SIG-Honk AMA Panel: Hacking and Hardening in the Cloud Native Garden
Panelat KubeCon + CloudNativeCon North America 2020 Virtual · on Friday, 2020-11-20· at 13:21· Intrado Virtual Event Platform,·
summary
Explains practical red-team and blue-team tactics: start with external network and API-server audit logs, scan configs and cloud credentials, and hunt for privileged containers or mounted docker sockets; use Falco at the syscall layer to tie alerts to containers and combine with cloud API audit trails. Recommends hands-on practice via securekubernetes.com and honkctl CTFs, calls out runtime and architecture differences (x86_64 vs ARM), and flags ebpf and microarchitectural attacks as promising exploration targets.
AI-written summary · about
chapters (8)
- 0:00Introductions and origins
- 2:23Cloud-native security shifts
- 6:36Advice for developers
- 9:52Evaluating cluster security
- 14:15Detecting breaches
- 17:54Assessing project security
- 19:49Developing security intuition
- 24:04Future research and closing
related talks
38mA Treasure Map of Hacking (and Defending) Kubernetes
32mHacking the Cloud Native Renaissance: Lowering Risk of Kubernetes Adoption
19mHacking Kubernetes
43mKubernetes Security: Attacking and Defending Modern Infrastructure
41mIdentifying and Mitigating Cloud and Container Threats- 41mIdentifying and Mitigating Cloud and Container Threats
44mLive Hacking Cloud Architectures
22mSecuring Kubernetes