Kaspersky has updated the Kaspersky Endpoint Security for Linux and Kaspersky Security Center management console, which are in the family of the Hybrid Cloud Security protection solution for virtualization and cloud environments.
The new version of Kaspersky Endpoint Security for Linux hardens defenses from exploits and ransomware attacks. It also extends protection for DevOps with support for new containerisation environments and more native delivery of protection mechanisms for Docker containers. The Kaspersky Security Center Cloud Console now works with public cloud platforms to enable more convenient management of cloud workload protection.
The update is hinged on the fact that dedicated protection for Linux servers is essential, no matter if they are on-premise or in the cloud. Advanced threats for Linux can be no less severe than for other operating systems, with such servers often hosting critical applications or becoming a springboard for access to endpoints on Windows and iOS. Compromised servers can go unnoticed for a long time. Protection from ransomware attacks is also critical to avoid disruption and financial losses. For example, during the European Summer in 2020, a large vendor of solutions for digital workspaces and the professional print industry, became a victim of one such Linux executable, RansomEXX, leading to an outage of company services.
“Businesses use cloud environments widely, and cyber-protection should not lag behind. Our solution focuses on helping organisations adopt the cloud securely and meet their needs. Enhancements in security for Linux are crucial, as enterprises require an adequate level of protection for all platforms and endpoints they use. They also want to save team resources for additional tasks, such as solution deployments, so our cloud console supports this need. As for DevOps, one of the main issues for businesses here is to seamlessly integrate security into automated pipelines, that’s why we focused our efforts on making this process as convenient as possible,” comments Timofey Titkov, Senior Product Manager, Enterprise Products, Kaspersky.
To combat these types of threats, the updated Kaspersky product has a newly added application control for Linux workloads, helping businesses effectively prevent the launch of unauthorised or unknown (and potentially dangerous) executables. A customer can now set up application launch policies according to security requirements, for example, create a list of applications prohibited from launching. In the Default Deny scenario, only applications from the approved list can be launched in the workload. Administrators can also configure policies for separate machines or groups of machines.
The new executable software inventory feature creates a list of all used application executables by path, hash, and type, so it can be used to create and assign categories and as a preparation stage for application control set up.
Kaspersky Endpoint Security for Linux also improves protection for DevOps to help customers add security practices into the product development lifecycle. The product can now scan containers and images in more containerization environments, in addition to Docker: Cri-O, Podman and runC – to reveal compromised assets.