IoT 환경의 민감 정보 보호를 위한 자동화된 eBPF 기반 화이트리스트 시스템 설계 및 구현 = Design and Implementation of an Automated eBPF-Based Whitelist Security Mechanism for Protecting Sensitive Data in IoT Environments

다국어 초록 (Multilingual Abstract)

As IoT devices become more widely deployed, unauthorized activities such as data exfiltration and malware injection are increasing. However, their fixed functionality, limited resources, and physical exposure make traditional signature-based and user-dependent whitelist methods unsuitable. This paper proposes an eBPF-based automated whitelisting system that generates policies from normal behavior during development and enforces them in the kernel during operation. Experimental results demonstrate that the proposed approach effectively prevents unauthorized executions and network connections with low overhead, making it suitable for IoT environments.