By Andson Tung We have seen a lot of reports on how the Linux kernel can be compromised by the Dirty Cow (CVE-2016-5195) exploit. One technique that attackers use is to exploit this kernel bug to overwrite a so-called setuid program in the system. A setuid program allows the user to temporarily elevate the privilege in order to perform a certain …
By Fei Huang Today more and more applications are running in a public cloud in containers. A common question we hear is “Do AWS container threats exist and how can we detect them?” For the application administrator or a security team, it is always interesting to know what and how their containers look like from security point of view. The recent …
Encrypted Tunnels with NGINX Plus Combined with NeuVector Run-Time Network Security Protect Business Critical Container Applications NGINX is one of the top container downloads from Docker hub, gaining widespread adoption. NGINX Plus adds enterprise-ready features offering even greater security, availability and manageability for production deployments of containers. However, with the increase in east-west container to container traffic which can cross hosts …
Backed by behavioral learning, zero-configuration application delivers runtime visibility and network security that adapts to fluctuating container environments San Jose, California – January 31, 2017 – NeuVector today announced the launch and immediate availability of a new approach to securing Docker containers. With constant behavioral learning automatically applied to security policies for containers, NeuVector secures containers where they have been …
By Henrik Rosendahl What are the arguments for containers vs virtual machines (VM’s)? Back in March 2016 Mike Coleman (@mikegcoleman) from Docker wrote a blog post titled: Containers Are Not VMs. Mike and I used to be colleagues at VMware EUC – working on delivering applications in virtual desktop environments. As you probably already know Virtual Machines provide a very …