How to lose a container in 10 minutes
summary
Claim: spinning up containers and k8s clusters and leaving them exposed will get them pwned quickly. Experiment actually spins real containers on a cloud host, left open to the internet, opens firewall rules, and monitors with psad logs. Result: attacks appear (scans, SQLi attempts, Bitcoin miners) but did not get owned in 10 minutes — some targets take days or weeks. Useful details: which images were used, which defaults were insecure, which protections slowed attackers, and what finally showed compromise.
AI-written summary · about
chapters (7)
- 0:00Introduction
- 5:32Data protection
- 10:27Container security
- 18:19Shifting left
- 20:43My experiment
- 24:01Conclusion
- 26:48QA
related talks
34mHow to Lose a Container in 10 Minutes
38mThree Years of Lessons Running Potentially Malicious Code Inside Containers
35mContainers Attack and Defense
39mInsecure Containers? Continuous Defense Against Open Source Exploits
28mWhere Are All of the Container Breaches?
29mKubernetes Security: Attacking and Defending K8s Clusters
41mIdentifying and Mitigating Cloud and Container Threats
29mZero-Trust Containers: Rethinking Security in the Age of Ephemeral...