KubeScope for the Extraordinary World of Containers
summary
KubeScope is a containerized API server proxy that inspects every HTTP REST request to Kubernetes, extracts URL parameters, headers and JSON payloads, and builds per-endpoint profiles using machine learning and rule-based detection. It implements three model types—unknown-URL, invalid-payload (script/file checks), and statistical/frequency anomalies—and flags abnormal access. The prototype sits between clients and the API server, successfully detects a stolen service-account token being abused and identifies short-burst DDoS-style request floods in the demo.
AI-written summary · about
chapters (6)
- 0:00Start
- 0:53Introductions
- 10:43Unknown Access Models
- 11:13Invalid Ss Models
- 12:22Frequency Models
- 17:42Device Attack
related talks
30mA Monitoring Platform for Kubernetes Cluster Security
37mProactive Kubernetes Security: Anomaly Detection and Runtime Alertin...
30mDIY Pen-Testing for Your Kubernetes Cluster
42mAttacking and Defending Kubernetes Cluster: Kubesploit vs KubiScan
32mKubeCapture: A Live Hacking Showcase on Kubernetes Security
25mAll Your Containers Are Belong to Us
36mKubo - Your Gateway Drug to Cloud-Native - Cornelia Davis, Pivotal
12mSecuring the Kubelet API: Why is it important?