Kubernetes Security: Hacking Containers

As Kubernetes becomes more popular, security issues related to it are increasingly coming under the spotlight. In this DevSecOps talk, Thomas Fricke will share insights about the security model of Kubernetes and demo a handful of key scripts to analyze cluster vulnerabilities.

In this talk, Thomas will cover:

• The security model of Kubernetes
• How to check clusters for vulnerabilities and fight security weaknesses with a few lines of scripting
• How to use scripts to analyze Istio, the "trust nothing" distributed firewall solution, and find an exploitable vulnerability in no time.