Assured, Resilient Containerization and Orchestration Solution (ARCOS)

Both military and civilian sectors increasingly rely on containerization and orchestration technologies to enhance the performance, portability, and adaptability of critical systems. However, current container solutions lack the high assurance and robust security isolation required for operational deployments, particularly in demanding environments like cross-domain solutions, microservices within aircraft flight control systems, and multi-domain connectivity. This security gap presents a significant barrier to realizing the full potential of these technologies.The proposed Assured, Resilient Containerization and Orchestration Solution (ARCOS) revolutionizes container security by leveraging the extended Berkeley Packet Filter (eBPF) to provide a dynamic, high-assurance protection layer. ARCOS utilizes eBPF plugins to monitor both kernel and user-space runtime activities, enabling granular control and real-time security enforcement. This innovative approach allows ARCOS to dynamically adapt to changing security needs without requiring Operating System (OS) recompilation.