Threat Modelling Kubernetes: A Lightspeed Introduction
summary
Fast primer that shows how to threat‑model Kubernetes end to end: build a data‑flow diagram, map STRIDE and Microsoft threat matrix entries to attack trees, and score real risks like a privileged container breakout (demonstrated in CTF exercises) and misconfigured public clusters. Recommends concrete controls and tools—DFDs, attack trees, detection with Falco and log export, policy tests in the repo that catch broken PodSecurityPolicy after an upgrade, and supply‑chain guardrails (Sigstore/ChainGuard mentioned).
AI-written summary · about
chapters (19)
- 0:00Start
- 4:09What is Threat Modelling?
- 9:39Understand your data case studies
- 18:31Kubernetes Data Flow Diagram
- 19:46Gathering Techniques and Threat Sources
- 21:32STRIDE - Repudiation
- 21:57STRIDE - Information Disclosure
- 23:07Example Attack Tree: carry a briefcase to a locker
- 23:48Attack Trees as code
- 25:25What Can Go Wrong: Workloads
- 25:47What Can Go Wrong: Networking
- 28:34Risk Management
- 29:14Mitigating Risk: Types of Control
- 30:29How to Defend Against our Scoped Attacks?
- 31:47How to Defend: Workloads - Supply Chain
- 32:20How to Defend: Networking
- 33:03How to Choose Controls
- 33:44Ongoing Threat Modelling Responsibilities
- 34:21Mapping Controls to Attack Tree Nodes
related talks
37mThreat Modelling: How to Improve Your Kubernetes Security Posture with Threat Mod...
31mThreat Modeling for Kubernetes: Enhancing Security Posture in Complex and Regulat...
21mKnow Your Enemy: Mapping Security Risks Using Threat Matrix for Kubernetes
33mAvengers Assemble: Threat Modeling Kubernetes Clusters at a...
35mKubernetes Security - Challenge and Opportunity?
39mPiloting Around the Rocks: Avoiding Threats in Kubernetes
43mKubernetes Security: Attacking and Defending Modern Infrastructure
10mLightning Talk: Kubernetes Risk Assessment: Time to go one level deeper