Kubernetes Cluster Guardrails Using Open Policy Agent and Gatekeeper - Mirantis Labs Tech Talks
Explore Open Policy Agent and Gatekeeper for enforcing Kubernetes cluster policies. Learn implementation, common policies, custom policy creation, and see a live demo.
Authentication & Authorization in Kubernetes - Mirantis Labs Tech Talks
Explore Kubernetes security: authentication, authorization, and RBAC. Learn architecture basics and see a live demo on implementing role-based access control for enhanced cluster protection.
Putting Hackers Breaching Your Cluster in Automatic Quarantine
Explore automatic isolation techniques for breached apps in Kubernetes clusters, enhancing overall security and minimizing potential damage from hacker intrusions.
Exploiting and Fixing Vulnerabilities - A Gamified Approach
Discover how gamification and CTFs make application security tangible for developers in cloud-native environments, addressing risks across code, dependencies, containers, and clusters.
Hadoop Safari: Hunting for Vulnerabilities
Explore Hadoop security vulnerabilities, attack vectors, and tools for accessing data in Big Data clusters. Learn about design flaws and practical techniques to exploit weaknesses in Hadoop infrastructure.
Three Surprising Kubernetes Networking Features and How to Defend Against Them
Explore surprising Kubernetes networking vulnerabilities and learn effective defense strategies to protect your clusters from potential attacks and compromises.
How Attackers Use Exposed Prometheus Servers to Exploit Kubernetes Clusters
Explore how attackers exploit exposed Prometheus servers to gather sensitive information for fingerprinting Kubernetes clusters, and learn strategies to secure your infrastructure against these threats.
Trampoline Pods: Node to Admin Privilege Escalation in Popular Kubernetes Platforms
Explore Trampoline Pods: powerful pods that can enable cluster takeover if compromised. Learn about detection, exploitation, and mitigation strategies for this critical Kubernetes security vulnerability.
User Namespaces in Kubernetes: Running as "Root" Without Root Privileges
Explore user namespaces in Kubernetes: enhance security, mitigate CVEs, and isolate container users from host users. Learn implementation, benefits, and future developments for safer container workloads.
Kubernetes Security: Navigating Real-World Challenges
Explore real-world Kubernetes security challenges and learn foundational strategies to protect clusters using open-source tools, covering diverse security considerations beyond basic vulnerability scanning.
Pod Security Policy is Dead, Long Live... - Exploring Kubernetes Security Alternatives
Explore alternatives to Pod Security Policy for Kubernetes security, addressing its deprecation and future-proofing your cluster's security measures.
The Insider Threat: Third-Party Applications in Your Cluster
Explore vulnerabilities in third-party Kubernetes applications, their critical impact, and actionable steps to enhance cluster security. Learn from real-world examples and protect your infrastructure.
Hacking and Defending Kubernetes Clusters - Live Demonstration
Live demonstration of Kubernetes cluster attacks and defenses, exploring vulnerabilities, mitigation strategies, and practical security techniques for effective threat modeling and protection.
Prevent Embarrassing Cluster Takeovers - Detecting and Mitigating Configuration Risks
Discover how to secure Kubernetes clusters against common misconfigurations and vulnerabilities using Kubeaudit, an open-source scanner that detects and mitigates risks without hindering developer productivity.
Implementing an Auditable Access Control Strategy Using Cluster Certificate Authority Rotation
Learn how to implement a zero-downtime strategy for rotating cluster certificate authorities and downstream certificates in Kubernetes, ensuring secure and auditable access control.
5 Key Steps to Securing a Default Kubernetes Cluster
Learn essential steps for enhancing security in a default Kubernetes cluster, covering crucial aspects to protect your containerized applications and infrastructure.
Journey to Cloud-Native, Kubernetes and Securing Clusters
Explore the journey into Cloud-Native technologies, including Linux, containers, Kubernetes, and cluster security. Gain insights for newcomers, especially from underrepresented backgrounds in tech.
Protecting Kubernetes Clusters When Administrators Quit - Revoking Access and Best Practices
Explore strategies for revoking access to Kubernetes clusters when administrators or users leave, addressing real-world security challenges and best practices for minimal disruption.
Securing Kubernetes Clusters: A Collaborative Approach to Self-Assessment
Explore the collaborative security assessment of Kubernetes Cluster API, covering threat modeling, global teamwork challenges, and lessons for future sub-project evaluations across the Kubernetes ecosystem.
Kubernetes Security After Pod Security Policies Removal
Explore Kubernetes security post-PSP removal, comparing Pod Security and external Admission Controllers for maintaining cluster security in the evolving landscape.
Continuous Kubernetes Security - Best Practices and Risk Mitigation
Explore Kubernetes security landscape, risks, and best practices. Learn to configure least-privilege access, isolate workloads, and maintain secure configurations across cluster rebuilds.