2m4t / LiCShield

Related projects: ⓘ

• shamedgh / confine
  This tool set can generate SECCOMP profiles for Docker images. It mainly relies on static analysis, making its results more reliable than…
  ☆62Updated 2 years ago
• twistlock / RunC-CVE-2019-5736
  CVE-2019-5736 POCs
  ☆81Updated 4 years ago
• willfindlay / bpfcontain-rs
  BPFContain is a container security daemon for GNU/Linux leveraging the power and safety of eBPF and Rust.
  ☆55Updated 2 years ago
• willfindlay / bpfbox
  🐝 BPFBox 📦 Exploring process confinement in eBPF
  ☆98Updated 8 months ago
• amrabed / strace-docker
  Trace system calls from Docker containers running on the system
  ☆31Updated last year
• Gui774ume / network-security-probe
  A process level network security monitoring and enforcement project for Kubernetes, using eBPF
  ☆40Updated 4 years ago
• sinkap / linux-krsi
  Fork from git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git (unstable and force pushed!)
  ☆20Updated last year
• iovisor / bpf-fuzzer
  fuzzing framework based on libfuzzer and clang sanitizer
  ☆163Updated 5 years ago
• saBPF-project / sabpf-kernel
  ☆27Updated 2 years ago
• FotisLouk / docker-sec
  Automatic AppArmor management for Docker containers
  ☆15Updated last year
• falcosecurity / pdig
  ptrace-based event producer for udig
  ☆66Updated 2 years ago
• CamFlow / camflow-dev
  Generates kernel patch for CamFlow Linux Provenance Capture.
  ☆27Updated 7 months ago
• nccgroup / ebpf
  eBPF - extended Berkeley Packet Filter tooling
  ☆121Updated 2 years ago
• intel / qemu-sgx
  ☆71Updated last year
• nabla-containers / nabla-measurements
  Measurements and comparisons of nabla containers
  ☆14Updated 5 years ago
• iotcube / hmark
  VUDDY & hmark for IoTcube
  ☆21Updated last year
• shamedgh / temporal-specialization
  This repository contains the source code related to the research paper titled "Temporal System Call Specialization for Attack Surface Red…
  ☆33Updated 4 years ago
• IAIK / Chestnut
  ☆20Updated 3 months ago
• rssys / shard
  ☆12Updated 2 years ago
• linux-lock / bpflock
  bpflock - eBPF driven security for locking and auditing Linux machines
  ☆136Updated 2 years ago
• ZJU-SEC / AbstractResourceAttack
  This repository is used to analysis the shared resources of different containers
  ☆27Updated 2 months ago
• andrewstucki / bpf-lsm
  Example BPF program with LSM hooks
  ☆31Updated 3 years ago
• intel / kvm-sgx
  ☆78Updated last year
• Gui774ume / ebpfkit-monitor
  ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits
  ☆120Updated last year
• linux-audit / audit-kernel
  GitHub mirror of the Linux Kernel's audit repository
  ☆137Updated last week
• XDU-SysSec / ExcessivePermissionAttack
  Take Over the Whole Cluster: Attacking Kubernetes via Excessive Permissions of Third-party Applications
  ☆12Updated 4 months ago
• falcosecurity / libs
  libsinsp, libscap, the kernel module driver, and the eBPF driver sources
  ☆224Updated this week
• duowen1 / container-from-scratch-in-c
  A container engine from scratch in C language, without any LXC or Docker
  ☆15Updated 2 years ago
• opencit / opencit
  ⛔️ DEPRECATED
  ☆37Updated 3 years ago
• Gui774ume / krie
  Linux Kernel Runtime Integrity with eBPF
  ☆163Updated 9 months ago