IMA Namespaces for Container Security Enhancement

Explore container security enhancement through Linux kernel namespaces in this 29-minute conference talk by Asier Gutierrez from Huawei. Learn about the Integrity Measurement Architecture (IMA) for file attestation and its current limitations in container awareness. Discover a proposed solution to address the lack of kernel-related features for container security, including integration with Kubernetes orchestration system. Gain insights into a remote attestation prototype capable of detecting file changes within containers, enhancing overall container security in cloud environments.