Cloud-Native Sandboxes for Microservices - Understanding New Threats and Attacks

Explore a 25-minute conference talk from Black Hat that delves into the redesign of sandboxing systems for container-based environments. Learn how contemporary sandboxes fall short in supporting microservices and discover innovative approaches to improve threat detection in cloud-native architectures. Examine the challenges posed by container techniques and understand how the presented solution enhances performance in identifying microservice-oriented attacks. Gain insights into parallel execution, performance issues, scoring methods, and security analysis specific to cloud-native sandboxes. Presented by Tongbo Luo and Zhaoyan Xu, this talk covers key topics including sandbox sample behaviors, time detection tools, and the motivation behind adapting sandboxing systems for modern containerized environments.

Introduction
Agenda
Motivation
Context
Sandbox
Sample Behaviors
Time Detection Tools
What is Parallel Execution
Performance Issues
Scoring Issues
Security Analysis
Outro