2 repositorios
Awesome GitHub RepositoriesSystem Call Profilers
Tools that synthesize restrictive system call policies based on observed application runtime behavior.
Distinct from Security Profiles: Focuses on automated generation of security profiles from runtime behavior, distinct from static security configuration.
Explore 2 awesome GitHub repositories matching devops & infrastructure · System Call Profilers. Refine with filters or upvote what's useful.
Awesome System Call Profilers GitHub Repositories
Encuentra los mejores repositorios con IA.Buscaremos los repositorios que mejor coincidan usando IA.
- docker-slim/docker-slim
docker-slim/docker-slim
23,311Ver en GitHubThis project is a suite of specialized tools for linting, minifying, analyzing, and managing container images and their associated registries. It provides a set of utilities including an image minifier to reduce image size, a security profiler to harden running containers, an image analyzer for static inspection, and a registry manager for organizing multi-architecture indices. The toolset distinguishes itself through behavior-based optimization and security. It uses dynamic analysis to track executed instructions and file access to remove unused binary data, and records kernel interactions t
Synthesizes restrictive system call policies by recording kernel interactions during application execution.
Go - slimtoolkit/slim
slimtoolkit/slim
22,977Ver en GitHubSlim is a comprehensive suite for container lifecycle management, providing tools for image inspection, optimization, security hardening, and service troubleshooting. It functions as a platform for analyzing containerized applications through both static metadata review and dynamic behavioral probing, enabling users to understand image composition and runtime dependencies. The project distinguishes itself by automating the creation of minimal, production-ready container images. It achieves this by removing unnecessary files and components, flattening image layers, and synthesizing restrictive
Generates restrictive system call policies by monitoring application behavior to limit potential attack surfaces.
Goapparmorcontainersdocker
