Kaspersky- Container Security

Cyber Security Model

KASPERSKY CYBER SECURITY CONTAINER

FEATURES

Full Lifecycle Container & Orchestrator Protection
Covers from container image building / registry / CI-CD pipeline scanning, deployment, runtime monitoring, orchestrator configuration checks, and compliance audits.
Vulnerability & Misconfiguration Detection
Detects known vulnerabilities in images (via NVD, VDB / DSTD), secrets in code, misconfigs in container & orchestrator settings, unauthorized changes etc.
Runtime Monitoring & Process / Network Behavior Tracking
Monitors live containers for suspicious processes, communications, resource consumption, policy violations; can block images not meeting policy in runtime / admission controls.
Compliance Audits & Policies / Regulatory Checking
Includes automated audits against best practices, regulatory requirements, security benchmarks; supports “shift-left” so images are scanned early (in CI), and policy enforcement at runtime.
Visualisation & Inventory Management
Provides dashboards, cluster state visualizations, widgets for process / network behavior, inventory of resources / containers / nodes for visibility.

SPECIFICATIONS

Supported Platforms / Orchestration: Kubernetes (version 1.21 or later), OpenShift 4.8 & 4.11+, DeckHouse 1.52 / 1.53 (with CNI = Flannel), DropApp 2.1.
Container Runtimes Supported: containerd, CRI-O.
CNI Plugins Supported: Flannel, Calico, Cilium.
Linux Kernel Requirements: Linux kernel 4.18 or later; for certain runtime monitoring features or privilege management, kernel ≥5.8; kernel headers / dev tools needed on host.
Registry / CI tools Supported: GitLab CI; image registries like Docker Hub (V2 API), JFrog Artifactory, Nexus OSS, Harbor; scanning of IaC artifacts.
OS Support for Scanned Images / Packages: Alpine Linux (certain versions), Red Hat Universal Base Image versions, RHEL, etc.
Architecture: x86 (host / orchestrator).
Management Interface: Web console; supports modern browsers (Chrome / Edge / Firefox / Safari).
SIEM Integration: Ability to export events/logs (including policy violations, container runtime events, alert / scanner / admission controller events) to SIEM systems using standard formats like CEF / Syslog.

KASPERSKY CYBER SECURITY STANDARD

FEATURES

Essential Protection & Anti-Hacking Tools
Provides real-time antivirus, anti-malware, anti-phishing, firewall / network protection to guard against viruses, ransomware, phishing and other basic threats.
Safe Money & Secure Browsing
Includes technology to protect online banking transactions, surf safely by blocking dangerous or fraudulent sites & unauthorized tracking.
Performance Optimization & Device Cleanup
Tools to clean up hard disk space, manage startup apps, remove bloat/duplicate files, reduce interruptions (gaming/full-screen modes) to maintain device speed.
Privacy & Identity Protection
Includes identity protection, data leak checker, and limited VPN usage or ad/tracking blocking in supported regions.

SPECIFICATIONS

Supported OS / Devices: Windows, macOS, Android, iOS.
Minimum Windows Requirements: approx. 1 GHz processor; 1 GB RAM for 32-bit / 2 GB for 64-bit; free disk space typically ~1500 MB or more depending on version.
Extras: Do Not Disturb mode, safe-money protections, cleanup tools.

KASPERSKY CYBER SECURITY PLUS

FEATURES

All Standard Level Protection + More Privacy & Utilities
Includes everything in Standard (antivirus, anti-phishing, safe browsing etc.) plus extras like unlimited VPN, identity protection, password manager & bills / safe-kids (in many offers) to cover more than just malware threats.
Identity & Password Tools
Tools to check for data leaks, manage passwords, protect identity more comprehensively.
Enhanced Device & Online Privacy
Often includes VPN for more private browsing, tools to reduce tracking/ad intrusion, and enhanced protections when using online services.

SPECIFICATIONS

Supported OS / Devices: Same as Standard (Windows, macOS, Android, iOS).
VPN / Identity Features: VPN component, password manager etc. included.
System / Hardware Requirements: Similar to Standard; Windows requirements same/close. Specific VPN / extra service requirements may require Internet connection and possibly more RAM or disk to support extra components.