gVisor and Falco - Strengthening Kubernetes and Container Security with Visibility

Explore container security strategies in Kubernetes environments through this 44-minute conference talk. Dive into the challenges of container sandboxing and learn about Falco, a powerful open-source tool for runtime security. Understand how gVisor works to enhance container isolation and discover the synergy between gVisor and Falco for improved security without sacrificing visibility. Examine the evolution of Falco's architecture and its integration with gVisor. Gain insights into the benefits of combining these technologies for enhanced Kubernetes security and learn how to leverage community support for further advancements in container protection.

Intro
It takes a team!
Container sandboxing security challenge
About Falco
How Falco works
Running Falco
How gVisor works
Prevention != Detection
gVisor isolation confused Falco
gVisor Kernel to the rescue!
One Falco instance per node
Falco architecture evolution
Calling on the community
Falco+gVisor user benefits