Project No. 15

Container Security Attack Simulation with Trend Micro Vision One Container Security

A rebuildable Kubernetes lab that replays real container attack techniques against Trend Vision One, with Trend Micro Artifact Scanner gating image vulnerabilities in CI before deploy.

Timeline 6 weeks
Stack Kubernetes, Trend Vision One, Trend Micro Artifact Scanner, GitHub Actions
Challenge

A container-security datasheet doesn't tell you what a tool catches. You need to watch it react to attack patterns before you can trust it in a real cluster.

Approach

I built a Kubernetes lab that replays common container attack techniques against a workload protected by Trend Vision One. I also wired Trend Micro Artifact Scanner into a GitHub Actions pipeline that flags image vulnerabilities before deploy. Shell scripts handle the setup so the whole environment tears down and rebuilds on demand.

You don't know what a security tool does until you've watched it either catch something or miss it.
Outcome

The result is a reproducible environment for demonstrating which container attack patterns Vision One detects, and where CI-time scanning fits alongside runtime protection.

  • Reproducible Kubernetes attack scenarios for evaluating detection coverage
  • GitHub Actions pipeline scans images with Trend Micro Artifact Scanner before deploy
  • Shell-scripted setup rebuilds the lab from scratch in minutes