π£ πΜΆπ’ΜΆπ±ΜΆπ°ΜΆπ±ΜΆπΜΆπ ΜΆπ¨ΜΆ π£
Photo
The only stuff that made me relate is the cats and movie(which I only talked about once) for both damn
π£ πΜΆπ’ΜΆπ±ΜΆπ°ΜΆπ±ΜΆπΜΆπ ΜΆπ¨ΜΆ π£
I guess I am unique after all.
This media is not supported in your browser
VIEW IN TELEGRAM
π2πΏ1
I am building,
Real-Time Kernel Security Engine
The problem: Traditional security agents run in user space, consuming 5β10% of total CPU and introducing latency that modern cloud-native systems can't afford.
A zero-overhead kernel security observer using eBPF (Extended Berkeley Packet Filter) using C for eBPF bytecode and C++ for user-space control planes.
well the mechanism is injecting eBPF bytecode directly into the Linux kernel to trace kernel syscalls, memory allocation patterns, and network socket activity in real time.
Real-Time Kernel Security Engine
The problem: Traditional security agents run in user space, consuming 5β10% of total CPU and introducing latency that modern cloud-native systems can't afford.
A zero-overhead kernel security observer using eBPF (Extended Berkeley Packet Filter) using C for eBPF bytecode and C++ for user-space control planes.
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β USER SPACE (C++20 Daemon) β
β β
β ββββββββββββββββββββββββββ ββββββββββββββββββββββββ β
β β process_monitor.skel.h β ββββββΊ β RAII Engine Loop β β
β β (Auto-gen Skeleton) β β (ring_buffer__poll) β β
β ββββββββββββββββββββββββββ ββββββββββββ¬ββββββββββββ β
βββββββββββββββββββββββββββββ²ββββββββββββββββββββΌβββββββββββββββ
β β BPF Map Updates
RingBuf β β (Blacklist / Rules)
β βΌ
βββββββββββββββββββββββββββββΌβββββββββββββββββββββββββββββββββββ
β β KERNEL SPACE (C / eBPF) β
β βββββββββββββββββββββββββ΄βββββββββββ β
β β BPF_MAP_TYPE_RINGBUF β β
β ββββββββββββββββββββ²ββββββββββββββββ β
β β bpf_ringbuf_submit β
β ββββββββββββββββββββ΄ββββββββββββββββ β
β β process_monitor.bpf.c β β
β β SEC("tp/sys_enter_execve") β β
β ββββββββββββββββββββ²ββββββββββββββββ β
β β β
β ββββββββββββββββββββ΄ββββββββββββββββ β
β β Linux Kernel / Syscall Tracepointβ β
β ββββββββββββββββββββββββββββββββββββ β
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
well the mechanism is injecting eBPF bytecode directly into the Linux kernel to trace kernel syscalls, memory allocation patterns, and network socket activity in real time.
β€βπ₯2π1π₯1
β‘3π₯1
I don't think I installed the mic driver
π₯1
SO for today's stuff on the K-Sentinel I was able to map it out more.
π£ πΜΆπ’ΜΆπ±ΜΆπ°ΜΆπ±ΜΆπΜΆπ ΜΆπ¨ΜΆ π£
diagram.txt
I would have used ptrace like my other project ZeroShadow and dSBOM but according to this source it's better to use the bpf functions,
from eBPF Docs. source
from eBPF Docs. source
π£ πΜΆπ’ΜΆπ±ΜΆπ°ΜΆπ±ΜΆπΜΆπ ΜΆπ¨ΜΆ π£
I am building, Real-Time Kernel Security Engine The problem: Traditional security agents run in user space, consuming 5β10% of total CPU and introducing latency that modern cloud-native systems can't afford. A zero-overhead kernel security observer usingβ¦
And I am calling it, K-Sentinel. (Kernel-Sentinel)
By the way, if anyone have any unhinged thoughts, ideas or comments
Drop it: https://sma.robi.work/b/5EKv1JLlDyES
Drop it: https://sma.robi.work/b/5EKv1JLlDyES
sma.robi.work
Send Messages Anon
A web based ngl.link alternative ask me anything platform.
π2
It's here and there, I started with arduino 6 years ago with C++ and then at some point switched to cyber-security like courses on try hack me or youtube videos, and then back to C++ DSA then back to cyber security. I didn't have any plan, I just went with the flow to learn more stuff and ended up here
π3
Start with arduino, specially it will help you understand deep on how the low - level code operates with hardwares then to DSA but it will fuck you up a bit. and then try to create those programs with the idea first then concept then diagram then change that diagram into code but the main thing is trail and error, you will have a lot unfinished projects. It's okay. Just go with it through. As long as you don't quite, you will make it.
π4