Harder than You Think: Native Security in Kubernetes
summary
Slides analyze Kubernetes CVE feeds (Kubernetes feed, NIST and Metri) and script the intersections, producing 55 overlapping CVEs from counts of about 60 / 296 / 324 respectively. Timeline shows security features added since 2014—RBAC, NetworkPolicies, Ingress, encryption-at-rest—and emphasizes privilege escalation as a recurring impact and many high-severity reports. Data tooling includes handcrafted scripts after AI-assisted parsing failed (bad aggregations), and the narrative ties each CVE to the concrete feature change that fixed or mitigated it.
AI-written summary · about
chapters (12)
- 0:00Introduction
- 3:14Kubernetes security challenges
- 8:33Kubernetes database vulnerabilities
- 10:40Kubernetes security evolution
- 14:28Key Kubernetes security features
- 17:36Network policies and threats
- 19:02Ingress and encryption
- 21:26Threat modeling basics
- 22:28Vulnerability trends and challenges
- 24:57AI in Kubernetes security
- 26:21Security versus usability
- 27:25Conclusion
related talks
35mKubernetes Security - Challenge and Opportunity?
22mSecuring Kubernetes: Best Practices for DevSecOps in the Cloud-Native Era
27mWhat Doesn’t Kill You Makes You Stronger: The Vulnerabilities Th...
36mThe Devil in the Details: Kubernetes’ First Security Assessment
26mBoost your security and resiliency in Kubernetes
43mKubernetes Security: Attacking and Defending Modern Infrastructure
33mKubernetes Security: Horror Stories to Help Secure Your Cluster
27mSurviving Day2 : Picking the Right Tool To Secure Your Kubernetes Habitat