Uncovering a Sophisticated Kubernetes Attack in Real-Time

Explore a sophisticated Kubernetes attack in real-time through this conference talk from KubeCon + CloudNativeCon North America 2021. Delve into the growing sophistication of threats targeting Kubernetes environments and learn why traditional security measures are no longer sufficient. Discover how eBPF, an emerging Linux kernel technology, provides unprecedented visibility into Kubernetes pods. Witness a live demonstration of detecting and analyzing a complex attack on a cluster using eBPF-based tools. Gain insights into how security teams can implement these advanced techniques to protect critical Kubernetes environments from evolving threats. Understand the importance of continuous monitoring, the concept of observability in security, and the shift towards making security practices more aligned with Site Reliability Engineering (SRE) principles.

Introduction
Meet Jed and Natlia
What is observability
How do we secure Kubernetes
What can we do
Making security look more like SRE
Trust but verify
Why BPF
Overview
Demonstration
Immutability
Conclusion