ControlPlane & DevSecCon London Meet-up

Join us for an epic collaboration between DevSecCon London and ControlPlane, bringing you a thrilling KubeconEU throwback! Prepare to be captivated by insightful talks delivered by industry luminaries Andrew Martin, Ashley Ward, and Yannis Folias.

Andrew Martin

I'll Let Myself In: Kubernetes Privilege Escalation Tactics

Penetration testing Kubernetes shouldn't be easy, but we can make it so! Rogue SRE insider threat? Platform developers with grudges? Hostile internet citizens? Discover how to escalate your privilege, attain persistence, wreak cluster-wide havoc, and hide any trace of your activity in this enthralling exploration of cloud native security! Join us for a learner-friendly yet advanced dive into the myriad ways both trusted and unprivileged users can exploit Kubernetes. We'll guide you through best practices for detection and demonstrate the most cost-effective and efficient strategies for securing your clusters.

• Understand Kubernetes vulnerabilities that SREs, security teams, and pentesters should know — and techniques to mitigate them
• Explore edge-cases of component abuse, and cruel and unusual interactions between components
• Identify various adversary levels and tailor your defences accordingly
• Learn the most economical and rapid strategies for robust cluster security

Ashley Ward

Brewing the Kubernetes Storm Center: Open Source Threat Intelligence for the Cloud Native Ecosystem

The process of threat modelling can seem an abstract art, especially regarding scoring and prioritisation. We show how a non-expert can practically validate threat modelling predictions and quantify the relative risk of different attack vectors. After a general introduction, we propose an extensible method that, based on a given threat model: a) generates a Kubernetes-based environment with embedded trip-wires, enabling the detection of real attacker paths without interference, b) exposes these simulated environments to the wild to observe quantitative threat intelligence in action, and c) informs cost-effective decisions for a defensive team. We discuss caveats, emphasise the critical role of automation in scalability across diverse threat models, and live showcase one quantified attack tree utilising Tetragon. To benefit the Kubernetes ecosystem, this accessible framework can be crowd-sourced into an open source threat intelligence capturing network for risk exposure quantification.

Yannis Folias - Exploring the Risks of Running Unvetted Binaries in Cloud Native Environments

Throughout this talk, we will dive into one of the most critical yet often overlooked aspects of modern software development: the execution of insecure binaries downloaded from the internet. Developers frequently rely on third-party libraries, executables, and container images without fully considering the potential security implications, which can lead to vulnerabilities in cloud native environments. In more detail, we will examine the root causes behind this problem and discuss why it has become a common practice in software development. We will demonstrate the potential impact of using unvetted binaries, including security breaches, compliance risks, and operational disruptions. Moreover, we will equip attendees with a set of actionable strategies to mitigate this issue and enhance the security posture of their cloud native deployments.

Join the Community!

If you haven't joined the Discord community, please do so! You can find us on Discord HERE