PROJECT NOTES / BY ABHIRUP KUMAR
Distributed Linux Kernel Attestation System
Building a distributed system to verify Linux kernel integrity in real-time using loadable kernel modules, Netlink communication, and quorum-based consensus to detect unauthorized kernel modifications.
MY PART
What I worked on.
Control Node & Attestation Server developer. Designed kernel-space monitoring architecture, implemented Netlink protocol communication, built consensus engine, and created HTTP-based control plane with cryptographic verification.
THE TOOLBOX
Built with.
- Python
- C
- Linux Kernel Modules
- Netlink Protocol
- Flask
- SHA256 Cryptography
- OpenSSL
IN THE DETAILS
What it does.
- Real-time kernel integrity monitoring via LKM
- Netlink-based kernel-userspace communication
- Quorum-based consensus engine for distributed attestation
- Cryptographic signing and verification of reports
- HTTP API for attestation report collection
- Trusted baseline management with operator prompts
- Structured audit logging and security alerts
- Secure Boot support with MOK key enrollment