Blog
Posts about
Container Security (4)
Understanding the Real-time Characteristics of Linux Containers By Jay Huang Highly threaded, I/O intensive Linux containers running on Kubernetes should be able to use the full extent of their CPU requests. But is this really possible? Understanding how the Linux operating system schedules tasks and allocates CPU time to tasks can help application developers optimize containers which are highly threaded …
By Gary Duan On June 17, 2019, security researchers at Netflix released a series of vulnerabilities they discovered in the Linux and FreeBSD kernel. By sending crafted SACK packets to the vulnerable server, attackers are able to slow down the server’s TCP stack, incur excessive resource usage, and in the worst case scenario, cause a kernel panic. The main vulnerability, …
Building in Reliability to Meet Regulatory Demands The German banking service provider figo is on a mission to reduce complexity and increase reliability and scalability across its infrastructure. To reach these goals, while also addressing the ongoing demands of banking and privacy regulations, figo is converting to a Kubernetes container-based infrastructure. As figo says, “these measures ensure figo API’s future-readiness …
New dashboard and reports enable DevOps security teams to accurately assess their attack risk, and offer recommendations to reduce risk for Kubernetes and Red Hat OpenShift deployment San Jose, CA – May 7, 2019 – NeuVector, the leader in container network security, today announced new capabilities to help container security teams better assess the security posture of their deployed services …
By Gary Duan Securing containers in production is no easy task. And getting it wrong or deploying weak run-time container security will ultimately leave you vulnerable to an attack. It would only be a matter of time before you will be scrambling to recover and possibly facing bad publicity from a data breach. Run-time container security is primarily a prerequisite …
