Section 3: Learning from Mistakes and Pitfalls
by Kaizhe Huang,
Pranjal Jumde,
Loris Degioanni
Learn Kubernetes Security
- Learn Kubernetes Security
- Why subscribe?
- Foreword
- Contributors
- About the authors
- About the reviewer
- Packt is searching for authors like you
- Preface
- Section 1: Introduction to Kubernetes
- Chapter 1: Kubernetes Architecture
- Chapter 2: Kubernetes Networking
- Chapter 3: Threat Modeling
- Chapter 4: Applying the Principle of Least Privilege in Kubernetes
- Chapter 5: Configuring Kubernetes Security Boundaries
- Section 2: Securing Kubernetes Deployments and Clusters
- Chapter 6: Securing Cluster Components
- Chapter 7: Authentication, Authorization, and Admission Control
- Chapter 8: Securing Kubernetes Pods
- Chapter 9: Image Scanning in DevOps Pipelines
- Chapter 10: Real-Time Monitoring and Resource Management of a Kubernetes Cluster
- Chapter 11: Defense in Depth
- Section 3: Learning from Mistakes and Pitfalls
- Chapter 12: Analyzing and Detecting Crypto-Mining Attacks
- Chapter 13: Learning from Kubernetes CVEs
- The path traversal issue in kubectl cp – CVE-2019-11246
- DoS issues in JSON parsing – CVE-2019-1002100
- A DoS issue in YAML parsing – CVE-2019-11253
- The Privilege escalation issue in role parsing – CVE-2019-11247
- Scanning for known vulnerabilities using kube-hunter
- Summary
- Questions
- Further references
- Assessments
- Other Books You May Enjoy
Section 3: Learning from Mistakes and Pitfalls
In this section, you will learn about some attack scenarios involving Kubernetes clusters, from known attacks and CVEs to mitigation and prevention strategies.
The following chapters are included in this section:
- Chapter 12, Analyzing and Detecting Crypto-Mining Attacks
- Chapter 13, Learning from Kubernetes CVEs
-
No Comment
..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.