Protect against unknown security vulnerabilities
summary
NeuVector claims and demos a practical way to stop unknown or unpatched vulnerabilities by enforcing zero-trust runtime security: kernel‑level packet inspection, protocol‑aware filtering, automatic behavior learning and enforceable Discover/Monitor/Protect modes. Installation via Helm or per‑node containers runs, a demo shows wget execution blocked, an incoming Log4Shell payload matched and dropped by a WAF rule, live pcap forensic export, instant quarantine, and measured overhead around 1–2% network latency.
AI-written summary · about
chapters (7)
- 0:00Container security challenges
- 6:47Orchestration security and APIs
- 13:25Supply chain for images
- 23:50Runtime zero trust
- 30:34Runtime security demo
- 44:28Open source tools impact
- 45:12Q&A
related talks
28mGet true zero-trust runtime security in Kubernetes with SUSE NeuVector
46mZero Effort Zero Trust K8s Security for Blocking Zero Day Attacks
20mCloudy with a Chance of Zero Trust: Navigating Security in the...
34mShift Left and Security-as-Code: Security on Kubernetes
38mProtect against unknown security vulnerabilities
35mAutomating Zero-Trust for Cloud Native Applications
27mTrue zero-trust runtime security in AKS
06mSponsored Keynote: Kubernetes is the Perfect Platform for Enforcing Zero Trust Security