![[ko-KR] Safe Kubernetes Environment with AppArmor](https://img.youtube.com/vi/BFnrd1OJkgk/mqdefault.jpg)
[ko-KR] Safe Kubernetes Environment with AppArmor
AppArmor를 활용하여 Kubernetes 기반 컨테이너 인프라 환경을 안전하게 구축하는 방법 학습. 다양한 예시를 통해 효과적인 애플리케이션 제어 방법 탐구.
Securing Secrets in Distributed Systems Using Enclave Technology
Discover how Intel SGX technology and AppArmor safeguard cryptographic secrets across distributed ecosystems, with practical applications in 5G networks and StarlinkX use cases.
Towards the Hardened Cloud-Native Cornerstone: Container Runtime Protection
Explore advanced container runtime protection techniques, from kernel-aided to hardware-assisted solutions, addressing security risks and privacy concerns in cloud-native environments.
DockerSlim and Kyverno - Enhancing Kubernetes Workload Security
Explore how DockerSlim and Kyverno enhance Kubernetes workload security through container image minification, automated AppArmor and SecComp profiles, and simplified cluster security management.
Building the Largest Working Set of AppArmor Profiles
Discover how to build an extensive set of AppArmor profiles for enhanced Linux security. Learn about challenges, security architecture, and integration testing in this comprehensive project.
Journey from Early Linux to Snap Packaging and WSL - Ubuntu Summit 2022
Explore a developer's Linux journey, from early experiences to Snap packaging and WSL2 innovations, highlighting unique capabilities and the evolution of Linux-native workflows on Windows.
Secure the Linux Kernel with eBPF Linux Security Module
Explore eBPF Linux Security Module for implementing granular security policies in the Linux kernel without configuration or kernel modules. Learn to leverage BPF LSM hooks for MAC and DAC policies.
Building the Largest Working Set of AppArmor Profiles
Explore the development of an extensive AppArmor profile set, covering challenges, security architecture, program selection, and integration testing for enhanced Linux system protection.
Binary Policy with IMA and AppArmor for Linux Workstations
Explore Google's innovative approach to Linux workstation security using IMA signatures and AppArmor for binary policy enforcement, addressing challenges in large-scale implementation.
Improving Containers Isolation in Kubernetes
Explore Kubernetes Security Profiles Operator for enhanced container isolation, focusing on SELinux, seccomp, and AppArmor. Learn how eBPF simplifies custom profile creation and gain insights from Adobe's implementation.
AppArmor Overview and Recent Developments
Explore AppArmor security project's model, recent developments, and challenges with Canonical's John Johansen. Learn about its use, direction, and open issues in Linux security.
Protect Containerized Applications with System Call Profiling
Explore system call profiling for containerized application security. Learn to develop accurate profiles, monitor runtime behavior, and detect anomalies with low performance overhead and false positives.
What Have Syscalls Done for You Lately? - Exploring Container Security
Explore syscalls, their role in container setup, and how to enhance deployment security by limiting syscall usage. Learn about seccomp, AppArmor, and microservices security advantages.
Unprivileged Access Control in AppArmor
Explore AppArmor's extension for unprivileged access control, including challenges, changes, and API development for enhanced application security and sandboxing capabilities.
KubeArmor: Cloud-Native Runtime Security Enforcement
Explore KubeArmor: a runtime security system for cloud-native environments. Learn how it restricts pod, container, and node behavior using Linux security modules and generates rich alerts with eBPF.
On the Way to Safe Containers - Security and Resource Management in LXC and LXD
Explore container security with LXC and LXD, focusing on user namespaces, AppArmor, seccomp, and resource limitations. Learn about safe system containers and potential vulnerabilities in VM-like environments.
Trace Me if You Can - Bypassing Linux Syscall Tracing
Novel vulnerabilities and exploitation techniques to bypass Linux syscall tracing, even with security measures like seccomp, SELinux, and AppArmor in place. Demonstrates how user-mode programs can evade detection.
AppArmor
Explore AppArmor's security features, development process, and integration with LxD, guided by Canonical security expert John Johansen.
Kubernetes Security 101
Comprehensive overview of Kubernetes security layers, covering sysadmin, developer, and security team perspectives. Explores hardening guides, container security, deployment strategies, and collaborative approaches.
Create Secure Production Environment Using Docker
Learn to create and maintain secure Docker containers for production environments, covering risks, best practices, and essential techniques for robust deployment.
CRI-O - Deep Diving into the Security
Explore CRI-O's security principles, container workload securing practices, and runtime application techniques. Learn about SELinux, AppArmor, seccomp, Linux capabilities, and namespace isolation for enhanced Kubernetes security.