Projects

KubeArmor - Maintainer
KubeArmor is a cloud-native runtime security enforcement engine.
It leverages Linux security modules (LSMs) such as AppArmor, SELinux,
or BPF-LSM to enforce the user-specified policies and generates
generates rich alerts/telemetry events by leveraging eBPF.
KubeArmor is a Cloud Native Computing Foundation (CNCF) Sandbox project.

XDP eBPF Hooks for FreeBSD - GSoC
This project extends an existing FreeBSD network driver to be able to
call into an eBPF program when processing a newly received packet.
As in XDP the driver currently PASS (accept and process normally) and
DROP the packets as specified by the program.