Zero Trust for Fintech: Building Secure Banking Infrastructure Wit...
summary
Banking Kubernetes get Zero Trust using Cilium/eBPF for identity-aware L3–L7 policies, transparent encryption with WireGuard or IPsec plus mTLS (SPIFFE/Spire), and cluster-mesh between Jakarta and Mumbai. Hubble provides flow logs and a live service map; auditors see proof—after a six-month rollout an auditor verifies that no pod talks to the ledger database by observing Hubble drops and replaying flows. Runtime defense uses Tetragon to trace syscalls, block and kill malicious processes inline, and an automated pipeline reconciles flow logs with CiliumNetworkPolicies to prune stale rules.
AI-written summary · about
chapters (16)
- 0:00Zero Trust for fintech
- 1:28Zero Trust principles
- 2:09Banking regulations & threats
- 3:57Cilium overview & CNI basics
- 5:02eBPF & Cilium architecture
- 6:04Cilium Zero Trust
- 6:25Identity & network policies
- 9:15Layer 3 to Layer 7 Policy Rules
- 10:59Network policy examples
- 13:10Encryption & mTLS in Cilium
- 14:16IPsec & WireGuard encryption
- 15:41Hubble observability & PCI
- 17:28Tetragon runtime security
- 19:16Continuous verification
- 21:01Key takeaways
- 22:26Q&A on code injection
related talks
45mIstio and Cilium: Pushing the Boundaries of the Possible on Zero-Trust
27mPlatform-led Zero Trust service networking for Fintech
22mOne Project, Different Angles: How to Secure and Observe with Cilium
01h 02mIntroduction to Zero Trust Security
41mZero-Trust Networks: Identity, AuthN, AuthZ, Audit
35mDemystifying Zero-Trust for Cloud Native Technologies
28mSimplifying the Networking and Security Stack With Cilium, Hubble, and Tetragon
29mZero Trust for APIs: From Edge to Mesh with Istio