CloudFit Software, LLC announced their second-place finish in the annual Intelligence and National Security Summit’s 2021 Epic App Challenge. The annual contest provides opportunities for corporate and individual contestants to showcase their knowledge and skill in front of thought leaders and experts in the Intelligence community.
According to the summit’s website, increased cyber security attacks prompted this year’s Epic App challenge to focus on developing solutions that increase national security technology. The applications could include custom software, security techniques, and digital forensics.
The CloudFit team, made up of Damian Miller, Sam Johnson, Matthew Barnes, and Karch Frankenfield, developed a protective solution leveraging Kubernetes clustering technology. With this year’s challenge being sponsored by Microsoft Federal, CloudFit also focused their efforts on using as many Microsoft products as possible.
During development, the team found that Microsoft Defender can protect and monitor a Kubernetes cluster that runs on Azure, which lead them to focus on a specific malware (Crypto Mining Malware) as their basis against which they defended their cluster. From there, they built a CFS (CloudFit Software) Input as a docker image to enforce the Microsoft Defender for Kubernetes and made sure it was continuously running. They then picked up the alerts in the Security Center and sent them to CFS. They then had a shell script reach out to CFS to get the alert information and kill the pod that was running the crypto mining software.
The four steps taken to achieve this were:
- Utilize a highly available AKS cluster to run a docker image enforcing Defender for Kubernetes.
- Leverage already existing alerts built into Azure Security Center for automation.
- Send alerts through our own (CloudFit) software (running in the AKS cluster).
- Pick up those alerts with a shell script and then kill the malicious container running in the environment.
At the close of the project, the CloudFit team delivered a 20-minute presentation of their solution and was awarded second place, which was a special honor considering the competition included many storied companies with centuries of experience and billion dollar revenues under their belt.
“I was incredibly proud to be able to participate in a project that I knew not only would benefit CloudFit and our customers, but also the intelligence community as well,” Barnes said. “I can’t wait to see where we can take this project in the future.”
“It was an honor to represent CloudFit in the competition and take second place. I’m looking forward to doing it again next year and shooting for first,” Miller said.
“We had a great time doing this challenge and are extremely proud to get CloudFit’s name out there at such a big platform as the Intelligence and National Security Summit,” Johnson said.