraction on top of infrastructure backends. ✓ mixs Mixer is Istio's abstraction on top of infrastructure backends. node_agent Istio security per-node agent. ✓ node_agent Istio security V2通过GRPC双向流，主动推送配置给envoy: ✓事件触发 - 当配置有增/删/改事件 √定时触发 - 可配置环境变量 V2_REFRESH，定时推送配置 ## Mixer——遥测报告 envoy Mixer Logentry Stdio envoy 数据整理 queue Metric Prometheus envoy ◆上报的原始数据 ◆ 异步Flush给Adapter

stio架构 - Istio Proxy: 劫持Pod的所有通信，是Mesh的基础 - Pilot: 为Proxy提供动态配置管理 • Citadel: 自动维护mTLS密钥 • Mixer: 在k8s中部署了两组Mixer • Policy提供授权、Quota等能力 • Telemetry提供监控数据收集能力 ![Image](/uploads/documents/d/f/1/5/df158 istio-certs volume - Citadel: 自动刷新secrets, k8s自动加载istio-secrets volume - Pilot: 和Sidecar建立连接，管理动态配置 - Mixer: 和Sidecar建立连接，管理授权、Quota和审计数据 ![Image](/uploads/documents/d/f/1/5/df158379e68d7dd184b6984cbf57e2e2/p9_1 两方面： - 扩展Sidecar：加入认证支持，提供了对业务系统的认证支持，将用户相关信息以header的形式传入mesh，后续的授权、监控、限流都可以用Istio原生的机制来完成 • 扩展Mixer：选择一部分流量来应用对应的授权逻辑 ## FreeWheel的Istio实践 - 右图为接入FreeWheel自定义认证和授权模块的原理图 ![Image](/uploads/documen

[Image](/uploads/documents/7/f/6/2/7f62ee8ecccbbe19358ef272039075f0/p3_3.jpg) 微服务平台的监控演进 Mixer组件的功能介绍 基于Mixer的开发流程和实例 ## 目录 CONTENTS  Check:也叫precondition，前置条件检查，比如说黑白名单，权限。 Quota: 访问次数 Report: 日志。 ## Mixer的二次开发流程 Mixer的二次开发流程 080 ## Mixer插件工作模型  上述的过程中，Envoy所做的数据收集、上传是自动完成的，而Mixer生成模版实例则可以通过配置来完成。因此，所谓的Mixer插件实际上就是Adapter，开发Mixer插件也就是开发Adapter。

that you may choose to use to generate the certificates and key material to configure and manage identity in your blockchain network. However, any CA that can generate ECDSA certificates may be used. ## Key Concepts • Introduction • Hyperledger Fabric Functionalities • Hyperledger Fabric Model • Identity. • Membership • Peers • Ledger • Use Cases ## I ntroduction Hyperledger Fabric is a platform and cloud platforms, but the underlying structure is the same. Unified systems for managing the identity of network participants do not exist, establishing provenance is so laborious it takes days to clear

permissionless blockchain technologies are unable (presently) to deliver. In addition, in many use cases, the identity of the participants is a hard requirement, such as in the case of financial transactions. regulations specifically architected to have a modular architecture. Whether it is pluggable to consensus, pluggable identity management protocols such as LDAP or OpenID Connect, key management protocols or cryptographic libraries that you may choose to use to generate the certificates and key material to configure and manage identity in your blockchain network. However, any CA that can generate ECDSA certificates may be used. ##

permissionless blockchain technologies are unable (presently) to deliver. In addition, in many use cases, the identity of the participants is a hard requirement, such as in the case of financial transactions where Know-Your-Customer specifically architected to have a modular architecture. Whether it is pluggable consensus, pluggable identity management protocols such as LDAP or OpenID Connect, key management protocols or cryptographic libraries MSP Implementation with Identity Mixer: A way to keep identities anonymous and unlinkable through the use of zero-knowledge proofs. There is a tool that can generate Identity Mixer credentials in test environments