Container Infrastructure Analysis with kube-hunter from Pluralsight

Want to learn how to analyze (and prevent) security weaknesses in Kubernetes? If so, you're in the right place! In this course, you will learn Container Infrastructure Analysis with kube-hunter.

“Common” Kubernetes (K8s) hardening suggests a focus on the control plane. But what if a cluster could be backdoored through the kubelet? In this course, Container Infrastructure Analysis with kube-hunter, we will use kube-hunter to investigate a K8s attack. First, you will use kube-hunter to enumerate security weaknesses in a K8s cluster. Second, you’ll use kube-hunter findings (i.e., a discovered kubelet endpoint) to investigate privilege escalation. Third, you’ll leverage the privilege escalation findings to detect a persistence method (i.e., a malicious container image) through Trivy . Fourth, you’ll harden K8s so the aforementioned attack can’t occur again! When you’re finished with this course, you’ll have the skills and knowledge to detect these techniques: System Services (T1569), Exploitation for Privilege Escalation (T1068), and Implant Container Image (T1525).

kube-hunter is an open-source tool that hunts for security issues in your Kubernetes clusters. It is designed to increase awareness and visibilty of the security controls in Kubernetes enviroments.

In this cyber security course you will learn how to use kube-hunter and Pod Security Policies to search for and prevent Kubernetes threats.

Kubernetes is an open-source container-orchestration system for automating computer application deployment, scaling, and management.

Pod Security Policy is a cluster-level resource that controls security sensitive aspects of the pod specification. The policy defines a set of conditions that a pod must run with in order to be accepted into the system.

Trivy is an easy-to-use and comprehensive and open source vulnerability scanner for container images.

What's inside

Syllabus

Course Overview

Detecting and Preventing Kubernetes Attacks with kube-hunter

Resources

Good to know

Know what's good

, what to watch for

, and possible dealbreakers

Covers Kubernetes security, a highly relevant topic in the industry

Taught by Zach Roof, a recognized instructor in the field of Kubernetes security

Uses the open-source tool kube-hunter, providing hands-on experience

Develops skills in detecting and preventing Kubernetes attacks, which are in high demand

Introduces Pod Security Policies, a core security concept in Kubernetes

Requires familiarity with Kubernetes, which may limit accessibility for beginners

Activities

Be better prepared before your course. Deepen your understanding during and after it. Supplement your coursework and achieve mastery of the topics covered in Container Infrastructure Analysis with kube-hunter with these activities:

Review fundamentals of Kubernetes

Show steps

Review the basics of Kubernetes to strengthen understanding of course material.

Show steps

Read Kubernetes documentation
Watch tutorial videos on Kubernetes
Practice creating and managing Kubernetes clusters

Follow a tutorial series on Pod Security Policies

Show steps

Learn how to use Pod Security Policies to enhance security in Kubernetes.

Browse courses on Pod Security Policies

Show steps

Find a reputable tutorial series on Pod Security Policies
Follow the tutorials step-by-step
Implement Pod Security Policies in your own Kubernetes environment

Attend a workshop on Kubernetes security

Show steps

Connect with experts and gain practical knowledge in Kubernetes security.

Browse courses on Kubernetes Security

Show steps

Research and find relevant workshops
Register and attend the workshop
Actively participate and ask questions

Four other activities

Expand to see all activities and additional details

Show all seven activities

Join a Kubernetes security study group

Show steps

Connect with peers and engage in collaborative learning.

Browse courses on Kubernetes Security

Show steps

Find or create a Kubernetes security study group
Meet regularly and discuss topics
Share knowledge and support each other's learning

Write a blog post on kube-hunter findings

Show steps

Share your knowledge and insights by documenting your experiences with kube-hunter.

Browse courses on Kubernetes Security

Show steps

Gather your kube-hunter findings
Analyze and interpret the results
Write a blog post that details your findings and recommendations

Volunteer as a Kubernetes security mentor

Show steps

Share your knowledge and give back to the Kubernetes community.

Browse courses on Kubernetes Security

Show steps

Find a mentoring platform or organization
Sign up as a Kubernetes security mentor
Provide guidance and support to mentees

Build a Kubernetes security dashboard

Show steps

Create a tool that provides a comprehensive view of Kubernetes security.

Browse courses on Kubernetes Security

Show steps

Design the dashboard layout and functionality
Integrate with Kubernetes security tools and APIs
Deploy and configure the dashboard

Career center

Learners who complete Container Infrastructure Analysis with kube-hunter will develop knowledge and skills that may be useful to these careers:

Kubernetes Administrator

Kubernetes Administrators are responsible for managing Kubernetes clusters. They work with clients to deploy and manage applications on Kubernetes clusters and ensure that the clusters are secure and performant. Kubernetes Administrators must have a deep understanding of Kubernetes technologies and be able to manage Kubernetes clusters effectively. This course on Container Infrastructure Analysis with kube-hunter may be useful for Kubernetes Administrators who want to learn more about how to secure Kubernetes clusters.

See salaries and explore the career path for Kubernetes Administrator

DevOps Engineer

DevOps Engineers are responsible for bridging the gap between development and operations teams. They work to automate and streamline the software development process and ensure that applications are deployed and managed securely. DevOps Engineers must have a deep understanding of both development and operations technologies and be able to work with both teams to deliver high-quality software. This course on Container Infrastructure Analysis with kube-hunter may be useful for DevOps Engineers who want to learn more about how to secure Kubernetes clusters.

