Skip to content
View imkerbos's full-sized avatar

Block or report imkerbos

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
imkerbos/README.md

Kerbos

Native Cloud Security Engineer

Building Runtime Security Infrastructure for the AI Era.



About

I focus on building modern cloud-native security and infrastructure platforms.

My work includes:

  • Runtime Detection & eBPF
  • Kubernetes Security
  • AI Infrastructure
  • DevSecOps Platform Engineering
  • Cloud Security Architecture
  • Autonomous Security Operations

With 7+ years of experience across gaming, finance, government, and large-scale production environments.


Current Focus

Matrix Cloud Security Platform

Native cloud security platform focused on:

  • Runtime Detection
  • eBPF Event Collection
  • Kubernetes Security
  • Container Threat Detection
  • Vulnerability Analysis
  • Intelligent Security Correlation
  • Autonomous Response

MXID

Enterprise Identity & Access Management Platform.

  • SSO / EIAM
  • OIDC / SAML / CAS / JWT
  • RBAC & Organization Management
  • Audit Logging
  • Access Gateway
  • Third-party Identity Integration

MXCMDB

Modern Infrastructure Management Platform.

  • CMDB
  • IPAM
  • Asset Discovery
  • Cloud Account Management
  • Task Orchestration
  • File Distribution
  • Agentless Architecture

Research Areas

  • AI Security
  • Runtime Security
  • eBPF Detection
  • Kubernetes Runtime Protection
  • Cloud Native Defense
  • CNAPP / CWPP
  • Autonomous DevSecOps
  • AI-assisted Threat Analysis

Technology

Cloud Native
Kubernetes · Docker · ArgoCD · Helm

Infrastructure
Linux · AWS · GCP · Nginx · MySQL · Redis

Observability
Prometheus · Loki · ELK · Grafana

Programming
Go · Python · Shell

Security
eBPF · Runtime Detection · Threat Hunting · Container Security

Selected Areas of Work

  • Kubernetes Security Hardening
  • Runtime Detection Engine
  • eBPF Security Research
  • DevSecOps Platform Architecture
  • AI Ops Infrastructure
  • Cloud-native SIEM
  • Infrastructure Automation
  • Security Event Correlation

GitHub Statistics


Activity Graph


Philosophy

Security should be embedded into infrastructure, not added afterwards.


Connect


Building secure infrastructure for modern AI systems.

Pinned Loading

  1. mxcwpp mxcwpp Public

    企业级主机与容器安全管理平台。覆盖安全基线、资产管理、漏洞扫描、病毒查杀、文件完整性监控、运行时检测、容器安全、威胁情报与告警响应,面向安全运营团队提供统一管控视图。

    Go 20 7

  2. acme-console acme-console Public

    自托管证书管理控制台 — 支持多域名 SAN、通配符证书、手动 DNS-01 验证及多目标部署。

    Go 1 1

  3. db-probe db-probe Public

    以 Go 实现的数据库探针 + Prometheus Exporter。

    Go

  4. ticketdesk ticketdesk Public

    TicketDesk 是一个面向运维与技术团队的项目化工单与告警联动系统。统一管理研发/运维工单,自动将监控告警转化为可跟踪、可指派、可量化的工单,实现问题处理闭环。

    Go 2

  5. HurricaneX HurricaneX Public

    分布式 L7 流量仿真平台 — 支持 HTTP/HTTPS 压测、TLS 握手压测、CC 行为仿真,基于 AF_XDP 零拷贝架构,无需 DPDK。

    C

  6. mxid mxid Public

    Open-source Enterprise Identity and Access Management (IAM/SSO) Platform.

    Go 1