Identifying and Mitigating Cloud and Container Threats - Pablo Musa, Sysdig

Identifying and Mitigating Cloud and Container Threats - Pablo Musa, Sysdig Containers have revolutionized the way workloads are automated, deployed, and scaled, offering speed, and agility. However, they also introduce new security challenges. In a cloud environment, how do you establish perimeters? Can you trust every container's content? Is your container behaving as expected? And how can you detect anomalies in rapidly changing container landscapes? This talk delves into these critical questions and provides actionable insights for detecting security threats in containers and Kubernetes environments without compromising their benefits. We will explore common container threats, including misconfigurations, vulnerable images, and runtime anomalies. By examining real-world examples, we will demonstrate how attackers exploit some of these vulnerabilities and outline best practices for securing your container deployments. Furthermore, we will emphasize the importance of the "last line of defense" by discussing runtime security measures, such as behavioral monitoring and automated responses, to catch malicious activities even when other security layers have been bypassed. Attendees will leave with a comprehensive understanding of cloud and container security and the tools and strategies needed to protect their containerized infrastructure effectively.