How cloud-native applications are helping orgs stay ahead of cybersecurity threats
summary
Explains how Kubernetes, containers, container runtimes and service meshes (Envoy) are used to shrink attack surface by minimizing images, banning privileged containers, securing APIs and locking down registries and CI pipelines so a compromised pod cannot persist or pivot. Claims customers rebuild weekly without downtime, remove secrets from code and rotate them, and achieve 9x faster patching. Recommends microsegmentation, immutable infrastructure and protecting the image pipeline—protect pipeline and registry—and reports these practices reduce insider risk and speed incident recovery.
AI-written summary · about
chapters (13)
- 0:00Introduction and speaker background
- 4:05What is cloud-native?
- 6:36Container security fundamentals
- 11:39Immutable infrastructure benefits
- 13:11Networking and micro-segmentation
- 15:22Securing container images and pipelines
- 19:19Kill chain reduction strategies
- 21:03Twelve-factor apps and security
- 24:56Zero trust and credential rotation
- 27:34Weekly infrastructure rebuilds
- 28:59Faster patching and recovery
- 30:20Ephemeral workloads and incident response
- 31:05Frictionless security collaboration
related talks
32mHacking the Cloud Native Renaissance: Lowering Risk of Kubernetes Adoption
19mHow to Secure Your Kubernetes Clusters
05mWhy cloud-native enterprise security matters
32mNot-So-Spooky Security Strategies
43mKubernetes Security: Attacking and Defending Modern Infrastructure
11mSecuring the Kubernetes Ecosystem
40mCloud Native Security: A New Paradigm for a New World
37mCloud Native Security 101 - Introduction, Workflows and Best practices