cloud-native-security-inspector icon indicating copy to clipboard operation
cloud-native-security-inspector copied to clipboard

Feature: Runtime security monitoring and detection support

Open 4everming opened this issue 2 years ago • 0 comments

Is your feature request related to a problem? Please describe. No

Describe the solution you'd like Users of Cloud-native security inspector would like to detect threats at runtime by observing the behavior of your applications and containers. Typical behaviors regard to security include:

  1. read the sensitive file /etc/shadow
  2. terminal shells being spawned in pods etc.

Describe alternatives you've considered We would like to investigate some existing solutions in this area(something like Falco) to see if they can be integrated into Project Narrows, so that we don't reinvent the wheels.

4everming avatar Jan 13 '23 23:01 4everming