Keynote: Security and the OODA Loop - Liz Rice, Technology Evangelist, Aqua Security
summary
Applies the OODA loop to Kubernetes with a live demo: a controller reconciles three nginx pods, a tracer (Tracy) shows running executables, a malicious YAML runs a shell called "bad", an awk script plus a kill script deletes pods but reconciliation recreates them and logs leak before removal, proving reactive deletion is too slow. Argues prevention wins: image scanning for vulnerabilities/malware, registry blocking, RBAC and Open Policy Agent admission control prevent bad pods before runtime.
AI-written summary · about
chapters (3)
related talks
11mKeynote: Security and the OODA Loop
19mKeynote: Hello From the Other Side: Dispatches From a Kubernetes Attacker
12mKeynote: K8s Security Safari: Hunting Threats in the Wild Wild Cloud
06mKeynote: Future-Proofing Kubernetes
43mKubernetes Security: Attacking and Defending Modern Infrastructure
06mSponsored Keynote: Kubernetes is the Perfect Platform for Enforcing Zero Trust Security
30mSecuring Kubernetes Multi-Tenancy
17mKeynote: Modern Least Privilege with DevSecOps