Skip to content

Open, Trusted, and Secure SONiC at Scale presented by Cisco#

OCP Global Summit 2026 digest Program Core pick 12–15 October 2026

Abstract Recording

Will Eatherton (Cisco), Dina Papagiannaki (Microsoft)

Play the recording: Open, Trusted, and Secure SONiC at Scale presented by Cisco

  • Why: SONiC security posture is becoming an adoption gate as it moves into enterprise and AI infrastructure, and this lays out an end-to-end framework — FIPS, attestation, and eBPF-based live patching — that touches the PM's security and eBPF interests directly.
  • What: An end-to-end SONiC security framework spanning supply-chain integrity, verified software authenticity, secure build pipelines, FIPS-ready hardware with a platform root of trust, confidential networking (protecting data and network state), and Day-2 monitoring with integrated CVE intelligence (from abstract only).
  • How: eBPF-based runtime protections enable rapid mitigation and live patching without reboots — protect immediately, apply permanent patches in a planned window, revalidate; hardware/firmware/software integrity validated across the system lifecycle.
  • Where applicable: General SONiC security architecture rather than a single deployment; note this is a vendor-led expo-hall session, so expect framework-level content without deployment metrics — the eBPF live-patch workflow is the concrete piece to take away.