Get true zero-trust runtime security in Kubernetes with SUSE NeuVector
summary
NeuVector (SUSE) demonstrates true zero‑trust runtime security for Kubernetes by profiling a real WordPress stack across Dev→QA→Prod AKS clusters, learning process and Layer 7 deep packet inspection behaviors, exporting an exported CRD YAML security policy and applying it to QA, then switching groups from Discover, Monitor, Protect so alerts become enforced blocks. The Helm‑installed demo policy imports cleanly, matches traffic and processes, and enforces as shown; NeuVector is open source.
AI-written summary · about
chapters (10)
- 0:00Introduction to K8s Security
- 1:04Zero Trust Security Challenges
- 3:18Objectives and Network Layer
- 6:13Deep Packet Inspection Tools
- 8:56SDLC Security Demo Strategy
- 10:18Installing and Profiling
- 14:20Understanding Policy Modes
- 16:41Network Rule Analysis
- 19:25Security as Code Demo
- 24:51Key Takeaways and Conclusion
related talks
27mTrue zero-trust runtime security in AKS
34mShift Left and Security-as-Code: Security on Kubernetes
06mSponsored Keynote: Kubernetes is the Perfect Platform for Enforcing Zero Trust Security
14mThe zero trust model applied to containers!
46mZero Effort Zero Trust K8s Security for Blocking Zero Day Attacks
53mProtect against unknown security vulnerabilities
35mAutomating Zero-Trust for Cloud Native Applications
31mSafeguarding Kubernetes: Pod Security Admission, NeuVector & Kyverno in the Ring