Containerizing your Security Operations Center
summary
Claim: a pluggable cloud-based Security Operations Center runs entirely on containers so teams stop wrestling with local installs and PDFs and start shipping reproducible tooling. Concrete tools: Docker images for Metasploit, WebGoat, ThreadFix plus MySQL persistent volumes, Encore/Clair scanning, and Vault for secrets. Deployment: Kubernetes cluster on GCE (two-node demo), services with load balancers, replicas scaled (example from 1 to 6), persistent 10GB volumes, and automated jobs for scanners. Outcome: a working POC running in Kubernetes that scales, centralizes alerts, and reduces setup time.
AI-written summary · about
chapters (19)
- 0:00Start
- 6:07Step 3: Install Homebrew
- 6:30Step 5: Initialize the DB
- 8:16Traditional Virtual Machines
- 8:39Docker Infrastructure
- 10:00Install Docker
- 10:10Profit
- 10:21Dockerfile
- 12:23Security is Catching on
- 13:47K8S - A Gentle Introduction
- 24:17K8S Security Model
- 24:55Authentication
- 25:35Authorization
- 26:48Role Resource Types
- 27:24Admission Controllers
- 28:44K8S Secret Object
- 29:41Buyer Beware
- 34:321 apiVersion: extensions/vibetal 2 kind: Deployment 3 metadata
- 42:00Questions?
related talks
25mContainers. Microservices. Cloud. Open Source. Fantasy or Reality for Enterprises?
37mAchieving High Security at Scale with Microservices
46mWhat Security People Want: Making DevSecOps Happen with Containers
38mA Security State of Mind: Compliance and Vulnerability Audits for Containers
56mThe Future of AppSec is Cloud-Native
43mContainer Security: So Many Options, Use Them All!
26mCyber Engineering with Containers
29m9-1-1: Cloud Native - Kubernetes For Public Safety Systems