Zero Effort Zero Trust K8s Security for Blocking Zero Day Attacks
summary
Claims a working, free open-source runtime guard derived from NeuVector (incoming CNCF Open Zero Trust) that you can deploy with Helm in ~5 minutes, auto-learn allowed behavior in a discover → monitor → protect workflow, and enforce a deny-all allow-list of network connections and container processes. It runs entirely in-cluster (no eBPF, taps the veth per node), generates layer‑7 rules, captures packet evidence of attacks, can block exploit attempts in protect mode, and exports logs for SIEM integration.
AI-written summary · about
chapters (11)
- 0:00Introduction and speaker intro
- 1:29What is Zero Trust
- 5:18Zero Trust misconceptions
- 9:50Zero Trust vs signature matching
- 16:31Zero effort Zero Trust explained
- 19:03Open Zero Trust and NeuVector
- 22:37Demo setup and rules
- 25:04Live demo begins
- 31:12Protect mode and attack blocking
- 41:08Summary and deployment steps
- 43:59Q&A session
related talks
28mGet true zero-trust runtime security in Kubernetes with SUSE NeuVector
06mSponsored Keynote: Kubernetes is the Perfect Platform for Enforcing Zero Trust Security
20mCloudy with a Chance of Zero Trust: Navigating Security in the...
35mAutomating Zero-Trust for Cloud Native Applications
53mProtect against unknown security vulnerabilities
27mTrue zero-trust runtime security in AKS
34mShift Left and Security-as-Code: Security on Kubernetes
29mZero-Trust Containers: Rethinking Security in the Age of Ephemeral...