Restricting application system calls with Tetragon
By observing the system calls made by an application during normal operation, we can determine which files are used, which processes are created and which network communications are necessary for the application to function properly. Then, thanks to the proactive aspect of Tetragon, we can restrict system calls to those previously observed.
Limiter la surface d'attaque d'une application en observant son comportement!
09/21/2023 | 15h00 -> 15h40 | Room D Forum: CYBERSECURITY Keywords: DEVOPS, INFRASTRUCTURE & NETWORKS, OPEN SOURCE (IT SOLUTIONS & SOFTWARE), SECURITY, NETWORKS AND CONNECTIONObservation of the system calls made by an application during regular operation, we can determine which files are used, which processes are created and which network communications are necessary for the application to function properly. Then, thanks to the proactive aspect of Tetragon, we can restrict system calls to those previously observed.