ebpfkit-monitor
machine-learning-in-ebpf
ebpfkit-monitor | machine-learning-in-ebpf | |
---|---|---|
1 | 3 | |
110 | 76 | |
- | - | |
0.6 | 4.9 | |
about 1 year ago | 16 days ago | |
C | C | |
Apache License 2.0 | GNU General Public License v3.0 only |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
ebpfkit-monitor
machine-learning-in-ebpf
-
Show HN: eBPF-powered L4 package dropper
I meant Transport Layer packages.
> https://github.com/CN-TU/machine-learning-in-ebpf
Thank you! I'll take a look.
-
A flow-based IDS using Machine Learning in eBPF
I’m not the post other but a coauthor of the paper. If there are some details missing in the paper, there’s also the open source implementation, also referenced in the paper: https://github.com/CN-TU/machine-learning-in-ebpf
What are some alternatives?
lkm-sandbox - Collection of Linux Kernel Modules and PoC to discover, learn and practice Linux Kernel Development
bouheki - bouheki is KRSI(eBPF+LSM) based Linux security auditing tool.
bad-bpf - A collection of eBPF programs demonstrating bad behavior, presented at DEF CON 29
ebpfkit - ebpfkit is a rootkit powered by eBPF
TripleCross - A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.
pwru - Packet, where are you? -- eBPF-based Linux kernel networking debugger
catboost - A fast, scalable, high performance Gradient Boosting on Decision Trees library, used for ranking, classification, regression and other machine learning tasks for Python, R, Java, C++. Supports computation on CPU and GPU.
boopkit - Linux eBPF backdoor over TCP. Spawn reverse shells, RCE, on prior privileged access. Less Honkin, More Tonkin.
durdur - eBPF-powered L3/L4 packet dropper.
redcanary-ebpf-sensor - Red Canary's eBPF Sensor
honey-potion - Writing eBPF programs with Elixir!