Serverless Security Agent Overview
What Is a Serverless Security Agent?
A serverless security agent is provided by HSS. It is installed on serverless instances and exchanges data with the HSS cloud protection center to perform security checks and protection for container instances. If the agent is not installed, HSS cannot be used.
The core functions of the serverless security agent are as follows:
- Data collection: It collects information about server OSs, processes, software, open ports, and more.
- Detection and defense: It monitors abnormal behaviors, malicious programs, vulnerabilities, and risks on servers, and identifies and blocks intrusions in time.
- Execution: It receives and implements security policies, applies protection settings, and performs scans sent from the HSS console.
- Status synchronization: It synchronizes its own status, asset status, and task execution results to the HSS console.
Differences Between the Server Security Agent, Container Security Agent, and Serverless Security Agent
The server security agent and container security agent are the same software deployed in different ways and used in different scenarios. They have the same code, communication mechanism, and detection capabilities.
The serverless security agent uses a coding system different from the one used by the other two. The detection capabilities of the serverless security agent are also different from them.
For details about the differences, see Table 1.
| Category | Server Security Agent | Container Security Agent | Serverless Security Agent |
|---|---|---|---|
| Deployment location | It can be installed on ECSs, BMSs, third-party cloud servers, and on-premises IDC servers. One agent should be installed on each server. | It can be installed on container hosts (nodes). One agent should be installed on each node. | It can be installed on workload instances. One agent should be installed on each workload instance. |
| Deployment mode |
For details, see Installing the HSS Agent. |
| Inject a hostguard sidecar container template into a workload so that both the service container and hostguard container can run in the pod generated by the workload. The hostguard container can monitor and protect the service containers that coexist with it. |
| Detection capabilities | Its capabilities depend on the edition of the HSS quota bound to a server. You are advised to use the basic, professional, premium, and web tamper protection editions. For details about the capabilities provided by each edition, see Features. | Its capabilities depend on the edition of the HSS quota bound to a container. The container edition is recommended. Only the container edition provides local image security scan, container firewall, container cluster protection, container escape detection, and cluster environment security check functions. For details about the capabilities provided by the container edition, see Features. | Currently, the following protection capabilities are provided: asset stocktaking, container escape detection, process anomaly detection, and real-time process reporting. NOTE: Serverless security is in an open beta test (OBT) and free for now. |
| Scenario | Server protection | Container protection | Serverless asset protection |
What is your overall rating for this page?
Thank you very much for your feedback. We will continue working to improve the documentation.See the reply and handling status in My Cloud VOC.
For any further questions, feel free to contact us through the chatbot.
Chatbot
