Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Adopters: (feature sponsor: Mainsail - Falcon Tactical Edge)

Story:

  1. How do we stop, not just detect.  Not post-detect strategies but active mitigation.  Ex. application without hardening has these misconfigurations/access.  KubeArmor will sandbox the application behavior to only allow the specified behavior and nothing else.
  2. Multiple applications on a device.  If one is compromised, the blast radius could impact other running containers.  How do you isolate the workloads to limit the blast radius.
  3. Specific use cases for Vault
  4. ORRA Kamakura demo showing addition of KubeArmor to the running application to enforce network micro-segmentation

Zero-touch device onboarding with FDO is a reality

...