Explore the World's Best Ideas
Join today and uncover 100+ curated journeys from 50+ topics. Unlock access to our mobile app with extensive features.
Understanding the Attacker's Objectives
Hackers are often hoping to achieve one of three things:
- To steal data from inside the cluster.
- To harness the computational power of the cluster (e.g. cryptocurrency mining).
- To cause a distributed denial of service (DDoS) attack.
1
7 reads
Harden the Pod by Including Security Context Configs in the Pod
Improve the general security of the pod by adding relevant security context configs in the pod deployment. This can include things like:
- Disallowing Privilege Escalation
- Requiring the Pod/Container to Run as a Non-Root User
- Requiring Read-Only File System Access on the Local Node
1
8 reads
Use Third-Party Tools to Regularly Scan and Monitor the Kubernet
Enough said. Using third-party tools to regularly scan the security and integrity of the environment is very helpful. This can include things like checking YAML manifests for exposures.
1
5 reads
Regularly maintain and update the Kubernetes environment itself
This is an essential part of any cybersecurity process. Kubernetes, like any other platform and software, requires regular maintenance. Pay attention to updates and patch accordingly.
1
5 reads
IDEAS CURATED BY
Cybersecurity geek, engineering nerd, productivity enthusiast, devops wannabe, and sci-fi addict.
CURATOR'S NOTE
K8 security is a very broad/deep topic but here are some general best practices and considerations.
“
Similar ideas
4 ideas
Spacesuit Basics
nasa.gov
7 ideas
Budgeting Basics
practicalmoneyskills.com
Read & Learn
20x Faster
without
deepstash
with
deepstash
with
deepstash
Personalized microlearning
—
100+ Learning Journeys
—
Access to 200,000+ ideas
—
Access to the mobile app
—
Unlimited idea saving
—
—
Unlimited history
—
—
Unlimited listening to ideas
—
—
Downloading & offline access
—
—
Supercharge your mind with one idea per day
Enter your email and spend 1 minute every day to learn something new.
I agree to receive email updates