Skip to content
RIP Signatures
Signatures are History

Signatures Should Become Cloud Security History. 

Sign the petition to receive your copy of The Top 8 Reasons to Go Signatureless for Cloud Security.

 

Because It's Time for a 'Behavioral' Change:

It has become evident that the legacy practice of signature-based threat detection is inadequate for the challenges of modern cloud security. 

It is now our collective responsibility to declare that signatures for threat detection in cloud security are history.

Because signature-based threat detection has:

Too Many False Positives! How many times has your signature-based detection solution flagged your DataDog agent? And when a pod with a potential vulnerability is deployed at scale, you see that vulnerability duplicated across your environment just as many times, right?

Stateless Alerts: Signatures create stateless alerts. For example, you could be alerted for each successful spawn of a shell in a container. But what if you want to connect that to the namespace the event occurred in and the identity that was involved? Signature-based technologies generally try to gather this metadata straight from the kernel which causes performance issues.

An Innate Inability to Detect Novel Attacks: By definition, a signature is written for a known attack, so in the case of a novel attack, the delay for a signature can be days at best, or weeks in some cases. But even with the signature, you might not be covering all the exploit paths, or be able to pinpoint the context in which a zero-day can be exploited, so its usefulness is really limited until the attack and all its exploits are fully understood, and signatures are created to match.

Stand with us and sign our petition to usher in a new era of cloud security. Together, we can build a more secure future. Upon signing the petition, you will receive your own copy of The Top 8 Reasons to go Signatureless for Cloud Security.

This white paper covers: 

  • What it means to "go signatureless"
  • Why behavioral-based approaches for detecting and responding to attacks in cloud security are more efficient and more effective than signature-based methods
  • An example of what "signatureless" looks like: using behavioral fingerprints to detect and respond to CVE-20243094

Sign this petition

Say Farewell to Signature-Based Threat Detection in Cloud Native Environments

Use verified workload fingerprints to detect material drift indicative of sophisticated, zero-day attacks in the software supply chain and runtime.