Threat Modelling: How to Improve Your Kubernetes Security Posture with Threat Mod...
summary
Presents a reproducible process: start with an architecture analysis (using Microsoft FastTrack for Azure architecture review), then do access control mapping, data-flow and network matrices, logging/monitoring checks and node-recycling procedures, identify gaps like missing jumpbox session recording and unsecured service principals, enforce admission controls with OPA Gatekeeper or Kyverno in deny mode from day one, use MITRE-based Kubernetes Threat Landscape, score threats with DREAD at the end, and explore LLMs to automate pattern recognition and updates.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 1:29Kubernetes overview
- 3:24Cloud security framework
- 7:40Threat modeling basics
- 13:07Structured analysis approach
- 24:00Security control enforcement
- 27:09Methodologies and team effort
- 30:22Future and automation
- 33:45Q&A and conclusion
related talks
38mThreat Modelling Kubernetes: A Lightspeed Introduction
31mThreat Modeling for Kubernetes: Enhancing Security Posture in Complex and Regulat...
21mKnow Your Enemy: Mapping Security Risks Using Threat Matrix for Kubernetes
35mKubernetes Security - Challenge and Opportunity?
39mPiloting Around the Rocks: Avoiding Threats in Kubernetes
22mSecuring Kubernetes
43mKubernetes Security: Attacking and Defending Modern Infrastructure
11mSecuring the Kubernetes Ecosystem