Definition

Deep Application Inspection (DAI) is oligo-security’s ebpf-based approach to correlating kernel syscalls with user-space application functions, libraries, and code paths for runtime security.

Key Points

  • Enables reachability-aware vulnerability prioritization (unused library paths deprioritized)
  • Foundation for runtime-exploit-blocking
  • Contrasts with shallow eBPF sensors that only see syscalls without app-layer origin

Sources