NetSentinel

Real-time eBPF & TPM 2.0 Linux security engine with <1ms latency

by mausamrijal5

Visit

Aug 11, 2026 Security & Privacy

ebpf kernel-monitoring linux-security threat_detection tpm2

About

NetSentinel is a turnkey, ultra-lightweight Linux kernel security engine built for enterprise threat detection. Operating directly at Ring-0 using Extended Berkeley Packet Filters (eBPF), it captures real-time process execution, network connection, and socket listening events with sub-millisecond (<1ms) latency and an 18MB RAM footprint.The system enforces uncompromisable hardware-bound trust via TPM 2.0 (PCR allowlist sealing and AIK-signed tamper-proof audit logs) and features a formally verified mathematical safety engine to prevent accidental system crashes during threat mitigation. The package includes a pure-Go control plane, gRPC/REST gateway, real-time WebSocket dashboard UI, client-side PDF export engine, research whitepapers with mathematical proofs, and complete systemd deployment scripts.