Threat Modelling: Securing Kubernetes Infrastructure & Deployments - Rowan Baker, ControlPlane
Security teams are often the last to know about an installation of Kubernetes, and are frequently concerned by its adoption. They have every right to be: poorly architected clusters can easily become exposed to unexpected threats, compromised by hostile workloads, or impossible to maintain. It doesn’t have to be this way! This talk details mechanisms for architecting Kubernetes securely in regulated organisations, and shares lessons learnt threat modelling with the CNCF Financial User Group including:
- How to use threat modelling to secure clusters and workloads
- Real-world examples of Kubernetes deployments, and multi-tenant security architectures from financial services
- Where to apply controls to layer defence in depth
- Using compliance standards to satisfy security teams
- How to integrate Kubernetes with a global SOC
- Gotchas, common threats, and advanced mitigations
Related events & webinars
View allEnvoy Gateway End User Threat Model Report: Raising Awareness of Gateway API Security - James Callaghan & Torin van den Bulk, ControlPlane
As we embrace the proliferation of microservice-based architectures in the cloud-native space, and DevOps teams face the challenge of choosing between many similar technologies, simplicity in setup and configuration becomes paramount.
Harnessing the Power of OSCAL: A Dive into Continuous and Automated Compliance for Kubernetes
Join us on a deep-dive journey through Kubernetes as we unmask the power of automated continuous compliance.
Hacking & Defending Kubernetes Clusters: We'll Do It LIVE!! - Fabian Kammel & James Cleverley-Prance
Ever wondered about the security of your own Kubernetes cluster, but new to Kubernetes security and not sure where to start?
Speak to an expert
Engage with world-leading AI and cloud security specialists