Alfredo Cardigliano is a Principal Engineer with over 15 years of experience designing high-performance network monitoring and packet-processing systems, currently leading development at ntop from his base in southern Italy. He combines deep kernel and driver-level expertise with practical user-space engineering to build passive and inline packet processing solutions for commodity hardware, tackling traffic classification, packet recording and DDoS mitigation. His open-source contributions to projects like nDPI and Suricata include zero-copy packet capture optimizations, PF_RING enhancements and new back-end APIs—work that improves real-world IDS/NDPI throughput and interoperability. Fluent in multiple programming languages and versed in concurrent, multiprocessor architectures, he blends low-level performance tuning with system integration and operational robustness. An often-overlooked strength is his track record of applying kernel hacking techniques to make mainstream network security tools scale on inexpensive hardware.
Open Source Deep Packet Inspection Software Toolkit
Role in this project:
Back-end Developer
Contributions:1 release, 159 commits, 3 PRs in 5 years 9 months
Contributions summary:Alfredo contributed to the nDPI project by implementing and refining various back-end functionalities. Their work involved fixing compilation issues, improving the CRC32 calculation, and enhancing the JSON serialization and deserialization capabilities. These changes encompassed code improvements related to handling protocol filters and optimizing the serialization process. Furthermore, the user introduced new APIs for enhanced flexibility in data handling, including the addition of double and boolean data types.
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community.
Role in this project:
Security Engineer
Contributions:5 reviews, 7 commits, 15 PRs in 2 years
Contributions summary:Alfredo primarily focused on enhancing the packet capture capabilities of Suricata, an intrusion detection/prevention system. Their contributions involved optimizing the PF_RING packet acquisition module, including implementing zero-copy packet reception in worker mode and improving performance by utilizing packet timestamps. They also added hardware bypass support and addressed issues related to PF_RING cluster configuration, improving the system's efficiency and compatibility with various network cards.
git-repositorynsmipssecurityids
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.