Project No. 15

Container Security Attack Simulation with Trend Micro Vision One Container Security

A rebuildable Kubernetes lab that replays real container attack techniques against Trend Vision One, with Trend Micro Artifact Scanner gating image vulnerabilities in CI before deploy.

Timeline 6 weeks
Stack Kubernetes, Trend Vision One, Trend Micro Artifact Scanner, GitHub Actions
Challenge

Reading a container-security datasheet doesn't tell you what a tool catches; you need to watch it react to attack patterns before you can trust it in a real cluster.

Approach

I built a Kubernetes lab where common container attack techniques could be replayed against a workload protected by Trend Vision One, and wired Trend Micro Artifact Scanner into a GitHub Actions pipeline so image vulnerabilities got flagged before deploy. Shell scripts handle the setup so the whole environment tears down and rebuilds on demand.

You don't know what a security tool does until you've watched it either catch something or miss it.
Outcome

The result is a reproducible environment for demonstrating which container attack patterns Vision One detects, and where CI-time scanning fits alongside runtime protection.

  • Reproducible Kubernetes attack scenarios for evaluating detection coverage
  • GitHub Actions pipeline scans images with Trend Micro Artifact Scanner before deploy
  • Shell-scripted setup rebuilds the lab from scratch in minutes