Compliance check

Kaspersky Container Security lets you check cluster nodes and resources for compliance with the following benchmarks:

• Kubernetes benchmarks. The solution checks cluster nodes for compliance with recommendations for creating a robust security system for Kubernetes-based software.

  The results of the check are displayed in the Compliance → Kubernetes benchmarks section.

• Cluster benchmarks. The solution checks how well resources in clusters are protected. Clusters are checked using rules described in
  MITRE

  The MITRE ATT&CK matrix, developed by the MITRE Corporation, describes the techniques and tactics used in attacks on information systems. It helps ensure the necessary level of protection, identify attacks on infrastructure, determine their purpose and detection method.

  and
  NSA

  The National Security Agency (NSA) is a division of the US Department of Defense that (among other things) is responsible for cyber intelligence and protecting US government information systems from cyber attacks.

  /
  CISA

  The Cybersecurity and Infrastructure Security Agency (CISA) is a federal agency in the USA tasked with enhancing national cybersecurity at all levels of government, developing and coordinating the implementation of cybersecurity programs in the USA, and improving the protection of the information infrastructure from hacker attacks.

  benchmarks, as well as Kubernetes benchmarks, which are used to assess threats and develop resource protection strategies.

  The results of the check are displayed in the Compliance → Cluster benchmarks section.

Not all orchestration platforms supported by Kaspersky Container Security can be scanned for compliance with standards. The check is performed for Kubernetes, OpenShift and DropApp.

In Kaspersky Container Security, you can generate reports based on the results of benchmark compliance checks. The list of generated reports is displayed under Administration → Reports.