Skip to main content

Open source software used by Bitdefender Endpoint Security Tools for Linux

Software Name

Short Description

License Type

Website

Boost

Boost provides free peer-reviewed portable C++ source libraries.

Boost Software License

https://www.boost.org/

DazukoFS

DazukoFS is a mechanism that allows userspace applications to perform online file access control.

Bitdefenderuses this tool in binary mode. The original library is not modified.

GPL Version 2

http://dazuko.dnsalias.org/wiki/index.php/Main_Page

LibCurl

LibCurl is a free client-side URL transfer library, supporting cookies, DICT, FTP, FTPS, Gopher, HTTP (with HTTP/2 support), HTTP POST, HTTP PUT, HTTP proxy tunneling, HTTPS, IMAP, Kerberos, LDAP, POP3, RTSP, SCP, and SMTP. The library supports the file URI scheme, SFTP, Telnet, TFTP, file transfer resume, FTP uploading, HTTP form-based upload, HTTPS certificates, LDAPS, proxies, and user-plus-password authentication.

MIT style

https://curl.se/libcurl/

LibSsh2

LibSsh2 is a client-side C library implementing the SSH2 protocol.

BSD-3

https://www.libssh2.org/

OpenSSL

OpenSSL is a robust, commercial-grade, and full-featured toolkit for the Transport Layer Security (TLS) and Secure Sockets Layer (SSL) protocols. It is also a general-purpose cryptography library.

OpenSSL

https://www.openssl.org/

PCRE

The PCRE library is a set of functions that implement regular expression pattern matching using the same syntax and semantics as Perl 5. PCRE has its own native API, as well as a set of wrapper functions that correspond to the POSIX regular expression API.

BSD

http://www.pcre.org/

SQLite

SQLite is a self-contained, high-reliability, embedded, full-featured, public-domain, SQL database engine.

GPL public domain

https://www.sqlite.org/index.html

TinyXML

TinyXML is a simple, small, C++ XML parser that can be easily integrating into other programs.

Zlib

https://sourceforge.net/projects/tinyxml/

Zlib

Zlib is designed to be a free, general-purpose, legally unencumbered, lossless data-compression library for use on virtually any computer hardware and operating system.

Zlib

https://www.zlib.net/

c-ares

c-ares is a C library for asynchronous DNS requests.

MIT

https://github.com/c-ares/c-ares

cyrus-sasl

Cyrus SASL is an implementation of SASL that makes it easy for application developers to integrate authentication mechanisms into their application in a generic way.

OpenLDAP Public License

https://github.com/cyrusimap/cyrus-sasl

cppcodec

cppcodec supports a range of codecs using a shared template-based implementation. The focus is on a high-quality API that encourages correct use, includes error handling, and is easy to adopt into other codebases.

MIT

https://github.com/tplgy/cppcodec

Libtins

libtins is a high-level, multiplatform C++ network packet sniffing and crafting library.

BSD 2-Clause

https://github.com/mfontanini/libtins

mit-kerberos

Kerberos is a network authentication protocol. It is designed to provide strong authentication for client/server applications by using secret-key cryptography.

MIT

https://web.mit.edu/kerberos/

nlohmann/json

The nlohmann/json library has the following design goals: intuitive syntax, trivial integration and serious testing.

MIT

https://github.com/nlohmann/json

SQliteCpp

SQLiteC++ offers an encapsulation around the native C APIs of SQLite, with a few intuitive and well documented C++ classes.

MIT

https://github.com/SRombauts/SQLiteCpp

spdlog

spdlog is a very fast, header-only/compiled, C++ logging library.

MIT

https://github.com/gabime/spdlog

socket.io

Socket.IO enables real-time bidirectional event-based communication.

MIT

https://github.com/socketio/socket.io

google/flatbuffers

FlatBuffers is a cross platform serialization library architected for maximum memory efficiency. It allows you to directly access serialized data without parsing/unpacking it first, while still having great forwards/backwards compatibility.

Apache 2

https://github.com/google/flatbuffers

ZeroMQ

ZeroMQ (also known as ØMQ, 0MQ, or zmq) looks like an embeddable networking library but acts like a concurrency framework. It gives you sockets that carry atomic messages across various transports like in-process, inter-process, TCP, and multicast.

GNU LGPL version 3

https://zeromq.org/

Azmq

The azmq library provides Boost Asio style bindings for ZeroMQ.

BLS 1.0

https://github.com/zeromq/azmq

elfutils

elfutils is a collection of utilities and libraries to read, create and modify ELF binary files, find and handle DWARF debug data, symbols, thread state and stacktraces for processes and core files on GNU/Linux.

