Kubernetes Security: Hands-On Attack and Defense

AppSec Village welcomes all travelers to choose from talks by expert community members, an all AppSec-focused CTF, contests that challenge your mind and your skillz, and more. Bring your thirst for knowledge and passion for breaking things, and your visit to AppSec Village will be a thrill!

AppSec Village

AppSec Village @ DEFCON WORKSHOP (DEFCON BADGE REQUIRED)

Las Vegas Convention Center, West Hall, Level 2, Rooms 228-230

To make sure more villagers get to attend our awesome AppSec Village workshop. Please limit yourself to no more than two workshops out of the five we offer. We will randomly cancel registrations of registrants going over this limit. Thank you for making it fun for everyone!If you see that you won't arrive at the workshop, please cancel. Someone on the waiting list will really appreciate it!----- <ul><li>Must have a valid DEFCON badge to attend.</li><li>Must be present for event 10 min before scheduled beginning time.</li><li>Participants must agree to AppSec Village &amp; DEFCON Codes of Conduct</li></ul> Kubernetes is the de facto operating system of the cloud, more organizations are running their workloads on Kubernetes. While Kubernetes offers many benefits, new users may introduce security risks like cluster misconfiguration, leaked credentials, cryptojacking, container escapes, and vulnerable clusters.This workshop will teach you the fundamentals of Kubernetes security, from protecting your cluster to securing your workloads. You'll learn about RBAC, OPA, Security Contexts, Network Policies, and other security features. You'll also learn how to exploit workloads running on a Kubernetes environment using Living Off the Land (LotL) techniques like exploiting Insecure APIs, Secrets Theft, Container Escape and Pod Privilege Escalation, similar to the ones used by real-world threat actors. Whether you new and wanting to run your first cluster or an experienced penetration tester looking to expand your knowledge, this course is for you. 🛠️Designed for all skill levels, this workshop provides a solid understanding of Kubernetes security. By simulating red team offensive tactics and blue team defensive strategies, you will learn to exploit and mitigate risks such as cluster misconfigurations, secret leaks, and container escapes. 🔒🔍Before the workshop starts:<ol><li>Clone the workshop repository:<a href="https://github.com/Alevsk/dvka/" title="https://github.com/Alevsk/dvka/" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">https://github.com/Alevsk/dvka/</a></li><li>Review the requirements:<a href="https://github.com/Alevsk/dvka/blob/master/workshop/requirements.md" title="https://github.com/Alevsk/dvka/blob/master/workshop/requirements.md" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">https://github.com/Alevsk/dvka/blob/master/workshop/requirements.md. 📋</a></li></ol>Make sure to download all necessary <a href="https://github.com/Alevsk/dvka/blob/master/workshop/requirements.md#install-script" title="https://github.com/Alevsk/dvka/blob/master/workshop/requirements.md#install-script" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">tools</a> and container <a href="https://github.com/Alevsk/dvka/blob/master/workshop/requirements.md#container-images" title="https://github.com/Alevsk/dvka/blob/master/workshop/requirements.md#container-images" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">images</a> in advance. Alternatively, you can download the provided <a href="https://github.com/Alevsk/dvka/blob/master/workshop/requirements.md#virtual-machine" title="https://github.com/Alevsk/dvka/blob/master/workshop/requirements.md#virtual-machine" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">virtual machine</a> to run the labs. 💻Good luck! 🍀Lenin Alevski - <a href="https://www.alevsk.com/" title="https://www.alevsk.com/" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">https://www.alevsk.com</a> alevskSecurity Engineer at Google Lenin Alevski is a Full Stack Engineer and generalist with a lot of passion for Information Security. Currently working as a Security Engineer at Google. Lenin specializes in building and maintaining Distributed Systems, Application Security and Cloud Security in general. Lenin loves to play CTFs, contributing to open-source and writing about security and privacy on his personal blog https://www.alevsk.com. <a href="https://appsecvillage.com/events/dc-2024/kubernetes-security-hands-on-attack-and-defense-668042" title="https://appsecvillage.com/events/dc-2024/kubernetes-security-hands-on-attack-and-defense-668042" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">https://appsecvillage.com/events/dc-2024/kubernetes-security-hands-on-attack-and-defense-668042</a>

Our {communityGuidelinesLink} describe the sort of content we prohibit on Eventbrite. If you suspect an event may be in violation, you can report it to us so we can investigate.

To report other categories of prohibited or illegal content, submit {link}

Kubernetes Security: Hands-On Attack and Defense

More events from AppSec Village

Discover more events from AppSec Village, from Science & Tech to other experiences you might love.

Still looking for the right event?

Explore all events in Las Vegas and filter by date, category, and more to find the perfect fit.

Kubernetes Security: Hands-On Attack and Defense

More events from AppSec Village

Discover more events from AppSec Village, from Science & Tech to other experiences you might love.

You might also like...

Browse more events with different dates, prices, and formats to find your next great experience.

Still looking for the right event?

Explore all events in Las Vegas and filter by date, category, and more to find the perfect fit.