Kernel Borderlands (KB) is a kernel-level runtime defense framework designed to detect, classify, and contain anomalous process behavior directly at Ring 0 on Linux systems. Rather than relying solely on signatures or predefined rules, KB continuously observes kernel telemetry through eBPF instrumentation, constructs behavioral context, and coordinates an intelligent multi-agent defense architecture capable of adaptive runtime response.
The project combines kernel observability, behavioral analytics, distributed agent orchestration, reinforcement learning, and modern systems programming into a unified security platform intended for research, experimentation, and next-generation host defense.
Repository Structure
| Directory | Language | Description |
|---|
kb-core/ | C (eBPF) | Kernel instrumentation layer and telemetry collection. |
kb-control-plane/ | Go | Control plane daemon (kbd) responsible for event coordination and system management. |
kb-aads/ | Python | Autonomous Agent Defense Swarm (AADS), behavioral reasoning, and MARL infrastructure. |
kb-op/kb-dashboard/ | React / TypeScript | Web dashboard for visualization and monitoring. |
kb-op/kb-tui/ | Rust | Terminal-based management interface built with ratatui. |
kb-op/kb-mcp/ | Go / Rust | Model Context Protocol (MCP) server for AI agent tool integration. |
kb-checker/ | Rust | Script analysis and safety verification engine. |
docs/ | Markdown / PDF | Technical documentation, architecture, installation guides, and project papers. |
scripts/ | Bash / Python | Installation utilities, automation, testing, and attack-lab tooling. |
Getting Started
Complete installation instructions, dependency setup, project architecture, development workflow, and contributor documentation are maintained within the project's documentation.
Please Begin with:
Kernel Borderlands Wiki
The wiki provides:
- Installation and environment setup
- Software and hardware requirements
- System architecture
- Kernel hook points and telemetry pipeline
- Team organization
- Technical whitepaper and project synopsis
- Development workflow and future project documentation
Once the environment has been prepared, the primary services can be started using:
# Control Plane
cd kb-control-plane
go run cmd/kbd/main.go
# Autonomous Agent Defense Swarm
cd kb-aads
python main.py
# Dashboard
cd kb-op/kb-dashboard
npm run dev
Team Kernel Borderlands :
- K. Pardhu
- K. Tejaswini
- K. Karthik
- K. Rupa Yeshvitha
