Threat Modelling: Securing Kubernetes Infrastructure & Deployments - Rowan Baker, ControlPlane

Threat Modelling: Securing Kubernetes Infrastructure & Deployments - Rowan Baker, ControlPlane

Security teams are often the last to know about an installation of Kubernetes, and are frequently concerned by its adoption. They have every right to be: poorly architected clusters can easily become exposed to unexpected threats, compromised by hostile workloads, or impossible to maintain. It doesn’t have to be this way! This talk details mechanisms for architecting Kubernetes securely in regulated organisations, and shares lessons learnt threat modelling with the CNCF Financial User Group including: - How to use threat modelling to secure clusters and workloads - Real-world examples of Kubernetes deployments, and multi-tenant security architectures from financial services - Where to apply controls to layer defence in depth - Using compliance standards to satisfy security teams - How to integrate Kubernetes with a global SOC - Gotchas, common threats, and advanced mitigations

[touchthesun]

This is a fantastic talk, and exactly what I was looking for. Thank you for this.