Avengers Assemble: Threat Modeling Kubernetes Clusters at a...
summary
Shows a real EKS incident where a RoleBinding grants cluster-system:anonymous → cluster-admin allowing kubectl port‑forward to read API‑server metadata and enabling SSRF that exposes secrets. Describes building an open source Threat Composer that generates STRIDE-style threat statements, maps to MITRE ATT&CK tactics, and exports a threat/control matrix. Lists concrete mitigations: tighten RBAC with audit‑driven fine‑tuning, require tokenRequest for controllers, disable automountServiceAccountToken, use policy‑as‑code (OPA/CNA) and scanners like Polaris for cluster risk scoring.
AI-written summary · about
chapters (15)
- 0:00Threat modeling Kubernetes
- 1:45Information security principles
- 4:14Threat modeling in design
- 7:03Threat modeling team
- 9:10Kubernetes incident analysis
- 11:16Building threat statements
- 13:46Threat Composer tool
- 15:11MITRE ATT&CK vectors
- 16:57Kubernetes API security
- 18:44Threat and control matrix
- 21:32Broken access control mitigation
- 24:44Threat detection measures
- 26:30Incident response measures
- 27:10Threat Composer demo
- 31:46Key takeaways and access
related talks
38mThreat Modelling Kubernetes: A Lightspeed Introduction
31mThreat Modeling for Kubernetes: Enhancing Security Posture in Complex and Regulat...
01h 37mLines of Defence – Securing Your Kubernetes Clusters
22mSecuring Kubernetes
35mKubernetes Security - Challenge and Opportunity?
19mKeynote: Hello From the Other Side: Dispatches From a Kubernetes Attacker
37mKubernetes to Cloud Attack Vectors: Demos Inside
54mUnderstanding and Mitigating Privilege Escalation Threats in Kubernetes