Threat Modeling for Kubernetes: Enhancing Security Posture in Complex and Regulat...
summary
Proposes an experimental RAG pipeline that generates Kubernetes threat models from a knowledge base of CIS benchmarks, prior models and security reviews, using OpenWebUI + Chroma + F4 (FIFO) SLM, maps findings to STRIDE and MITRE ATT&CK, scores and prioritizes risks, and emits machine-readable JSON with provenance for Git workflows; claims it reduces model creation from two weeks to one or two days while warning of hallucinations and positioning the tool as a draft generator suitable for offline on‑prem deployment.
AI-written summary · about
chapters (15)
- 0:00Introduction
- 1:05Kubernetes security overview
- 3:33Cloud security framework
- 5:39Why threat modeling matters
- 7:05Kubernetes attack surface
- 8:53Threat modeling methodology
- 10:59Architecture analysis frameworks
- 13:25Logging monitoring controls
- 15:08Manual threat modeling challenges
- 15:49Automating threat modeling with SLM
- 19:00Knowledge base for SLM
- 21:05Generating threat models
- 23:15Risk scoring details
- 24:39Success key collaboration
- 25:42Q&A
related talks
37mThreat Modelling: How to Improve Your Kubernetes Security Posture with Threat Mod...
38mThreat Modelling Kubernetes: A Lightspeed Introduction
33mAvengers Assemble: Threat Modeling Kubernetes Clusters at a...
39mPiloting Around the Rocks: Avoiding Threats in Kubernetes
26mKubernetes Risk Assessment: Time to Go One Level Deeper
46mThreat modeling is on the rise
21mKnow Your Enemy: Mapping Security Risks Using Threat Matrix for Kubernetes
30mAgile Threat Modeling with Open-Source Tools