Kaspersky protects Linux and delivers security services

Issue 7 2021 Information Security

Kaspersky unveils updates to two of its applications in the Kaspersky Hybrid Cloud Security protection solution for virtualisation and cloud environments – Kaspersky Endpoint Security for Linux and Kaspersky Security Center management console.

The new version of Kaspersky Endpoint Security for Linux hardens defences from exploits and ransomware attacks. It also extends protection for DevOps with support for new containerisation environments and more native delivery of protection mechanisms for Docker containers. The Kaspersky Security Center Cloud Console now works with public cloud platforms to enable more convenient management of cloud workload protection.

As Kaspersky research shows, dedicated protection for Linux servers is essential, no matter if they are on-premises or in the cloud. Advanced threats for Linux can be no less severe than for other operating systems, with such servers often hosting critical applications or becoming a springboard for access to endpoints on Windows and iOS. Compromised servers can go unnoticed for a long time. Protection from ransomware attacks is also critical to avoid disruption and financial loses. For example, during the European Summer in 2020, a large vendor of solutions for digital workspaces and the professional print industry, became a victim of one such Linux executable, RansomEXX, leading to an outage of company services.

To combat these types of threats, the updated Kaspersky product has a newly added application control for Linux workloads, helping businesses effectively prevent the launch of unauthorised or unknown (and potentially dangerous) executables. A customer can now set up application launch policies according to security requirements, for example, create a list of applications prohibited from launching. In the Default Deny scenario, only applications from the approved list can be launched in the workload. Administrators can also configure policies for separate machines or groups of machines.

The new executable software inventory feature creates a list of all used application executables by path, hash and type, so it can be used to create and assign categories and as a preparation stage for application control set up.

Kaspersky Endpoint Security for Linux also improves protection for DevOps to help customers add security practices into the product development lifecycle. The product can now scan containers and images in more containerisation environments, in addition to Docker: Cri-O, Podman and runC – to reveal compromised assets.

For Docker users, product deployment and configuration has become easier and faster. Customers can now run Kaspersky Endpoint Security for Linux as a container in the very environment they want to protect. The service of on-demand scan (ODS) is enabled via RESTful API.

This new release also provides updates for security administration now that the SaaS version of Kaspersky Security Center console is available for managing workload security in public clouds: Amazon Web Services, Microsoft Azure and Google Cloud. It is hosted and maintained by Kaspersky, saving customers time and resources for deployment.

“Businesses use cloud environments widely and cyber-protection should not lag behind. Our solution focuses on helping organisations adopt cloud securely and meet their needs. Enhancements in security for Linux are crucial, as enterprises require an adequate level of protection for all platforms and endpoints they use. They also want to save team resources for additional tasks, such as solution deployments, so our cloud console supports this need.

As for DevOps, one of the main issues for businesses here is to seamlessly integrate security into automated pipelines, that’s why we focused our efforts on making this process as convenient as possible,” comments Timofey Titkov, senior product manager, Enterprise Products, Kaspersky.

Find out more at www.kaspersky.com




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Highest increase in global cyberattacks in two years
Information Security News & Events
Check Point Global Research released new data on Q2 2024 cyber-attack trends, noting a 30% global increase in Q2 2024, with Africa experiencing the highest average weekly per organisation.

Read more...
There is a SaaS for everything, but at what cost, especially to SMEs?
Editor's Choice Information Security Security Services & Risk Management
Relying on SaaS platforms presents significant cybersecurity risks as the number of providers in your landscape increases, expanding your attack surface. It is important to assess the strength of the SaaS providers in your chain.

Read more...
Addressing today’s mining challenges: cyber risks beyond IT
Editor's Choice Information Security Mining (Industry)
Despite the mining industry’s operational technology systems being vulnerable to cyberattacks, many decision-makers still see these threats as purely an IT issue, even though a breach could potentially disrupt mining operations.

Read more...
Get proactive with cybersecurity
Information Security
The ability to respond effectively to a cybersecurity breach is critical, but the missing piece of the puzzle is a thorough, proactive evaluation to ascertain weaknesses and identify any hidden threats.

Read more...
How to effectively share household devices
Smart Home Automation Information Security
Sharing electronic devices within a household is unavoidable. South African teens spend over eight hours per day online, making device sharing among family members commonplace. Fortunately, there are methods to guarantee safe usage for everyone.

Read more...
How to securely manage your digital footprint
Information Security Training & Education
Managing your online presence is critical to safeguarding your privacy and security. It is imperative to take a proactive approach, including using robust cybersecurity best practices.

Read more...
The state of code security in 2024
Information Security
The 2024 State of Code Security survey reveals that organisations have continued to shore up application security defences over the last year, according to OpenText Premier Partner iOCO Application Management.

Read more...
What is the level of safety and integrity of the software supply chain?
Information Security IoT & Automation
Organisations are embracing AppSec practices and focusing on their software security posture. However, they highlight that insufficient funding and security resources, plus a disconnect between developers and security teams, remain major roadblocks.

Read more...
Cybercriminals target financial service providers to get at sensitive client data
Information Security
According to Ryan van de Coolwijk, Product Head for cyber at iTOO Special Risks, hackers target financial service providers because they hold sensitive client information that unauthorised individuals could use for fraudulent activities.

Read more...
Fortinet establishes new point-of-presence in South Africa
News & Events Information Security
Fortinet has announced the launch of a new dedicated point-of-presence (POP) in Isando, Johannesburg, to expand the reach and availability of Fortinet Unified SASE for customers across South Africa and southern African countries.

Read more...