ACTIVE Systems

WasmSentinel

Lightweight real-time threat detection tool using WebAssembly for high-performance security

VIEW_SOURCE() LIVE_DEMO()
status ACTIVE
type Systems
started 2024-07-01
stack Go Rust WebAssembly eBPF Wasmtime Docker Kubernetes

// DESCRIPTION

WasmSentinel provides real-time security monitoring using WebAssembly sandbox environment for safe and efficient rule execution.

Architecture

  • Host: Go-based event collection and orchestration
  • Rules: Rust-compiled Wasm modules for detection logic
  • Collection: eBPF-based kernel event capture
  • Runtime: Wasmtime for secure rule execution

Deployment Options

  • Standalone Docker container
  • Kubernetes DaemonSet for cluster-wide protection
  • Prometheus metrics for monitoring

Detection Capabilities

File system monitoring, network analysis, process behavior, and custom rule support.

Live Demo

Try the interactive demo on GitHub Pages →

The demo showcases real-time threat detection with simulated attack scenarios, Wasm rule hot-swapping, and performance monitoring dashboards.

在线演示

在 GitHub Pages 体验交互式演示 →

Live Demo

Try the interactive demo on GitHub Pages →

The demo showcases real-time threat detection with simulated attack scenarios, Wasm rule hot-swapping, and performance monitoring dashboards.

在线演示

在 GitHub Pages 体验交互式演示 →

// HIGHLIGHTS

  • Production-ready v1.0 release
  • Live demo available
  • Comprehensive test suite with attack simulations
  • Kubernetes native deployment
< BACK_TO_PROJECTS()