Скачать или смотреть sec4dev 2021 Kubernetes Security: Attacking and Defending K8s Clusters - Magno Logan

Kubernetes Security: Attacking and Defending K8s Clusters

This presentation aims to talk about different attack scenarios leveraging Kubernetes clusters. We'll dig deeper into a real world attack scenario using real world applications to demonstrate different ways attackers and malicious users can use to exploit your cluster and the applications running on it. After that we'll provide some best practices to securing your cluster based on the scenarios and on the CIS Benchmarks for Kubernetes. We'll show how to use RBAC, to enable audit logs for better visibility, and we'll set up some network policies to avoid communication between pods and prevent any lateral movement from attackers.

Magno Logan

Information Security Specialist
Magno Logan works as an Information Security Specialist for Trend Micro Cloud and Container Security Research Team. He specializes in Cloud, Container and Application Security Research, Threat Modelling, Red Teaming, DevSecOps, and Kubernetes Security, among other topics. He has been tapped as a resource speaker for numerous security conferences around the globe including Canada, USA, Portugal and Brazil. He is also the founder of JampaSec and a member of the CNCF SIG-Security team.

Check out our website: https://sec4dev.io/​
More free content on our sec4dev Youtube channel!
More security trainings: https://www.sba-research.org/professi...
The sec4dev Conference and Bootcamp is powered by SBA Research: https://www.sba-research.org/