Defending CI/CD against attacks
summary
The talk analyzes attack vectors against CI/CD pipelines, showing concrete examples of what those attacks can achieve and their potential impact. It then explains defensive measures and practical mitigation techniques to protect CI/CD systems.
AI-written summary · about
chapters (17)
- 0:00Introduction
- 1:09CI/CD attack overview
- 2:15Simple rights abuse
- 4:06Secrets leaked via build
- 8:02Runner privileges and limits
- 10:51Host access gained
- 14:50Docker and container attacks
- 17:38Code injected into infra
- 18:20Container escape
- 21:50Build cache attack
- 24:04Security check bypass
- 25:59Runner substitution and duplication
- 27:04Summary and references
- 28:10Q&A 1
- 34:51Q&A 2
- 39:32Q&A 3
- 42:00Q&A 4
related talks
48mCI/CD Security
46mGitLab CI/CD under attack
28mStandard Classification: Threat Modeling the CI/CD Pipeline to Improve Softwar...
38mSecuring your CI/CD Pipeline
41mHow to protect your CI/CD from a Supply chain attack?
32mCI/CD: Top 10 Security Risks
50mWhat Executives Need to Know About CI/CD Pipelines and Supply Chain Security
40mBest Practices for Securing CI/CD Pipelines or How to Get Security Right