As a member of the Open Source Software team, I contribute to the ongoing development of Tracee, a premier runtime security and forensics tool for Linux that leverages Linux eBPF technology. Within this collaborative environment, my work focuses on enhancing Tracee's capabilities to monitor systems and applications in real-time, analyzing events to identify suspicious behavior. My contributions are within a team setting, working on both kernel space components in eBPF (C) and userland programs… Show more As a member of the Open Source Software team, I contribute to the ongoing development of Tracee, a premier runtime security and forensics tool for Linux that leverages Linux eBPF technology. Within this collaborative environment, my work focuses on enhancing Tracee's capabilities to monitor systems and applications in real-time, analyzing events to identify suspicious behavior. My contributions are within a team setting, working on both kernel space components in eBPF (C) and userland programs in Golang, to improve Tracee's detection efficacy and security measures.https://github.com/aquasecurity/traceeBeyond my team-based engineering efforts, I am involved in the collaborative development of libbpfgo, a Go library created to facilitate interactions with Linux's eBPF from Go. This library supports the operational needs of Tracee, embodying our collective commitment to advancing runtime security and open-source tooling.https://github.com/aquasecurity/libbpfgo Show less

Identity-defined networks for simple, scalable, secure distributed services across any platform or cloud at any scale.- Identity management- Mesh Networks- data-plane and control-plane development- Architecture and Software design- Cloud Native Security- Network protocols design and development- QUIC protocol RFC implementation- HTTP3- TLS and certificates/Keys management- Open Source management- k8s, docker, C, C++, Go

Designed and contributed L7 SPIFFE-based policies to Cilium and Delegation API to SPIRE.Main activities:- Programming golang and C- eBPF / XDP / LSM / KRSI- Linux Kernel- Container internals/security- Docker/Kubernetes- Zero-trust- Open Source contributions to: cilium, KubeArmorAccuKnox (www.accuknox.com) provides a Zero-Trust Run-time Kubernetes Security platform. AccuKnox was launched in partnership with Stanford Research Institute (www.sri.com)… Show more Designed and contributed L7 SPIFFE-based policies to Cilium and Delegation API to SPIRE.Main activities:- Programming golang and C- eBPF / XDP / LSM / KRSI- Linux Kernel- Container internals/security- Docker/Kubernetes- Zero-trust- Open Source contributions to: cilium, KubeArmorAccuKnox (www.accuknox.com) provides a Zero-Trust Run-time Kubernetes Security platform. AccuKnox was launched in partnership with Stanford Research Institute (www.sri.com) and is anchored on seminal patented inventions in the areas of: Container Security, Anomaly Detection and Data Provenance. AccuKnox can be deployed in Public and Private Cloud environments. AccuKnox has received seed funding from SRI, National Grid Ventures, z5Capital and Outliers.vc.Check out our product vision video https://vimeo.com/489025103Check out www.kubearmor.com our opensource project [container aware runtime security enforcement system] Show less

Security consultant - activities based on offensive security, such as bug hunter and penetration test. The main activities are:- software reverse engineering;- operating systems hacking;- fuzzing of network protocols;- software development;- code obfuscation;- low-level stuffs.

- Administration of some network elements, like firewall, servers and routers.- Administration and analysis of a network flow collector based on IPFIX.- Dynamic malware analysis – using Cuckoo Sandbox – aiming to capture network traffic for master’s degree project.- Development a solution for automated generation of signatures for malwares based on network flows.