Prepare to Be Boarded - A Tale of Kubernetes Plunder and Cryptobooty
Explore Kubernetes security vulnerabilities and cryptojacking risks in cloud environments, with insights on detection, prevention, and real-world attack scenarios.
Essential-8 Security in Practice with Kubernetes
Implementing Essential-8 security for large-scale data processing on Kubernetes. Balancing open-access needs with government security requirements. Covers infrastructure, deployments, network filtering, and incident response.
How to Secure Your Node.js Containers on Kubernetes With Best Practices
Discover best practices for securing Node.js containers on Kubernetes, covering cluster protection, OIDC implementation, and application-specific security measures for robust DevOps deployments.
Getting Started With Cloud Native Security
Comprehensive tutorial on Kubernetes security basics, covering threat modeling, attack vectors, and practical techniques for securing deployments using open-source tools and best practices.
Advanced Persistence Threats - The Future of Kubernetes Attacks
Explore advanced Kubernetes attack techniques, including pod mutation, data exfiltration, and shadow control planes. Learn detection and prevention methods for these sophisticated threats.
Threat Modelling - Securing Kubernetes Infrastructure & Deployments
Explore secure Kubernetes architecture, threat modeling, and defense-in-depth strategies for regulated environments. Learn real-world examples, compliance standards, and advanced mitigations for multi-tenant security.
Hey, Did You Hear About This New CVE? - A Vulnerability Response Playbook
Develop a vulnerability response playbook for Kubernetes infrastructure, covering preparation, mitigation, and cleanup strategies for complex security issues using tools like audit logs and network policies.
The Common Configuration Scoring System for Kubernetes Security
Explore KCCSS, an open-source framework for assessing Kubernetes workload risks. Learn how it calculates scores, its implementation in kube-scan, and best practices for securing K8s applications.
Uncharted Territories - Discovering Vulnerabilities in Public Helm Charts
Explore vulnerabilities in public Helm Charts, examining security considerations for both Helm as a tool and individual charts. Learn about CNCF's security investments and their impact on Kubernetes ecosystem.
Kubernetes Attack and Defense - Inception-Style
Explore Kubernetes security through a multi-layered attack scenario, including update poisoning, service interception, and cloud API exploitation. Learn defensive strategies using OPA/Gatekeeper.
Pod Security as an Afterthought
Explore tools for implementing Kubernetes security measures retrospectively, including kube-psp-advisor, Inspektor Gadget, and oci-seccomp-bpf-hook, to enhance pod security in existing deployments.
The Least Privilege of Kubernetes
Explore Kubernetes security: least privilege principle, RBAC, and workload restrictions. Learn to implement access controls and security mechanisms for enhanced system protection.
Putting an Invisible Shield on Kubernetes Secrets
Explore TEE-based solutions for enhancing Kubernetes secrets protection, covering implementation, transparency, and practical experiences from Alibaba's deployment.
SIG-Honk AMA Panel - Hacking and Hardening in the Cloud Native Garden
Expert panel explores hacking techniques and security hardening strategies for cloud-native infrastructure, offering insights on protecting Kubernetes clusters and distributed systems.
Admission Control, We Have a Problem
Hands-on exploration of Kubernetes Admission Controllers, focusing on API security, control plane architecture, and extending Kubernetes functionality through practical implementation.
Everything You Should Be Doing, But Aren’t - DevSecOps for K8s Workflows
Comprehensive guide to implementing DevSecOps in Kubernetes workflows, covering application security, threat detection, and governance as code with live demonstrations using CNCF projects.
Hardening Multi-Cloud Kubernetes Clusters as a Service
Insights on securing multi-tenant Kubernetes clusters across cloud providers, addressing information leakages and implementing hardening measures for enterprise-scale operations.
Isolate the Users! Supporting User Namespaces in K8s for Increased Security
Explore user namespaces in Kubernetes for enhanced security, focusing on isolating processes, mitigating risks, and addressing challenges in implementation.
Hacking into Kubernetes Security for Beginners
Explore Kubernetes security essentials through live exploits. Learn about RBAC, admission control, and vulnerabilities in Kubernetes, Linux, and dependencies. Gain practical knowledge for securing your clusters.
Uncovering a Sophisticated Kubernetes Attack in Real-Time
Explore real-time detection of sophisticated Kubernetes attacks using eBPF technology, gaining insights into network and process-level visibility for enhanced cluster security.
CSI Volume Attacks – The SRE Strikes Back
Explore CSI security, Kubernetes protection, and storage protocols. Learn to safeguard data from unauthorized access with demos on volume lifecycle, pod policies, and file system permissions.