EMICRO: Real-Time Multi-Hop Access Control for Microservices with eBPF
- Rizky Ramadhana Putra
- Osama Bajaber
- et al.
- 2026
- CCS 2026
I am a Research Staff Member in the Security Research department at IBM Research where I love to solve problems related to cyber security including securing AI agents, security analytics, cloud security, systems security, and cyber deception. Currently, my main focus is on securing AI Agents and I'm a founder and maintainer of the Praxis Policy Engine - a CNCF project. The PPE is an open source reference monitor designed to interpose agent actions to handle identity, delegation, security policy, and auditing. It supports a data layer called the Common Message Format (CMF) which represents the payloads that flow through an agent stack, and provides a set of Extension objects that represent identity, and meta data that can then be used in your favorite policy decision point such as CEL, OPA, or Cedar. The PPE supports stateful analytics and taint tracking, and is extendable through a plugin system. It also supports tamper evident OCSF logging. Since it is a library, it can be injected into any part of the agentic stack to enforce policy, modify payloads, and manage identity. Currently, the PPE is the default policy engine for the Praxis AI Gateway. Please reach out or join the CNCF community slack channel if you are interested in working on the PPE.
I am also a maintainer of the SysFlow Telemetry Pipeline, which is an open source platform for monitoring system events on cloud platforms.
I love mentoring students and junior researchers and have published in many top security conferences. My google scholar page is here.
A cloud-native system telemetry framework that enables the creation of security analytics on a scalable, pluggable open-source platform.