Lightning Talk: Enhancing Runtime Protection Leveraging Compliance Frameworks
summary
Demonstrates KubeArmor protecting Linux workloads (containers, VMs, bare metal) with a system monitor and enforcement agent that leverages Linux security modules to block attacks in real time. Shows an actionable policy that restricts a service account token to a single binary, denies package managers, root cert and passwd directories, and removes sysadmin/setuid capabilities. Claims zero‑trust policies catch novel attacks but need heavy tuning, while compliance‑derived hardening policies enforce CIS/MITRE controls immediately and generate realtime alerts when blocks occur.
AI-written summary · about
related talks
09mLightning Talk: Securing K8s Pods from Within: A Runtime Approach
24mRuntime Security: Challenges & Solution Space
07mLightning Talk: Armoring Cloud Native Workloads with BPF LSM
28mKubeArmor: Applying Security Policies with Practical Examples in K8S
21mArmoring Cloud Native Workloads With LSM Superpowers
53mFlying Above the Clouds: Securing Kubernetes
06mLightning Talk: Security Down to the Kernel
28mClosing the Loop: Applying Least Privilege and Ensuring We Did It Well