A Glimpse into Kubernetes Security based on a Realistic Attack Scenario

Have you ever wondered what attacking and defending Kubernetes really looks like? During this talk, we will conduct a realistic multi-step attack on Unguard, a deliberately insecure microservice running in AWS EKS. We will kick off the session with a hands-on exploration of common attack vectors within Kubernetes inspired by realistic scenarios, from misconfigurations, privilege escalations to insecure container images, revealing potential threats that may lurk in a Kubernetes environment. Transitioning seamlessly from offense to defense, the second part of the talk will show what measures would have prevented or detected each step in that attack chain. Defenses will cover network policies, container runtime security, access control, and more. All attacker and defender tooling in this talk will be open source to give a glimpse of what is readily available but may not always be easy to integrate.

Whether you are a seasoned Kubernetes administrator or a security enthusiast, this session promises to be an engaging, hands-on journey into the intricate landscape of Kubernetes security.