Lacework Kubernetes Meetup | August 28, 2018
•Download as PPTX, PDF•
0 likes•314 views
Kubernetes and container security is explained by Lacework Chief Product Officer, Dan Hubbard.
Recommended
Recommended
More Related Content
What's hot
What's hot (20)
Similar to Lacework Kubernetes Meetup | August 28, 2018
Similar to Lacework Kubernetes Meetup | August 28, 2018 (20)
More from Lacework
More from Lacework (7)
Recently uploaded
Recently uploaded (20)
Lacework Kubernetes Meetup | August 28, 2018
- 1. ©2018 Lacework, Inc. Confidential and Proprietary.
- 2. ©2018 Lacework, Inc. Confidential and Proprietary.
- 3. ©2018 Lacework, Inc. Confidential and Proprietary. 3 Automating Cloud Security at Scale
- 4. ©2018 Lacework, Inc. Confidential and Proprietary. 4 Lacework Polygraph Threat Intelligence and API’s Alerting SIEM SOC InvestigationCompliance DetectionVisibility Cloud Infrastructure Workloads Accounts VMs ContainersFilesApps Insiders Config APIs Use cases Lacework Security Platform for Cloud
- 5. ©2018 Lacework, Inc. Confidential and Proprietary. • Networking • Redundancy • Autoscaling • Provisioning • Storage • Alerting
- 6. ©2018 Lacework, Inc. Confidential and Proprietary.
- 7. ©2018 Lacework, Inc. Confidential and Proprietary. Do believe the hype!
- 8. ©2018 Lacework, Inc. Confidential and Proprietary. ku · ber · net · es co ·nun ·drum Speed & Scale Secure & Safe
- 9. ©2018 Lacework, Inc. Confidential and Proprietary. The Firewall is the security! Zero-Trust for all Window of Opportunity
- 10. ©2018 Lacework, Inc. Confidential and Proprietary. Monocultures are hard to secure!
- 11. ©2018 Lacework, Inc. Confidential and Proprietary.
- 12. ©2018 Lacework, Inc. Confidential and Proprietary. Hunting Examples with Shodan
- 13. ©2018 Lacework, Inc. Confidential and Proprietary. Demo of Shodan
- 14. ©2018 Lacework, Inc. Confidential and Proprietary.
- 15. ©2018 Lacework, Inc. Confidential and Proprietary. Container Risks and Threats
- 16. ©2018 Lacework, Inc. Confidential and Proprietary. Container Risks and Threats
- 17. ©2018 Lacework, Inc. Confidential and Proprietary. K8’s is the Leader
- 18. ©2018 Lacework, Inc. Confidential and Proprietary. Oh my, HealthZ RCE
- 19. ©2018 Lacework, Inc. Confidential and Proprietary. Risks and Threats • Full remote administration • Information discovery • Deploy Images • Delete Pod’s • Deploy decoys • Use your imagination • Information Disclosure on targets with invalid certificates • Full RCE (https://www.shodan.io/search?query=healthz+probe)
- 20. ©2018 Lacework, Inc. Confidential and Proprietary. Recommendations • Regardless of network policy, use MFA for all access; • Apply strict controls to network access, especially for UI and API ports; • Use SSL for all servers and use valid certificates with proper expiration and enforcement policies; • Investigate VPN (bastion), reverse proxy or direct connect connections to sensitive servers; • Look into product and services such as Lacework in order to discover, detect, prevent, and secure your container services. • Build a pod security policy • Configure your Kubernetes pods to run read-only file systems • Restrict privilege escalation in Kubernetes • Deploy RBAC Kubernetes
- 21. ©2018 Lacework, Inc. Confidential and Proprietary. Pod Security Policy : prevent running as root source Bitnami
- 22. ©2018 Lacework, Inc. Confidential and Proprietary. Pod Security Policy source Bitnami $kubectl get psp
- 23. ©2018 Lacework, Inc. Confidential and Proprietary. Pod Security Policy: prevent pods from accessing host ports source Bitnami
- 24. ©2018 Lacework, Inc. Confidential and Proprietary. Pod Security Policy: prevent access to certain volume types source Bitnami
- 25. ©2018 Lacework, Inc. Confidential and Proprietary. Containers Security in Polygraph 25
- 26. ©2018 Lacework, Inc. Confidential and Proprietary. Automating Cloud Security at Scale 26
Editor's Notes
- Focused on cloud DC security We believe that the cloud presents a huge shift in the way security will be delivered and there is an opportunity for a dominant platform. IaaS revenue is $30B today growing at 40% AWS has 2M customers, 10s of millions of accounts, billions of VMs/containers -> Scale is critical and we built for it from day 1 Gartner/IDC estimate the market to be $5.1B within 3-5 years. If you consider the valuation of subscription models this is one of the biggest market opportunity out there and that’s why Sutter Hill is taking a big bet here – similar to Pure Storage, Snowflake Computing etc
- Lacework becomes the brain of your cloud security. We deliver both breadth and depth Polygraph technology allows us to quickly onboard new customer environments but also allows us to adapt to new services and deliver a consistent experience across these environments and services.
- More interesting examples Polygraphs track application/workload behavior separately. High precision, low false positives Many applications/containers talk to S3.amazonaws.com Bug nginx does not. If itdo, that is change in behavior