Skip to content
View imkerbos's full-sized avatar
  • MatrixPlus Security Labs
  • Shenzhen City

Block or report imkerbos

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
imkerbos/README.md

Kerbos

Native Cloud Security Engineer

Building Runtime Security Infrastructure for the AI Era.



About

I focus on building modern cloud-native security and infrastructure platforms.

My work includes:

  • Runtime Detection & eBPF
  • Kubernetes Security
  • AI Infrastructure
  • DevSecOps Platform Engineering
  • Cloud Security Architecture
  • Autonomous Security Operations

With 7+ years of experience across gaming, finance, government, and large-scale production environments.


Current Focus

Matrix Cloud Security Platform

Native cloud security platform focused on:

  • Runtime Detection
  • eBPF Event Collection
  • Kubernetes Security
  • Container Threat Detection
  • Vulnerability Analysis
  • Intelligent Security Correlation
  • Autonomous Response

MXID

Enterprise Identity & Access Management Platform.

  • SSO / EIAM
  • OIDC / SAML / CAS / JWT
  • RBAC & Organization Management
  • Audit Logging
  • Access Gateway
  • Third-party Identity Integration

MXCMDB

Modern Infrastructure Management Platform.

  • CMDB
  • IPAM
  • Asset Discovery
  • Cloud Account Management
  • Task Orchestration
  • File Distribution
  • Agentless Architecture

Research Areas

  • AI Security
  • Runtime Security
  • eBPF Detection
  • Kubernetes Runtime Protection
  • Cloud Native Defense
  • CNAPP / CWPP
  • Autonomous DevSecOps
  • AI-assisted Threat Analysis

Technology

Cloud Native
Kubernetes · Docker · ArgoCD · Helm

Infrastructure
Linux · AWS · GCP · Nginx · MySQL · Redis

Observability
Prometheus · Loki · ELK · Grafana

Programming
Go · Python · Shell

Security
eBPF · Runtime Detection · Threat Hunting · Container Security

Selected Areas of Work

  • Kubernetes Security Hardening
  • Runtime Detection Engine
  • eBPF Security Research
  • DevSecOps Platform Architecture
  • AI Ops Infrastructure
  • Cloud-native SIEM
  • Infrastructure Automation
  • Security Event Correlation

GitHub Statistics


Activity Graph


Philosophy

Security should be embedded into infrastructure, not added afterwards.


Connect


Building secure infrastructure for modern AI systems.

Pinned Loading

  1. acme-console acme-console Public

    自托管证书管理控制台 — 支持多域名 SAN、通配符证书、手动 DNS-01 验证及多目标部署。

    Go 1 1

  2. db-probe db-probe Public

    以 Go 实现的数据库探针 + Prometheus Exporter。

    Go

  3. ticketdesk ticketdesk Public

    TicketDesk 是一个面向运维与技术团队的项目化工单与告警联动系统。统一管理研发/运维工单,自动将监控告警转化为可跟踪、可指派、可量化的工单,实现问题处理闭环。

    Go 3

  4. HurricaneX HurricaneX Public

    分布式 L7 流量仿真平台 — 支持 HTTP/HTTPS 压测、TLS 握手压测、CC 行为仿真,基于 AF_XDP 零拷贝架构,无需 DPDK。

    C 1 1

  5. mxid mxid Public

    Open-source Enterprise Identity and Access Management (IAM/SSO) Platform.

    Go 1