Cloudy with a Chance of Zero Trust: Navigating Security in the...
summary
Neuvector is presented as a fully open source container security platform that discovers runtime behavior, learns allowed patterns, and enforces policies; a recorded demo shows a simple pinging container blocked when switching from monitor to protect and CVE‑matching images and plain‑text env vars blocked by emission control rules. It ships as a Helm chart with a Rancher extension, runs on ARM and Raspberry Pi, current release 5.3.1, and recommends discover then monitor before flipping to protect because protect mode is unforgiving.
AI-written summary · about
chapters (12)
- 0:00Zero Trust in cloud native
- 1:02Trust and security in software
- 2:47Zero Trust principles
- 3:51Ten commandments of Zero Trust
- 5:56Securing Kubernetes environments
- 6:37NeuVector for container security
- 8:40NeuVector Discover and Monitor demo
- 10:06NeuVector Protect mode demo
- 11:30NeuVector policy enforcement
- 13:47NeuVector deployment options
- 15:16NeuVector learning resources
- 16:42Q&A
related talks
46mZero Effort Zero Trust K8s Security for Blocking Zero Day Attacks
35mAutomating Zero-Trust for Cloud Native Applications
53mProtect against unknown security vulnerabilities
25mFoster Secure Innovation with Your Kubernetes Platform
29mZero-Trust Containers: Rethinking Security in the Age of Ephemeral...
14mThe zero trust model applied to containers!
06mSponsored Keynote: Kubernetes is the Perfect Platform for Enforcing Zero Trust Security
28mGet true zero-trust runtime security in Kubernetes with SUSE NeuVector