2 个仓库
Tools that synthesize restrictive system call policies based on observed application runtime behavior.
Distinct from Security Profiles: Focuses on automated generation of security profiles from runtime behavior, distinct from static security configuration.
Explore 2 awesome GitHub repositories matching devops & infrastructure · System Call Profilers. Refine with filters or upvote what's useful.
This project is a suite of specialized tools for linting, minifying, analyzing, and managing container images and their associated registries. It provides a set of utilities including an image minifier to reduce image size, a security profiler to harden running containers, an image analyzer for static inspection, and a registry manager for organizing multi-architecture indices. The toolset distinguishes itself through behavior-based optimization and security. It uses dynamic analysis to track executed instructions and file access to remove unused binary data, and records kernel interactions t
Synthesizes restrictive system call policies by recording kernel interactions during application execution.
Slim is a comprehensive suite for container lifecycle management, providing tools for image inspection, optimization, security hardening, and service troubleshooting. It functions as a platform for analyzing containerized applications through both static metadata review and dynamic behavioral probing, enabling users to understand image composition and runtime dependencies. The project distinguishes itself by automating the creation of minimal, production-ready container images. It achieves this by removing unnecessary files and components, flattening image layers, and synthesizing restrictive
Generates restrictive system call policies by monitoring application behavior to limit potential attack surfaces.