--- title: "White paper: Addressing the MITRE ATT&CK framework for containers using Calico" source: "https://www.tigera.io/blog/white-paper-addressing-the-mitre-attck-framework-for-containers-using-calico/" description: "To help organizations stay ahead of attackers, Tigera recently released a white paper based on the MITRE ATT&CK containers matrix." --- [Company Blog](https://www.tigera.io/category/company-blog/) [Featured Blog](https://www.tigera.io/category/featured-blog/) # White paper: Addressing the MITRE ATT&CK framework for containers using Calico By [Suki Lam](https://www.tigera.io/blog/author/suki-lam/) on Apr 13, 2023 • 2 min read Be it chess, poker, or everyday driving, you must predict your opponent’s (or other drivers’) movement to win (or keep yourself safe!). Container security is the same, and many organizations look to the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK) framework to understand an attacker’s mindset and how to prevent attacks. The MITRE ATT&CK framework released a [matrix for containers](https://attack.mitre.org/matrices/enterprise/containers/), giving organizations that use Kubernetes and containers a chance to analyze an attacker’s M.O. and assess the organization’s attack vectors. To help organizations stay ahead of attackers, Tigera recently released a white paper based on the MITRE ATT&CK containers matrix. Drawing from Tigera’s experience as a cybersecurity provider, the white paper offers an in-depth analysis of the containers matrix. It also details how Tigera’s active security platform, Calico Cloud, a fully-managed SaaS, and its self-managed counterpart, Calico Enterprise, can detect and mitigate every tactic outlined in the matrix. ## White paper highlights Tigera’s white paper dives deep into the MITRE framework for containers to help organizations understand the risks they face and how they can mitigate these vulnerabilities using Calico. Here’s what you will learn from the white paper and the questions it’ll answer: - **Attack vectors of containerized applications –** What are the sources of cloud-native threats? What attack vectors do Kubernetes-based applications face? - **Anatomy of an attack –** What happens after an attacker has accessed the container or network? - **Attack tactics –** Reconnaissance, delivery & exploitation, installation & spread, and command & control - **How Calico helps –** Why is Calico a comprehensive active container security solution, and how does it address every tactic in the MITRE container matrix? Organizations using Kubernetes and containers face unique security challenges. Learn about the strategies attackers use and how an active security solution can help you. **Related Guides:** - [Kubernetes Security: 8 Best Practices to Secure Your Cluster](https://www.tigera.io/learn/guides/kubernetes-security/) - [Kubernetes Networking: The Complete Guide](https://www.tigera.io/learn/guides/kubernetes-networking/) - [Microsegmentation Security: The Evolution of Cybersecurity in a Zero Trust World](https://www.tigera.io/learn/guides/microsegmentation/) **Related Products:** - [Calico Cloud](https://www.tigera.io/tigera-products/calico-commercial-editions/) - [Calico Enterprise](https://www.tigera.io/tigera-products/calico-commercial-editions/) [Kubernetes Vulnerabilities](https://www.tigera.io/tags/kubernetes-vulnerabilities/)[Announcements](https://www.tigera.io/tags/announcements/) ## Related posts [![Meet Mylo: An AI-native way to work with Calico](https://www.tigera.io/app/uploads/2026/09/Meet-Mylo-An-AI-native-way-to-work-with-Calico.png)](https://www.tigera.io/blog/meet-mylo-an-ai-native-way-to-work-with-calico/) [Technical Blog](https://www.tigera.io/category/technical-blog/) #### [Meet Mylo: An AI-native way to work with Calico](https://www.tigera.io/blog/meet-mylo-an-ai-native-way-to-work-with-calico/) By [Phil DiCorpo](https://www.tigera.io/blog/author/phil-dicorpo/) on Sep 3, 2026 A library of Calico tools and skills — delivered through the Calico MCP Server What if your hardest network question took ten minutes instead of ten days? Anyone who has operated Kubernetes networking at scale... [Read more](https://www.tigera.io/blog/meet-mylo-an-ai-native-way-to-work-with-calico/) [![Why We Built Lynx: Bringing Control to the Age of AI Agents](https://www.tigera.io/app/uploads/2026/06/Introducing-Lynx-NEW-TEMPLATE-2026-Tigera-brand.png)](https://www.tigera.io/blog/why-we-built-lynx-bringing-control-to-the-age-of-ai-agents/) #### [Why We Built Lynx: Bringing Control to the Age of AI Agents](https://www.tigera.io/blog/why-we-built-lynx-bringing-control-to-the-age-of-ai-agents/) By [Ratan Tipirneni](https://www.tigera.io/blog/author/ratan/) on Jun 17, 2026 For a decade, one idea has guided everything we’ve built at Tigera: How do you secure a dynamic system with a lot of moving parts that is changing rapidly, with a programmatic approach? Calico has... [Read more](https://www.tigera.io/blog/why-we-built-lynx-bringing-control-to-the-age-of-ai-agents/) [![Calico at KubeCon Europe 2026: AI Agents, Silent Discos, and Dutch Delights!](https://www.tigera.io/app/uploads/2026/02/Blog-Kubecon-Euro-2026-.png)](https://www.tigera.io/blog/calico-at-kubecon-cloudnativecon-europe2026/) #### [Calico at KubeCon Europe 2026: AI Agents, Silent Discos, and Dutch Delights!](https://www.tigera.io/blog/calico-at-kubecon-cloudnativecon-europe2026/) By [Tigera Team](https://www.tigera.io/blog/author/marketingtigera-io/) on Mar 23, 2026 The cloud-native community gathered among the historic canals and vibrant tech scene of Amsterdam for KubeCon + CloudNativeCon Europe 2026! From March 23–26, Amsterdam was buzzing with the latest in Kubernetes, platform engineering, and, of... [Read more](https://www.tigera.io/blog/calico-at-kubecon-cloudnativecon-europe2026/)