Cargando…

Hacking Kubernetes : threat-driven analysis and defense /

Want to run your Kubernetes workloads safely and securely? This practical book provides a threat-based guide to Kubernetes security. Each chapter examines a particular component's architecture and potential default settings and then reviews existing high-profile attacks and historical Common Vu...

Descripción completa

Detalles Bibliográficos
Clasificación:Libro Electrónico
Autor principal: Martin, Andrew
Formato: Electrónico eBook
Idioma:Inglés
Publicado: Sebastapol, CA : O'Reilly Media, 2021.
Edición:First edition.
Temas:
Acceso en línea:Texto completo (Requiere registro previo con correo institucional)

MARC

LEADER 00000cam a2200000 i 4500
001 OR_on1276934473
003 OCoLC
005 20231017213018.0
006 m o d
007 cr cnu---unuuu
008 211017t20212021cau o 000 0 eng d
040 |a YDX  |b eng  |e rda  |e pn  |c YDX  |d N$T  |d YDXIT  |d UKAHL  |d ORMDA  |d OCLCO  |d OCLCQ  |d AAA  |d OCLCO  |d OCLCQ 
019 |a 1276849801  |a 1277009340 
020 |a 9781492081708  |q (electronic book) 
020 |a 1492081701  |q (electronic book) 
020 |a 9781492081685  |q (electronic book) 
020 |a 149208168X  |q (electronic book) 
020 |z 1492081736 
020 |z 9781492081739 
029 1 |a AU@  |b 000071520219 
035 |a (OCoLC)1276934473  |z (OCoLC)1276849801  |z (OCoLC)1277009340 
037 |a 9781492081722  |b O'Reilly Media 
050 4 |a QA76.76.A65  |b M37 2021 
082 0 4 |a 005.3  |2 23 
049 |a UAMI 
100 1 |a Martin, Andrew. 
245 1 0 |a Hacking Kubernetes :  |b threat-driven analysis and defense /  |c Andrew Martin and Michael Hausenblas. 
250 |a First edition. 
264 1 |a Sebastapol, CA :  |b O'Reilly Media,  |c 2021. 
264 4 |c ©2021 
300 |a 1 online resource 
336 |a text  |b txt  |2 rdacontent 
337 |a computer  |b c  |2 rdamedia 
338 |a online resource  |b cr  |2 rdacarrier 
588 0 |a Online resource; title from digital title page (viewed on October 28, 2021). 
520 |a Want to run your Kubernetes workloads safely and securely? This practical book provides a threat-based guide to Kubernetes security. Each chapter examines a particular component's architecture and potential default settings and then reviews existing high-profile attacks and historical Common Vulnerabilities and Exposures (CVEs). Authors Andrew Martin and Michael Hausenblas share best-practice configuration to help you harden clusters from possible angles of attack. This book begins with a vanilla Kubernetes installation with built-in defaults. You'll examine an abstract threat model of a distributed system running arbitrary workloads, and then progress to a detailed assessment of each component of a secure Kubernetes system. Understand where your Kubernetes system is vulnerable with threat modelling techniques Focus on pods, from configurations to attacks and defenses Secure your cluster and workload traffic Define and enforce policy with RBAC, OPA, and Kyverno Dive deep into sandboxing and isolation techniques Learn how to detect and mitigate supply chain attacks Explore filesystems, volumes, and sensitive information at rest Discover what can go wrong when running multitenant workloads in a cluster Learn what you can do if someone breaks in despite you having controls in place. 
505 0 |a Preface -- Chapter 1. Introduction -- Chapter 2. Pod-Level Resources -- Chapter 3. Container Runtime Isolation -- Chapter 4. Applications and Supply Chain -- Chapter 5. Networking -- Chapter 6. Storage -- Chapter 7. Hard Multitenancy -- Chapter 8. Policy -- Chapter 9. Intrusion Detection -- Chapter 10. Organizations -- Appendix A. A Pod-Level Attack -- Appendix B. Resources. 
590 |a O'Reilly  |b O'Reilly Online Learning: Academic/Public Library Edition 
650 0 |a Open source software  |x Security measures. 
650 0 |a Application software  |x Security measures. 
650 6 |a Logiciels libres  |x Sécurité  |x Mesures. 
650 6 |a Logiciels d'application  |x Sécurité  |x Mesures. 
776 0 8 |i Print version:  |z 1492081736  |z 9781492081739  |w (OCoLC)1248897043 
856 4 0 |u https://learning.oreilly.com/library/view/~/9781492081722/?ar  |z Texto completo (Requiere registro previo con correo institucional) 
938 |a Askews and Holts Library Services  |b ASKH  |n AH39478958 
938 |a EBSCOhost  |b EBSC  |n 3061375 
938 |a YBP Library Services  |b YANK  |n 17675569 
938 |a YBP Library Services  |b YANK  |n 302514259 
994 |a 92  |b IZTAP