Cloud Native Security
- 4h 49m
- Chris Binnie, Rory McCune
- John Wiley & Sons (US)
- 2021
Explore the latest and most comprehensive guide to securing your Cloud Native technology stack
Cloud Native Security delivers a detailed study into minimizing the attack surfaces found on today’s Cloud Native infrastructure. Throughout the work hands-on examples walk through mitigating threats and the areas of concern that need to be addressed. The book contains the information that professionals need in order to build a diverse mix of the niche knowledge required to harden Cloud Native estates.
The book begins with more accessible content about understanding Linux containers and container runtime protection before moving on to more advanced subject matter like advanced attacks on Kubernetes. You’ll also learn about:
- Installing and configuring multiple types of DevSecOps tooling in CI/CD pipelines
- Building a forensic logging system that can provide exceptional levels of detail, suited to busy containerized estates
- Securing the most popular container orchestrator, Kubernetes
- Hardening cloud platforms and automating security enforcement in the cloud using sophisticated policies
Perfect for DevOps engineers, platform engineers, security professionals and students, Cloud Native Security will earn a place in the libraries of all professionals who wish to improve their understanding of modern security challenges.
In this Book
-
Introduction
-
What is a Container?
-
Rootless Runtimes
-
Container Runtime Protection
-
Forensic Logging
-
Kubernetes Vulnerabilities
-
Container Image CVEs
-
Baseline Scanning (or, Zap Your Apps)
-
Codifying Security
-
Kubernetes Compliance
-
Securing Your Git Repositories
-
Automated Host Security
-
Server Scanning with Nikto
-
Monitoring Cloud Operations
-
Cloud Guardianship
-
Cloud Auditing
-
AWS Cloud Storage
-
Kubernetes External Attacks
-
Kubernetes Authorization with RBAC
-
Network Hardening
-
Workload Hardening
