I'll Let Myself In: Kubernetes Privilege Escalation Tactics - Andrew Martin & Iain Smart
Penetration testing Kubernetes shouldn't be easy, but we can make it so! Rogue SRE insider threat? Platform developers with grudges? Hostile internet citizens? Discover how to escalate your privilege, attain persistence, wreak cluster-wide havoc, and hide any trace of your activity in this enthralling exploration of cloud native security! Join us for a learner-friendly yet advanced dive into the myriad ways both trusted and unprivileged users can exploit Kubernetes. We'll guide you through best practices for detection and demonstrate the most cost-effective and efficient strategies for securing your clusters.
- Understand Kubernetes vulnerabilities that SREs, security teams, and pentesters should know — and techniques to mitigate them
- Explore edge-cases of component abuse, and cruel and unusual interactions between components
- Identify various adversary levels and tailor your defences accordingly
- Learn the most economical and rapid strategies for robust cluster security
Related events & webinars
View allControlPlane & DevSecCon London Meet-up
Join us for an epic collaboration between DevSecCon London and ControlPlane, bringing you a thrilling KubeconEU throwback!
Brewing the Kubernetes Storm Center: Open Source Threat Intelligence for the Cloud Native Ecosystem
The process of threat modelling can seem an abstract art, especially regarding scoring and prioritisation.
Open Source Tools To Empower Ethical and Robust AI Systems - Vicente Herrera & Alberto Rodríguez Fernandez, Control Plane
In this talk, Vicente Herrera will show us some open source tools for evaluating and securing AI models that are essential to building responsible AI systems. He will present an ontology explaining where each tool can assist in these tasks.
Speak to an expert
Engage with world-leading AI and cloud security specialists