BSidesATL 2020 - Detect: Compromising Containers and Clusters
Channel: BSidesATL
Date: 2020-04-17

Containers seem to be everywhere these days, from application development pipelines to deployed in massive clusters supporting major corporate platforms.  As with any newish technology there's new and fun ways to attack and compromise these systems. This talk will take a look at some of the ways you can break out of containerized systems and attack standalone Docker daemons armed with nothing more than curl and ssh then look at how we can go from existing in a Kubernetes cluster to owning the whole environment.
Rory has worked in the Information and IT Security arena for the last 19 years in a variety of roles. These days he spends most of his work time on container, cloud and application security. He's an active member of the UK information security community having delivered presentations at a variety of IT and Information security conferences. He has also presented at major containerization conferences and is an author of the CIS Benchmarks for Docker and Kubernetes and main author of NCC's Mastering Container Security training.