Hacking & Defending Kubernetes Clusters: We'll Do It LIVE!! - Fabian Kammel & James Cleverley-Prance

Ever wondered about the security of your own Kubernetes cluster, but new to Kubernetes security and not sure where to start? In this talk Fabian and James will, via a series of live demos, demonstrate both common attacks and offensive techniques against Kubernetes clusters and workloads, and the runtime controls to protect against them. Scenarios include

Leveraging a compromised Container to attack the underlying node, pivot across the network, or abuse accessible secrets and tokens.

A Malicious Insider exploiting common RBAC misconfigurations.

Using a single node to hijack the entire cluster.

Each attack will be contextualised via mapping to the threat model resources available to the community today, such as the MITRE ATT&CK® Containers Matrix and CNCF Financial Services User Group attack trees. Fabian and James will explain how to use these resources, and the demonstrated attacks and controls to threat model, security test and defend your own Kubernetes Clusters.