Lightning Talk: Kubernetes Risk Assessment: Time to go one level deeper
summary
Common CIS benchmarks cover 100+ CIS checks on control plane and 30+ worker checks for configuration but leave gaps: vulnerable images, crafted containers and managed services (EKS/AKS/GKE) let attackers in even when configs are correct. An industry-driven MITRE ATT&CK for Containers maps real-incident tactics and techniques across the full attack lifecycle, links specific escalation and persistence methods to concrete mitigations such as Pod Security Profiles, and shows how detection and containment fit into risk assessment.
AI-written summary · about
chapters (6)
- 0:00Introduction
- 1:33Why do we need risk assessment
- 2:59Common risk assessment
- 4:00Security challenges
- 5:06Framework
- 7:20Privilege Escalation
related talks
26mKubernetes Risk Assessment: Time to Go One Level Deeper
06mLightning Talk: Why you Should Really Pay Attention to K8S Security Best Practices - Benjy Portnoy
22mSecuring Kubernetes
10mLightning Talk: What Have We Learned from Scanning Over 10K Unique Clusters with Ku...
26mMulti-layer hardening in Kubernetes
46mContinuous Kubernetes Security
43mKubernetes Security: Attacking and Defending Modern Infrastructure
36mThe Devil in the Details: Kubernetes’ First Security Assessment