Monitoramento contínuo de integridade para contêineres em ambientes LINUX.

Abstract

In this work, the increasing use of containers for virtualizing environments and deploying applications will be discussed, emphasizing the importance of ensuring the integrity and security of these containers. The work presents a solution that uses the integrity measurement architecture of the Linux kernel and the Trusted Platform Module chip to assess the integrity of applications and libraries. The motivation for this research lies in the need to protect applications in virtualized and containerized environments, ensuring their reliability and security. The proposed solution in this study involves a client-server model, where the containers are executed on the client. An application has been developed to continuously monitor the integrity of these containers. When an integrity error in a container is identified, the server is immediately notified. Equipped with this information, the server decides on the appropriate action to be taken in response to the identified error. This process enables a quick and effective response to potential integrity violations, thus enhancing the overall system security.