{"product_id":"hacking-kubernetes-threat-driven-analysis-and-defense-9781492081739","title":"Hacking Kubernetes: Threat-Driven Analysis and Defense","description":"\u003cp\u003eWant to run your Kubernetes workloads safely and securely? This practical book provides a threat-based guide to Kubernetes security. Each chapter examines a particular component's architecture and potential default settings and then reviews existing high-profile attacks and historical Common Vulnerabilities and Exposures (CVEs). Authors Andrew Martin and Michael Hausenblas share best-practice configuration to help you harden clusters from possible angles of attack. \u003c\/p\u003e\u003cp\u003e This book begins with a vanilla Kubernetes installation with built-in defaults. You'll examine an abstract threat model of a distributed system running arbitrary workloads, and then progress to a detailed assessment of each component of a secure Kubernetes system. \u003c\/p\u003e\u003cul\u003e \u003cli\u003eUnderstand where your Kubernetes system is vulnerable with threat modelling techniques \u003c\/li\u003e\n\u003cli\u003eFocus on pods, from configurations to attacks and defenses \u003c\/li\u003e\n\u003cli\u003eSecure your cluster and workload traffic \u003c\/li\u003e\n\u003cli\u003eDefine and enforce policy with RBAC, OPA, and Kyverno \u003c\/li\u003e\n\u003cli\u003eDive deep into sandboxing and isolation techniques \u003c\/li\u003e\n\u003cli\u003eLearn how to detect and mitigate supply chain attacks \u003c\/li\u003e\n\u003cli\u003eExplore filesystems, volumes, and sensitive information at rest \u003c\/li\u003e\n\u003cli\u003eDiscover what can go wrong when running multitenant workloads in a cluster \u003c\/li\u003e\n\u003cli\u003eLearn what you can do if someone breaks in despite you having controls in place \u003c\/li\u003e\n\u003c\/ul\u003e\u003cbr\u003e\u003cbr\u003e\u003cbr\u003e\u003cb\u003eAbout the Author\u003c\/b\u003e\u003cbr\u003e\u003cp\u003eAndrew Martin is CEO of ControlPlane.\u003c\/p\u003e\u003cp\u003eMichael Hausenblas is Product Developer Advocate Amazon Web Service.\u003c\/p\u003e\u003cbr\u003e","brand":"O'Reilly Media","offers":[{"title":"Default Title","offer_id":50567903576338,"sku":"9781492081739","price":47.99,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0831\/4771\/8930\/files\/img_a1c83c83-d873-454d-8a3a-e0211592c9ab.jpg?v=1731932369","url":"https:\/\/surprise-castle.myshopify.com\/products\/hacking-kubernetes-threat-driven-analysis-and-defense-9781492081739","provider":"Surprise Castle","version":"1.0","type":"link"}