shamedgh / confineLinks
This tool set can generate SECCOMP profiles for Docker images. It mainly relies on static analysis, making its results more reliable than currently available tools.
☆65Updated 3 years ago
Alternatives and similar repositories for confine
Users that are interested in confine are comparing it to the libraries listed below
Sorting:
- Linux Kernel Runtime Integrity with eBPF☆179Updated last year
- bpflock - eBPF driven security for locking and auditing Linux machines☆148Updated 3 years ago
- BPFContain is a container security daemon for GNU/Linux leveraging the power and safety of eBPF and Rust.☆59Updated 3 years ago
- A process level network security monitoring and enforcement project for Kubernetes, using eBPF☆43Updated 5 years ago
- 🐝 BPFBox 📦 Exploring process confinement in eBPF☆104Updated last year
- ☆455Updated last month
- Example BPF program with LSM hooks☆33Updated 4 years ago
- This repository contains the source code related to the research paper titled "Temporal System Call Specialization for Attack Surface Red…☆37Updated 8 months ago
- eBPF - extended Berkeley Packet Filter tooling☆123Updated 3 years ago
- ☆22Updated last year
- Linux Security Hardening for Confidential Compute☆67Updated 9 months ago
- fuzzing framework based on libfuzzer and clang sanitizer☆167Updated 6 years ago
- A taxonomy of attacks on software supply chains in the form of an attack tree, based on and linked to numerous real-world incidents and o…☆75Updated 2 months ago
- Trace deep kernel events through eBPF and lsm hooks☆37Updated 4 years ago
- ✨🔐 CNCF Fuzzers☆126Updated last month
- LSM BPF module to block pwnkit (CVE-2021-4034) like exploits☆21Updated 3 years ago
- Kasper: Scanning for Generalized Transient Execution Gadgets in the Linux Kernel☆58Updated last year
- Fuzz Introspector -- introspect, extend and optimise fuzzers☆420Updated this week
- An eBPF program debugger☆210Updated 3 years ago
- Source-code based coverage for eBPF programs actually running in the Linux kernel☆132Updated 5 months ago
- find relevant security papers published in the top-4 conferences (S&P, USENIX, CCS, NDSS)☆186Updated 10 months ago
- A Dolev-Yao-model-guided fuzzer for TLS☆143Updated this week
- Lind: Secure Lightweight Adaptive Isolation☆30Updated 2 weeks ago
- FitM, the Fuzzer in the Middle, can fuzz client and server binaries at the same time using userspace snapshot-fuzzing and network emulati…☆292Updated 3 years ago
- CodeQL queries developed by Trail of Bits☆104Updated last month
- This repository contains the code for the paper "A flow-based IDS using Machine Learning in eBPF", Contact: Maximilian Bachl☆102Updated last year
- ☆178Updated last year
- POC for Phantom Attack☆83Updated 2 years ago
- Vault Exploit Defense☆127Updated 10 months ago
- Lightweight fuzzing of a memory snapshot using KVM☆456Updated last year