Dynamically adapted traffic inspection and filtering in containerized environments

A non-transitory computer readable medium having stored thereon instructions for causing a processing circuitry to execute a process for dynamic inspection and filtering in a containerized environment, the process comprising:

• monitoring the containerized environment to identify deployment of a software container in the containerized environment;
• inspecting traffic redirected from the software container, wherein the inspecting includes detecting malicious activity of the software container;
• and
• filtering the traffic based on at least one filtering rule when the malicious activity is detected, wherein the at least one filtering rule is defined in a filtering profile for the software container, wherein the filtering profile is determined for the software container when a new container image of the software container is detected in the containerized environment.

A system for dynamic inspection and filtering, wherein the system hosts a containerized environment, comprising:

• a processing circuitry;
• and
• a memory, the memory containing instructions that, when executed by the processing circuitry, configure the system to:
• monitor the containerized environment to identify deployment of a software container in the containerized environment;
• inspect traffic redirected from the software container to the system, wherein the inspecting includes detecting malicious activity of the software container;
• and
• filter the traffic based on at least one filtering rule when the malicious activity is detected, wherein the at least one filtering rule is defined in a filtering profile for the software container, wherein the filtering profile is determined for the software container when a new container image of the software container is detected in the containerized environment.