~/moritzsamrock_

Runtime Protection

Runtime Protection: Security controlsSecurity ControlA technical, organizational, or physical measure used to reduce a security risk. that observe or restrict an application or workloadWorkloadAn application, service, process, or task executed on computing infrastructure. while it is executing. Secure use depends on clear boundaries, correct configuration, monitoringMonitoringThe continuous observation of systems, identities, networks, and controls for relevant changes., and a controlled lifecycle.

How it works and where it fits

Runtime Protection is a preventive, detective, or corrective security control. Its effect depends on where it sits in the architecture, which data and decisions it processes, and how it might be bypassed. A control reduces a defined risk but rarely removes it completely, so it should be combined with additional layers of protection.

Practical security relevance

Before deployment, the objective, ownership, coverage, and expected behavior should be defined. Secure defaults, controlled exceptions, logging, and periodic effectiveness tests matter more than installation alone. Operational metrics should expose both blocked or detected activity and gaps, false alerts, and effects on legitimate business processes.

  • Application SecurityApplication SecurityProtects software against vulnerabilities during development, operation, and maintenance.: Protects software against vulnerabilities during development, operation, and maintenance.
  • Endpoint Detection and ResponseEndpoint Detection and ResponseContinuously monitors endpoints and supports detection, investigation, and containment.: Continuously monitors endpoints and supports detection, investigation, and containment.
  • Container SecurityContainer SecurityProtects container images, runtime environments, registries, and orchestration platforms.: Protects container images, runtime environments, registries, and orchestration platforms.
  • MonitoringMonitoringThe continuous observation of systems, identities, networks, and controls for relevant changes.: The continuous observation of systems, identities, networks, and controls for relevant changes.

Related terms