attack

Likewar: How social media is changing the worldand how the world is changing social media

Likewar: How social media is changing the worldand how the world is changing social media

December 23, 2019

Terrorists live-stream their attacks, Twitter wars sell music albums and produce real-world casualties, and viral misinformation alters not just the result of battles but the very fate of nations. The result is that war, tech, and politics have blurred into a new kind of battle space that plays out on our smartphones. P. W. Singer explains.
Hardware-based KMS Plug-in to Protect Secrets in Kubernetes

Hardware-based KMS Plug-in to Protect Secrets in Kubernetes

December 19, 2019

Secrets are a key pillar of K8S security, and K8S 1.10+ enhanced the protection of secrets at-rest in the etcd, with support for an external KMS (via KMS plug-ins), and supporting envelope encryption. …
CAP_NET_RAW and ARP Spoofing in Your Cluster: It's Going Downhill From Here

CAP_NET_RAW and ARP Spoofing in Your Cluster: It's Going Downhill From Here

December 18, 2019

Did you know that by default, your applications running in Kubernetes can open raw network sockets? This talk demonstrates how, in the right circumstances, the CAP_NET_RAW capability that allows this …
Walls Within Walls: What if Your Attacker Knows Parkour?

Walls Within Walls: What if Your Attacker Knows Parkour?

December 13, 2019

What happens if an attacker escapes a container and compromises your node? Is it game over for the whole cluster, or can you limit the blast radius? Whether it be for defense in depth or multi-tenancy …
Keynote: Hello From the Other Side: Dispatches From a Kubernetes Attacker

Keynote: Hello From the Other Side: Dispatches From a Kubernetes Attacker

November 28, 2019

Attackers have user stories too. Are you designing with them in mind?As an attacker, Ian Coldwater would like to help you understand these users and their stories. What do their mindsets, motivations …
Knative - The Security Platypus?

Knative - The Security Platypus?

November 28, 2019

Knative provides a way to extend Kubernetes to run serverless workloads. Although it runs as pods, given the nature of those workloads it requires an approach to security that is distinct from standar …
Security Beyond Buzzwords: How to Secure Kubernetes with Empathy?

Security Beyond Buzzwords: How to Secure Kubernetes with Empathy?

November 25, 2019

Your developers are excited about containerizing their apps for elastic scaling. Your operations team is busy drooling over resource optimizations and cost savings that are predicted with a move away …
Prepare to Be Boarded! A Tale of Kubernetes, Plunder, and Cryptobooty

Prepare to Be Boarded! A Tale of Kubernetes, Plunder, and Cryptobooty

November 22, 2019

How are Kubernetes clusters being compromised in the wild? There arent a whole lot of public reports detailing successful attacks against Kubernetes clusters. The goal of this talk is to demystify t …
Tutorial: Attacking and Defending Kubernetes Clusters: A Guided Tour

Tutorial: Attacking and Defending Kubernetes Clusters: A Guided Tour

November 19, 2019

Please bring your laptop fully charged as we will have limited charging stations available in the room.Is your Kubernetes cluster able to resist the most common attacks? And, are all the necessary det …
Rootless, Reproducible, and Hermetic: Secure Container Build Showdown

Rootless, Reproducible, and Hermetic: Secure Container Build Showdown

November 16, 2019

Rootless container image builds (as distinct from rootless runtimes) have crept ever closer with orca-build, BuildKit, and img proving the concept. And they are desperately needed: a build pipeline wi …
Tutorial: Building Security into Kubernetes Deployment Pipelines

Tutorial: Building Security into Kubernetes Deployment Pipelines

November 11, 2019

How secure is your deployment pipeline? Is image integrity verified or can any user deploy any image to production? Are those images scanned for known CVEs? And are security policies enforced to harde …
Intro: TUF / Notary

Intro: TUF / Notary

November 10, 2019

Software distribution and packaging systems are rapidly becoming the weak link in the software lifecycle. This talk provides an accessible overview of two CNCF projects (Notary and TUF), that provide …
How We Used Kubernetes to Host a Capture the Flag (CTF)

How We Used Kubernetes to Host a Capture the Flag (CTF)

November 7, 2019

CTF competitions are now commonly used for cybersecurity education purposes, and are solved by many enthusiast researchers looking for a challenge. In Twistlock, we decided to host an online CTF compe …
Crafty Requests: Deep Dive Into Kubernetes CVE-2018-1002105

Crafty Requests: Deep Dive Into Kubernetes CVE-2018-1002105

November 3, 2019

You may have heard about CVE-2018-1002105, one of the most severe Kubernetes security vulnerabilities of all time. But how does this flaw work? How can it be exploited, and what does it all mean? Thi …
Hacking Helm

Hacking Helm

November 3, 2019

Helm is the best way to build, package, and run Kubernetes manifests. However it has been considered by some as a fairly insecure way to deploy software, mostly due to its server component Tiller. Let …
Container Forensics: What to Do When Your Cluster is a Cluster

Container Forensics: What to Do When Your Cluster is a Cluster

October 30, 2019

When responding to an incident in your containers, you dont necessarily have the same tools at your disposal that you do with VMs - and so your incident investigation process and forensics are differ …
Surviving Serverless Battle By Secure Runtime, CRI and RuntimeClass

Surviving Serverless Battle By Secure Runtime, CRI and RuntimeClass

October 28, 2019

Why Google released gVisor, AWS developed Firecracker, and Kata is on the fire? In this talk, we will discuss the unrevealed connection between secure container runtime and Serverless based on our ob …
Unfit Story of Fitness Trackers: Hacking BLE Fitness Trackers

Unfit Story of Fitness Trackers: Hacking BLE Fitness Trackers

September 26, 2019

Bluetooth Low Energy is being used extensively in almost all the modern "Smart" devices from smart phones, smart devices, smart watches as well as advanced medical equipment. This talk will introduce …