SecurityPerf: A New Open-Source Framework for Benchmarking the Performance Impact of Linux Security Solutions
summary
SecurityPerf is an open source Python + Docker framework that builds containerized benchmarks for Apache, MySQL, WordPress, MongoDB and RabbitMQ, runs a baseline and a modified system, and writes per-iteration metrics to summaryresults.txt and comparisonresults.txt. It reports mean and standard deviation (defaults to five iterations) so results show ClamAV causing large CPU-driven overhead on Apache during scans, AppArmor showing ~10% overhead on MySQL with an 8.74 stddev, and Falco (eBPF) producing a significant hit on WordPress because Apache runs per-connection processes.
AI-written summary · about
chapters (4)
related talks
34mChoose Your Shield: Evaluating Linux Security Modules for Cloud Na...
50mScaling Security Assessment at the Speed of DevOps
26mContainers: Your Ally in Improving Security
14mWill eBPF Save Us From the Next Global Outage?
46mPerformance Testing Framework
20mThink eBPF for Kernel Security Monitoring
53mProtect Containerized Applications With System Call Profiling
58mOpen Source Pentesting and Security Analysis Tools: the DevOps way