Cloud Native
Security Talks
RSS

KubeCon Europe 2018

Kubernetes Runtime Security: What Happens if a Container Goes Bad?

Jen Tong & Maya Kaczorowski, Google

Abstract

Kubernetes security typically focuses on infrastructure: verifying that configuration is safe, and your deployment has no known issues. In this talk Jen and Maya will focus on a different aspect: runtime security. Runtime security is about mitigating damage done when part of your deployment is compromised. They’ll start with an overview of common runtime security concerns, and discuss how they change as you move to containers and Kubernetes. Next, they’ll highlight existing features that help you respond to these risks, and explore popular tools to detect and control compromises. They’ll finish off with a demo that shows these techniques in action as they protect a web application. You’ll leave with an understanding of how to plan ahead to minimize impact, and how to respond to events when they happen.

More from KubeCon Europe 2018

Open in the index →
  1. The Route To Rootless ContainersEd King, Pivotal & Julz Friedman, IBM 2018-05-02
  2. Securing your Kubernetes Delivery Pipelines with Notary and TUFLiam White & Michael Hough, IBM 2018-05-02
  3. Improving your Kubernetes Workload Security with Hardware VirtualizationFabian Deutsch, Red Hat & Samuel Ortiz, Intel 2018-05-02
  4. Establishing Image Provenance and Security in KubernetesAdrian Mouat, Container Solutions 2018-05-02
  5. Completely Securing the Software Supply Chain using Grafeas + in-totoLukas Puehringer, NYU & Wendy Dembowski, Google 2018-05-02
  6. No video Cloud Native Identity ManagementAndreas Zitzelsberger, QAware GmbH & Andrew Jessup, Scytale Inc. 2018-05-02
  7. OPA: The Cloud Native Policy EngineTorin Sandall, Styra 2018-05-03
  8. Good Enough for the Finance Industry: Achieving High Security at Scale with Microservices in KubernetesZachary Arnold & Austin Adams, Ygrene Energy Fund 2018-05-03
  9. Entitlements: Understandable Container Security ControlsJustin Cormack & Nassim Eddequiouaq, Docker 2018-05-03
  10. Container Isolation at Scale (Introducing gVisor)Dawn Chen & Zhengyu He, Google 2018-05-03
  11. Case Study: How Containers Makes Security and Compliance Instantly EasierJohn Morello, Twistlock 2018-05-03
  12. Applying Least Privileges through Kubernetes Admission ControllersBenjy Portnoy, Aqua Security 2018-05-03
  13. TL;DR NIST Container Security StandardsElsie Phillips, CoreOS 2018-05-04
  14. Secure PodsTim Allclair, Google 2018-05-04
  15. Multi-Tenancy in Kubernetes: Best Practices Today, and Future DirectionsDavid Oppenheimer, Google 2018-05-04
  16. From Kubelet to Istio: Kubernetes Network Security DemystifiedAndrew Martin, ControlPlane 2018-05-04
  17. A Hacker's Guide to Kubernetes and the CloudRory McCune, NCC Group PLC 2018-05-04