Runtime Security in the Cloud Native World
summary
Runtime security focuses on observing and protecting running workloads and detecting attacks missed by preflight checks, with a concrete example: Falco inspects Linux system calls to apply rule sets that alert on unexpected behaviors (for example, a container writing to a protected directory) and can ingest Kubernetes audit events and cloud logs when host access isn’t available. The talk recommends installing Falco on hosts so detection survives cluster compromise and explains zero‑day detection use cases and alerting integrations.
AI-written summary · about
chapters (4)
related talks
05mProject Lightning Talk: Detect and Respond to Threats in Your Cloud Infrastructure With Falco
29mDetecting cloud and container threats
50mRuntime Security for Containers
25mContainer Runtime Security with Falco
05mSponsored Keynote: Cloud Security’s Hidden Force: Threat Detection
01h 33mCloud Native Runtime Security with Falco
24mRuntime Security: Challenges & Solution Space
38mIntro: Falco