
How (Not) To Containerise Securely Lessons Learned the Hard Way

by Andrew Martin
At: FOSDEM 2020
This talk details low level exploitable issues with container and Kubernetes deployments. We focus on lessons learned, and show attendees how to ensure that they do not fall victim to avoidable attacks.
Andy has made mistakes. He's seen even more. And in this talk he details the best and the worst of the container and Kubernetes security problems he's experienced, exploited, and remediated.
See how to bypass security controls, exploit insecure defaults, evade detection, and root clusters externally (and more!) in this interactive and highly technical appraisal of the container and cluster security landscape.
Room: UD2.208 (Decroly)
Scheduled start: 2020-02-01 14:10:00
Related events & webinars
View allOpen Source Tools To Empower Ethical and Robust AI Systems - Vicente Herrera & Alberto Rodríguez Fernandez, Control Plane
In this talk, Vicente Herrera will show us some open source tools for evaluating and securing AI models that are essential to building responsible AI systems. He will present an ontology explaining where each tool can assist in these tasks.

ControlPlane & DevSecCon London Meet-up
Join us for an epic collaboration between DevSecCon London and ControlPlane, bringing you a thrilling KubeconEU throwback!

Brewing the Kubernetes Storm Center: Open Source Threat Intelligence for the Cloud Native Ecosystem
The process of threat modelling can seem an abstract art, especially regarding scoring and prioritisation.

Speak to an expert
Engage with world-leading AI and cloud security specialists