Name: Hacker Days: Kubernetes from a Attacker's Perspective
Start: 2020-05-28T11:00:00-07:00
End: 2020-05-28T12:00:00-07:00

Note: call details will be sent 1 hour prior to the talk

Kubernetes is everywhere, a container orchestration platform that is actively supported by all major cloud providers and adopted by companies across size and scale. However, the distributed nature of the system at its core has new and interesting security implications that cannot be tested using conventional tools and techniques.

This talk is aimed for anyone interested in exploring the depths of Kubernetes security from an attacker's perspective including DevSecOps Teams looking to defend against attacker tools and techniques.

The session will provide a high-level overview of Kubernetes architecture from an attacker's perspective i.e. what can be attacked. Subsequently look at, through demos, modern attacker tools and techniques using various real-world scenarios for attacking applications and components in a Kubernetes cluster.

Outline
- Attacker's intro to Kubernetes
- Kubernetes attack surfaces (Threat Model)
- Attacker in a Pod (Starting Point)
- Attack scenarios (live)
- Cloud infrastructure attack surface in Kubernetes (GKE)
- Namespace breakout using hostPath volume mounts

Speaker:
Abhishek has over 10 years experience doing security research, security services including penetration testing, source code review, training etc. He is currently working as the Head of Technology at Appsecco, where his core area of focus is building security automation platforms using cloud-native solutions. He is credited with multiple vulnerability discoveries across enterprise products with CVEs to his name such as CVE-2015-0085, CVE-2015-1650, CVE-2015- 1682, CVE-2015-2376, CVE-2015-2555, CVE-2014-4117, CVE-2014-6113. As an open source software contributor, he has developed or contributed to multiple projects including Wireplay, Penovox, HiDump, RbWinDBG.

Travis McPeak

Bay Area OWASP

OWASP® Foundation 

Technology

Web Technology

Web Development

Hacking

Web Application Security

Information Security

Software Security

Application Security

Hacker Days: Kubernetes from a Attacker's Perspective

Online event

Share

Bay Area OWASP

Hacker Days: Kubernetes from a Attacker's Perspective

Bay Area OWASP

Details

Members are also interested in