ros2_tracing
secimport
Our great sponsors
| ros2_tracing | secimport | |
|---|---|---|
| 1 | 14 | |
| 130 | 157 | |
| 14.6% | - | |
| 8.1 | 6.5 | |
| 6 days ago | about 2 months ago | |
| Python | Python | |
| Apache License 2.0 | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
ros2_tracing
-
Inverted pendulum realtime metrics
I think that's probably the way to go. There are a couple of launch files like that, I guess that use tracetools_launch (see here in one of the pendulum_bringup launch files) to actually record some timing statistics.
secimport
-
Securing PyTorch Models with eBPF
In this blog, I will present secimport — a toolkit for creating and running sandboxed applications in Python that utilizes eBPF (bpftrace) to secure Python runtimes.
- I created a python seccomp sandbox, but per-module in your code.
- GitHub - avilum/secimport: Python sandbox toolkit, powered by eBPF and Dtrace
- GitHub - avilum/secimport: Python sandbox toolkit, powered by eBPF / Dtrace
- GitHub - avilum/secimport: seccomp Python sandbox, powered by eBPF and Dtrace
-
Dozens of malicious PyPI packages discovered targeting developers
There is also this, although I haven't tested it yet. The approach is interesting though. https://github.com/avilum/secimport
- GitHub - avilum/secimport: Secure imports for python modules using dtrace
-
Tracing/Sandboxing python modules upon import (like SECCOMP for the interpreter)
Code: https://github.com/avilum/secimport Article (No login required): https://infosecwriteups.com/sandboxing-python-modules-in-your-code-1e590d71fc26?source=friends_link&sk=5e9a2fa4d4921af0ec94f175f7ee49f9
- seccomp for Python import statements: sandbox python modules using dtrace (cross platform)
What are some alternatives?
demos
birdcage - Cross-platform embeddable sandboxing
pendulum - ROS, ROS2, real-time, control, pendulum
cargo-vet - supply-chain security for Rust
px4-offboard - Example of offboard control over microdds using python ROS 2
cli - Command line interface for the Phylum API
logos-shift-client - Replace expensive LLM calls with finetunes automatically
autobox - A set of tools and libraries for automatically generating and initiating sandboxes for Rust programs
ros2-message-flow-analysis - ROS 2 message flow analysis experiments
Contents - Community documentation, code, links to third-party resources, ... See the issues and pull requests for pending content. Contributions are welcome !
crev - Socially scalable Code REView and recommendation system that we desperately need. See http://github.com/crev-dev/cargo-crev for real implemenation.
security-wg - Node.js Ecosystem Security Working Group