White paper: Addressing the MITRE ATT&CK framework for containers using Calico

Be it chess, poker, or everyday driving, you must predict your opponent’s (or other drivers’) movement to win (or keep yourself safe!). Container security is the same, and many organizations look to the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK) framework to understand an attacker’s mindset and how to prevent attacks. The MITRE ATT&CK framework released a matrix for containers, giving organizations that use Kubernetes and containers a chance to analyze an attacker’s M.O. and assess the organization’s attack vectors.

To help organizations stay ahead of attackers, Tigera recently released a white paper based on the MITRE ATT&CK containers matrix. Drawing from Tigera’s experience as a cybersecurity provider, the white paper offers an in-depth analysis of the containers matrix. It also details how Tigera’s active security platform, Calico Cloud, a fully-managed SaaS, and its self-managed counterpart, Calico Enterprise, can detect and mitigate every tactic outlined in the matrix.

White paper highlights

Tigera’s white paper dives deep into the MITRE framework for containers to help organizations understand the risks they face and how they can mitigate these vulnerabilities using Calico. Here’s what you will learn from the white paper and the questions it’ll answer:

  • Attack vectors of containerized applications – What are the sources of cloud-native threats? What attack vectors do Kubernetes-based applications face?
  • Anatomy of an attack – What happens after an attacker has accessed the container or network?
  • Attack tactics – Reconnaissance, delivery & exploitation, installation & spread, and command & control
  • How Calico helps – Why is Calico a comprehensive active container security solution, and how does it address every tactic in the MITRE container matrix?

Organizations using Kubernetes and containers face unique security challenges. Learn about the strategies attackers use and how an active security solution can help you.

Join our mailing list

Get updates on blog posts, workshops, certification programs, new releases, and more!