Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).
-
Updated
Nov 6, 2025 - Go
Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).
vArmor is a cloud native container sandbox system based on AppArmor/BPF/Seccomp. It also includes multiple built-in protection rules that are ready to use out of the box.
LSM-based key-value store in Go for educational purpose.
Storage algorithms.
Log-structured merge-tree
A key-value persistent database that supports SQL queries over B+ and LSM trees
Advanced kernel-native security framework to disrupt and prevent DNS-based breaches including C2 channels and tunneling with zero data loss. Combines TC, Netfilter, raw socket interception, BPF maps, and ring buffers, runs entirely on eBPF in the Linux kernel. Integrates with deep learning for advanced intelligent EDR
Repository for the workshop on key-value storage engines.
A High Available Distributed Key-Value Storage System Based On LevelDB
Go package for parsing the Linux Software Map (LSM) format
Add a description, image, and links to the lsm topic page so that developers can more easily learn about it.
To associate your repository with the lsm topic, visit your repo's landing page and select "manage topics."