Security Weekly
Application Security WeeklySubscribe

Making Kubernetes a Hostile Place for Attackers – Brad Geesaman – ASW #103

Kubernetes is conceptually simple, but in practical terms, a highly complex distributed system with thousands of interdependent settings that drive behavior and security posture. That said, focusing hardening efforts on a handful of key configurations and policies can make the job of an attacker incredibly challenging in a cluster.

Full episode and show notes

Guest

Brad Geesaman
Co-Founder at Darkbit

Brad Geesaman is a co-founder of Darkbit.io helping clients improve the security of their Kubernetes clusters in cloud-native environments. When he’s not educating others on the security risks inherent in complex distributed systems, he enjoys spending time with his family in Virginia, eating Mexican food, and collecting an impractical amount of ebooks.

Hosts

Tech Lead at Block
Senior Engineering Leader at AWS
Chief Product Officer at CyberSaint

Related

Threat Modeling and Understanding Inherent Threats – Adam Shostack – ESW #359

This is a great interview with Adam Shostack on all things threat modeling. He's often the first name that pops into people's heads when threat modeling comes up, and has created or been involved with much of the foundational material around the subject. Adam recently released a whitepaper that focuses on and defines inherent threats. Resources: ...
How GenAI Can Improve SecOps – Ely Kahn – ESW #359

We've talked about generative AI in a general sense on our podcast for years, but we haven't done many deep dives into specific security use cases. That ends with this interview, as we discuss how generative AI can improve SecOps with Ely Kahn. Some of the use cases are obvious, while others were a complete surprise to me. Check out this episode if...