Methods and systems for securing containerized applications

1. A method for securing data access by containerized applications, the method comprising:

intercepting, by a first container executing on a first computing device and associated with a containerized application in a second container executing on the first computing device, a first Internet Protocol (IP) request from the containerized application;

determining, by the first container, that the first IP request is addressed to a second computing device executing a resource that the containerized application is authorized to access;

encrypting, by the first container, a payload portion of the first IP request;

transmitting, by the first container, to the resource, a second IP request with the encrypted payload portion;

receiving, by the first container, from the resource, a response to the second IP request;

requesting, by the first container, from a third computing device, a cryptographic key for decrypting the response to the second IP request;

decrypting, by the first container, with the cryptographic key, a payload portion of the response; and

transmitting, by the first container, to the containerized application, the decrypted payload portion of the response.

2. The method of claim 1 further comprising providing, by the first container, an attestation certificate to the third computing device with the request for the cryptographic key.

3. The method of claim 1 further comprising providing, by the first container, a shared secret to a third computing device with the request for the cryptographic key.

4. The method of claim 1 further comprising:

receiving, by the first container, a first signature associated with the containerized application;

accessing, by the first container, a registry of containerized applications, the registry including a second signature for the containerized application;

determining, by the first container, whether the first signature and the second signature satisfy a threshold level of similarity; and

attesting, by the first container, to the resource, a level of validity of the containerized application making the first IP request.

5. A method for securing data transmission by containerized applications, the method comprising:

intercepting, by a first container executing on a first computing device and associated with a containerized application in a second container executing on the first computing device, a first Internet Protocol (IP) request from the containerized application, the request including a request to transmit data to a second computing device;

determining, by the first container, that the containerized application is authorized to access a resource executed by the second computing device;

encrypting, by the first container, a payload portion of the IP request; and

transmitting, by the first container, to the resource, a second IP request with the encrypted payload portion.

6. A system for securing data transmission by containerized applications comprising:

a first computing device executing a first container and a second container, the first container associated with a containerized application in the second container, the first container further comprising:

means for intercepting a first Internet Protocol (IP) request from the containerized application;

means for determining that the first IP request is addressed to a second computing device executing a resource that the containerized application is authorized to access;

means for encrypting a payload portion of the first IP request;

means for transmitting, to the resource, a second IP request with the encrypted payload portion;

means for receiving, from the resource, a response to the second IP request;

means for requesting, from a third computing device, a cryptographic key for decrypting the response to the second IP request;

means for decrypting, with the cryptographic key, a payload portion of the response; and

means for transmitting, to the containerized application, the decrypted payload portion of the response.