GPLv2+, LGPLv3+ or GPLv3+

https://sourceware.org/elfutils/

BPF Compiler Collection (BCC)

BCC is a toolkit for creating efficient kernel tracing and manipulation programs, and includes several useful tools and examples. It makes use of extended BPF (Berkeley Packet Filters), formally known as eBPF, a new feature that was first added to Linux 3.15. Much of what BCC uses requires Linux 4.1 and above.

Apache 2.0

https://github.com/iovisor/bcc

ICU

ICU is a mature, widely used set of C/C++ and Java libraries providing Unicode and Globalization support for software applications. ICU is widely portable and gives applications the same results on all platforms and between C/C++ and Java software.

Unicode

https://icu.unicode.org/

breakpad

Breakpad is a set of client and server components which implement a crash-reporting system.

Multiple licenses

https://chromium.googlesource.com/breakpad/breakpad

gRPC

gRPC is a modern open source high performance Remote Procedure Call (RPC) framework that can run in any environment. It can efficiently connect services in and across data centers with pluggable support for load balancing, tracing, health checking and authentication.

Apache 2

https://grpc.io/

Jq

Jq is used to slice, filter, map and transform structured data. jq is written in portable C, and it has zero runtime dependencies.

MIT

https://stedolan.github.io/jq/

Libpcap

Libpcap is a portable C/C++ library for network traffic capture.

BSD-3

https://www.tcpdump.org/

rapidjson

RapidJSON is a JSON parser and generator for C++. It supports both SAX and DOM style API. The SAX parser is only a half thousand lines of code.

MIT

https://rapidjson.org/

Lua

Lua is a powerful, efficient, lightweight, embeddable scripting language. It supports procedural programming, object-oriented programming, functional programming, data-driven programming, and data description.

MIT

https://www.lua.org/

WebSocket++

WebSocket++ is a cross platform open source (BSD license) header only C++ library that implements RFC6455 (The WebSocket Protocol) and RFC7692 (Compression Extensions for WebSocket). It allows integrating WebSocket client and server functionality into C++ programs. In its most common configuration full featured network I/O is provided by the Asio Networking Library.

3 Clause BSD

https://github.com/zaphoyd/websocketpp/

osquery

osquery is an operating system instrumentation framework for Windows, OS X (macOS), and Linux.It exposes an operating system as a high-performance virtual relational database. This allows you to write SQL queries to explore operating system data.

Apache 2.0 or GPL version 2.0

https://github.com/osquery/osquery

YARA

YARA is a tool aimed at (but not limited to) helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malware families (or whatever you want to describe) based on textual or binary patterns. Each description, a.k.a. rule, consists of a set of strings and a boolean expression which determine its logic.

BSD 3-Clause

https://yara.readthedocs.io/en/stable/index.html

efivar

efivar is a crate for manipulating EFI variables using the OS interface. This crate is mainly used by efiboot to implement its functionality.

LGPL 2.1

https://github.com/rhboot/efivar

zstd

Zstandard, or zstd as short version, is a fast lossless compression algorithm, targeting real-time compression scenarios at zlib-level and better compression ratios.

BSD or GPL v2.

https://github.com/facebook/zstd

audit-userspace

The Linux Audit System is designed to make Linux compliant with the requirements from Common Criteria, DSS-PCI, and other security standards by intercepting system calls and serializing audit log entries from privileged user space applications.

GPL 2.0 and LGPL 2.1

https://people.redhat.com/sgrubb/audit/

libssh

libssh is a multiplatform C library implementing the SSHv2 protocol on client and server side. With libssh, you can remotely execute programs, transfer files, use a secure and transparent tunnel, manage public keys and much more.

LGPL 2.1

https://www.libssh.org/

libmnl

libmnl is a minimalistic user-space library oriented to Netlink developers.

LGPL 2.1

https://netfilter.org/projects/libmnl/

libxml2

libxml2 is an XML toolkit implemented in C, originally developed for the GNOME Project

MIT

https://gitlab.gnome.org/GNOME/libxml2

pcre2

PCRE2 is a library of functions to support regular expressions whose syntax and semantics are as close as possible to those of the Perl 5 language.

PCRE2

https://www.pcre.org/

glibc

Glibc library provides critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more ford systems that use Linux as the kernel. These APIs include such foundational facilities as open, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt, login, exit and more. The library is used for BEST Linux deployment via Bitdefender’s available RMM integrations.

GNU LGPL version 3

https://www.gnu.org/software/libc/