Eric Leblond is a seasoned CTO and co-founder with 26 years of experience building network and security products, currently leading Stamus Networks. A long-time free software advocate, he is a Netfilter Core team member and one of the core developers of the widely used Suricata IDS/IPS engine, contributing low-level C fixes and new packet acquisition features that improve stability and security. He previously co-founded EdenWall (INL), scaling a project that began as his NuFW free software into a commercial network security appliance vendor. Eric blends hands-on systems and kernel-level engineering with product and company leadership, routinely contracting for both government and private-sector clients. His academic background in numerical analysis and mathematics underpins a pragmatic, analytical approach to performance and protocol problems. Colleagues know him for quietly fixing obscure memory and protocol edge cases that prevent vulnerabilities in production systems.
26 years of coding experience
20 years of employment as a software developer
Louis-le-Grand
DEA, Numerical Analysis, DEA, Numerical Analysis at Pierre and Marie Curie University
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community.
Role in this project:
Back-end Developer
Contributions:88 reviews, 1609 commits, 587 PRs in 12 years 11 months
Contributions summary:Eric's commits focused on enhancing Suricata, a network intrusion detection system. The user primarily modified and debugged the C code, adding missing return checks for memory allocation functions (SCStrdup), addressing invalid header parameters, and correcting logic errors. These changes improve code stability and prevent vulnerabilities, directly contributing to the performance and security of the system. Additionally, the user integrated new features, such as the inclusion of new events.
Contributions summary:Eric primarily contributed to the netfilter subsystem, focusing on improvements and bug fixes related to connection tracking, logging, and routing. Their work involved modifying existing code for ICMPv6 handling, including fixing tuple inversions and preventing the tracking of specific ICMPv6 messages. The user also implemented changes to improve nfnetlink_log, addressing timeout handling and per-rule threshold overrides. Their contributions focused on network traffic filtering and management.
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.