Speaker
Dennis Tsekouras
(CERN)
Description
The best way to understand Kubernetes security is to try to break it.
Kubernetes is the core of modern cloud infrastructure, but common misconfigurations can quickly turn it into an malicious actor's playground.
In this talk, we will go through the basic steps of a penetration testing procedure and explore different common misconfiguration and the damage they can provoke.
Through a live demonstration of a deliberately misconfigured cluster, we will exploit these weaknesses step by step and show how seemingly small mistakes can lead to full cluster compromise, as well as best practices to prevent them.
Author
Dennis Tsekouras
(CERN)