Attack tree vignettes for Containers as a Service applications
summary
Risk‑centric attack vignettes map concrete threats to container tooling and show what actually works: Docker images and Dockerfile pulls from Docker Hub enable tainted images that ship malware or vulnerable binaries; orchestration (Kubernetes/Swarm, etcd) leaks secrets and enables tenant hopping; known exploits (bash in container, Elasticsearch breakout) yield container breakout, RCE and privilege escalation; exposed APIs and client demons let attackers push or fuzz parameters; mitigation requires image provenance, least‑privilege UIDs and registry hardening.
AI-written summary · about
chapters (23)
- 0:00Introduction
- 1:00Attack modeling
- 2:00Outline
- 5:15Containerization
- 6:10Cloud adoption
- 8:40Containerization landscape
- 9:55Proliferation significance
- 11:25Threat agent
- 13:55Attack actors
- 17:20Use cases
- 25:37Opensource security testing
- 28:55Attack patterns
- 30:15Attack surface for containers
- 32:22Animation
- 34:52Personal Services
- 38:57Application Decomposition
- 42:28Threat Prognosis
- 43:38Threat Rates
- 44:50Weaknesses
- 46:34Bash docker
- 50:15Alternate attack path
- 52:14Orchestration attack
- 53:24The human element
related talks
41mIdentifying and Mitigating Cloud and Container Threats- 41mIdentifying and Mitigating Cloud and Container Threats
28mContainer Security: A Horror Story
47mSecuring Containers By Breaking In
39mInsecure Containers? Continuous Defense Against Open Source Exploits
57mWhat vulnerabilities? Live hacking of containers and orchestrators
30mMaster the Container Security Model with
38mA Treasure Map of Hacking (and Defending) Kubernetes