DockerCon 2023 - Live Demo_Hardening Against Kubernetes Hacks.pdf
0 likes26 views
The document outlines a live demo by Eric Smalling on hardening Kubernetes against attacks, emphasizing the importance of scanning application code, container images, and Kubernetes configurations to prevent vulnerabilities. It discusses the concept that exploits result from application vulnerabilities and misconfigurations. The document also acknowledges contributions from various individuals and organizations in the Kubernetes security community.
1 of 9
Download to read offline
DockerCon 2023 - Live Demo_Hardening Against Kubernetes Hacks.pdf
- 1. Hardening Against Kubernetes Hacks Live Demo Eric Smalling Sr. Developer Advocate | Snyk.io about.me/ericsmalling
- 2. 2 ERIC SMALLING â Senior Developer Advocate @ Snyk â Based in Dallas/Fort Worth, Texas â 20+ years enterprise software development â 10+ years build/test/deploy automation (CI/CD) â Docker user since 2013 (v0.6) â 2018 Jenkins Ambassador â Docker Captain â CKA, CKAD & CKS Certified
- 3. 3 00 Section Header Exploit = App Vulns + Misconfiguration
- 7. 7 How could we have prevented this? â Scan your application code â Scan your container images â Scan your Kubernetes YAML â Donât trust defaults / Be explicit â Use Network Policies â Use Admission Controls
- 8. 8 Thanks and props to : â Mark Manning ( @antitree ) â Ian Coldwater ( @iancoldwater ) â DuïŹie Cooley ( @mauilion ) â Rory McCune ( @raesene ) â K8s SIG-Security â CNCF TAG-Security â OpenSSF ⊠and many others in the Kubernetes Security community.