Container Security Monitoring using Open Source - All Day DevOps 2018

The world is advancing towards accelerated deployments using DevOps and cloud native technologies. In this talk we will see how to monitor for security events using open source solutions to build an actionable monitoring system for Docker and Kubernetes.

Transcript

2. • • • • • • • About Me
3. • • • • • • ​ • ​ What we are going to learn
4. Importance of container security monitoring
5. Importance of container security monitoring
6. • ​ • ​ • • Why use container security monitoring?
7. • • • • • Container security monitoring
8. • a. b. c. How to do container security monitoring
9. • ◦ • ◦ • ◦ ◦ How to do container security monitoring
10. • • • Simple and quick way to look at logs
11. docker events example
12. docker logs example
13. kubectl logs example
14. Container integrity checks example
15. System level monitoring using cAdvisor
16. • • • • What about security specific monitoring?
17. • ​ • ​ • ​ • ​ • • Why Sysdig Falco?
18. • • • Why Sysdig Falco?
19. DEMO - Introducing Sysdig Falco https://youtu.be/A41bAUzvym0
20. ​ Automated defense for container security
21. Automated defense infrastructure setup
22. • • • • • • Automated defense infrastructure setup
23. DEMO - Automated defense https://youtu.be/zd0ksjZI5Vk
24. • • • • • What just happened?
25. • ​ • • ​ Use cases
26. Want to try it yourself in a browser? https://www.katacoda.com/sysdig/scenarios/sysdig-falco
27. Credits and acknowledgements • • • • •
28. • • ​ • • https://www.katacoda.com • • ​ References and resources
29. Thank You Sponsors
30. Thank You Supporters
31. Meet Me in the Slack Channel for Q&A
32. Thank You @madhuakula | @appseccouk