Hacker Days: Kubernetes Goat

Welcome to OWASP Bay Area's YouTube!

Enjoy these amazing talks from August meetups by OWASP Bay Area. For more details about past and upcoming meetups, visit the Meetup page: https://www.meetup.com/Bay-Area-OWASP

If you would like to contribute to Hacker Thursday as a speaker or would like to host us, drop a DM at @owaspbayarea on Twitter/Instagram!
------------------------------

In this session Madhu Akula will give his first public introduction to Kubernetes Goat, designed to be an intentionally vulnerable cluster environment to learn and practice Kubernetes security. Madhu will present how to get started with Kubernetes Goat by exploring different vulnerabilities in Kubernetes Cluster and Containerized environments.

Also, we will see the complete documentation and instruction to practice Kubernetes Security for performing security assessments. Also, as a defender we will see how we can learn these attacks, misconfigurations to understand and improve your cloud native infrastructure security posture.

Feel free to check out the project at https://github.com/madhuakula/kuberne...

Speaker Details

Madhu Akula is a security ninja, published author and cloud native security researcher with an extensive experience. Also he is an active member of the international security, devops and cloud native communities (null, DevSecOps, AllDayDevOps, etc). Holds industry certifications like OSCP (Offensive Security Certified Professional), CKA (Certified Kubernetes Administrator), etc.

Madhu frequently speaks and runs training sessions at security events and conferences around the world including DEFCON (24, 26 & 27), BlackHat USA (2018 & 19), USENIX LISA (2018 & 19), O’Reilly Velocity EU 2019, GitHub Satellite 2020, Appsec EU (2018 & 19), All Day DevOps (2016, 17, 18, 19 & 20), DevSecCon (London, Singapore, Boston), DevOpsDays India, c0c0n(2017, 18), Nullcon (2018, 19), SACON 2019, Serverless Summit, null and multiple others.

His research has identified vulnerabilities in over 200+ companies and organisations including; Google, Microsoft, LinkedIn, eBay, AT&T, WordPress, NTOP and Adobe, etc and credited with multiple CVE’s, Acknowledgements and rewards. He is co-author of Security Automation with Ansible2 (ISBN-13:[masked]), which is listed as a technical resource by Red Hat Ansible. Also won 1st prize for building Infrastructure Security Monitoring solution at InMobi flagship hackathon among 100+ engineering teams.