Navigating the Cloud Native Security Landscape
summary
Overview of cloud native security that maps acronyms into concrete threats and mitigations: CNAPP bundles CSPM, KSPM, CIEM, CWPP, CDR into operational responsibilities; cloud misconfiguration leads to S3 leaks and supply chain compromises like SolarWinds; identity excess is common with 90% of granted permissions unused and 58% nonhuman identities with 98% inactive for 90 days; runtime demo shows Log4Shell demo spawning a reverse shell, dropping a crypto miner, and Falco based detection using eBPF system call tracing with Falco and Falco Sidekick alerting to Slack; attackers dwell ~207 days then 70 to contain, average breach cost ~$4M.
AI-written summary · about
chapters (12)
- 0:00Introduction
- 1:32Cloud security overview
- 2:35Perimeter to cloud-native
- 4:21Key cloud attack vectors
- 6:47CNAPP
- 13:33Software supply chain security
- 15:17Supply chain attack vectors
- 21:45Mitigating supply chain risks
- 27:27Security tips for developers
- 35:59Runtime security & threat detection
- 42:25Log4Shell attack demo
- 53:05Closing remarks and key takeaways
related talks
40mCloud Security Novice to Native in 10 Steps: A CNAPP Approach
37mCloud Native Security 101 - Introduction, Workflows and Best practices
09mKeynote: Supply Chain: The New Threat Vector in Cloud Native Security
17mThe Future of Cloud-Native Security
15mHelping security and developers to understand one another
18mSecuring cloud innovation: Lessons learned
36mBack to the Future in the Space of Cloud Native Security
34mCloud Native Security: A New Paradigm for a New World