See salaries and explore the career path for DevOps Engineer

Vulnerability Analyst

Vulnerability Analysts are responsible for identifying and mitigating vulnerabilities in software. They work with clients to develop and implement vulnerability management programs and identify and mitigate vulnerabilities in software. Vulnerability Analysts must have a deep understanding of vulnerability management technologies and be able to identify and mitigate vulnerabilities in software. This course on Container Infrastructure Analysis with kube-hunter may be useful for Vulnerability Analysts who want to learn more about how to secure Kubernetes clusters.

See salaries and explore the career path for Vulnerability Analyst

Vulnerability Manager

Vulnerability Managers are responsible for managing and mitigating vulnerabilities in software. They work with clients to develop and implement vulnerability management programs and identify and mitigate vulnerabilities in software. Vulnerability Managers must have a deep understanding of vulnerability management technologies and be able to manage and mitigate vulnerabilities in software. This course on Container Infrastructure Analysis with kube-hunter may be useful for Vulnerability Managers who want to learn more about how to secure Kubernetes clusters.

See salaries and explore the career path for Vulnerability Manager

Security Engineer

Security Engineers are responsible for designing, implementing, and managing security systems for organizations. They work with clients to identify and mitigate security risks and develop security policies and procedures. Security Engineers must have a deep understanding of security technologies and be able to implement and manage security controls. This course on Container Infrastructure Analysis with kube-hunter may be useful for Security Engineers who want to learn more about how to secure Kubernetes clusters.

See salaries and explore the career path for Security Engineer

Web Security Engineer

Web Security Engineers are responsible for designing and implementing security systems for websites and applications. They work with clients to identify and mitigate security risks and develop security policies and procedures. Web Security Engineers must have a deep understanding of web security technologies and be able to design and implement security controls. This course on Container Infrastructure Analysis with kube-hunter may be useful for Web Security Engineers who want to learn more about how to secure Kubernetes clusters.

See salaries and explore the career path for Web Security Engineer

Security Consultant

Security Consultants are responsible for providing security advice and guidance to organizations. They work with clients to identify and mitigate security risks and develop security policies and procedures. Security Consultants must have a deep understanding of security technologies and be able to communicate security risks effectively. This course on Container Infrastructure Analysis with kube-hunter may be useful for Security Consultants who want to learn more about how to secure Kubernetes clusters.

See salaries and explore the career path for Security Consultant

Information Security Analyst

Information Security Analysts are responsible for identifying and mitigating security risks to information systems. They work with clients to develop security policies and procedures and implement and manage security controls. Information Security Analysts must have a deep understanding of information security technologies and be able to identify and mitigate security risks. This course on Container Infrastructure Analysis with kube-hunter may be useful for Information Security Analysts who want to learn more about how to secure Kubernetes clusters.

See salaries and explore the career path for Information Security Analyst

Security Architect

Security Architects are responsible for designing and implementing security systems for organizations. They work with clients to identify and mitigate security risks and develop security policies and procedures. Security Architects must have a deep understanding of security technologies and be able to design and implement security controls. This course on Container Infrastructure Analysis with kube-hunter may be useful for Security Architects who want to learn more about how to secure Kubernetes clusters.

See salaries and explore the career path for Security Architect

Security Operations Analyst

Security Operations Analysts are responsible for monitoring and responding to security incidents. They work with clients to identify and mitigate security risks and develop security policies and procedures. Security Operations Analysts must have a deep understanding of security technologies and be able to identify and mitigate security risks. This course on Container Infrastructure Analysis with kube-hunter may be useful for Security Operations Analysts who want to learn more about how to secure Kubernetes clusters.

See salaries and explore the career path for Security Operations Analyst

IT Security Engineer

IT Security Engineers are responsible for designing, implementing, and managing security systems for organizations. They work with clients to identify and mitigate security risks and develop security policies and procedures. IT Security Engineers must have a deep understanding of security technologies and be able to implement and manage security controls. This course on Container Infrastructure Analysis with kube-hunter may be useful for IT Security Engineers who want to learn more about how to secure Kubernetes clusters.

See salaries and explore the career path for IT Security Engineer

Cloud Security Engineer

Cloud Security Engineers are responsible for securing cloud computing systems. They work with clients to identify and mitigate security risks and develop security policies and procedures. Cloud Security Engineers must have a deep understanding of cloud computing security technologies and be able to implement and manage security controls. This course on Container Infrastructure Analysis with kube-hunter may be useful for Cloud Security Engineers who want to learn more about how to secure Kubernetes clusters.

See salaries and explore the career path for Cloud Security Engineer

Systems Administrator

Systems Administrators are responsible for managing and maintaining computer systems. They work with clients to identify and mitigate performance issues and develop performance optimization strategies. Systems Administrators must have a deep understanding of systems administration technologies and be able to identify and mitigate performance issues. This course on Container Infrastructure Analysis with kube-hunter may be useful for Systems Administrators who want to learn more about how to secure Kubernetes clusters.

See salaries and explore the career path for Systems Administrator

Site Reliability Engineer

Site Reliability Engineers are responsible for ensuring that websites and applications are reliable and performant. They work with clients to identify and mitigate performance issues and develop performance optimization strategies. Site Reliability Engineers must have a deep understanding of performance technologies and be able to identify and mitigate performance issues. This course on Container Infrastructure Analysis with kube-hunter may be useful for Site Reliability Engineers who want to learn more about how to secure Kubernetes clusters.

See salaries and explore the career path for Site Reliability Engineer

Cloud Architect

Cloud Architects are responsible for designing, building, and managing cloud computing systems. They work with clients to understand their needs and develop solutions that meet those needs. Cloud Architects must have a deep understanding of cloud computing technologies and be able to design and implement complex systems. This course on Container Infrastructure Analysis with kube-hunter may be useful for Cloud Architects who want to learn more about how to secure Kubernetes clusters.

See salaries and explore the career path for Cloud Architect

Container Infrastructure Analysis with kube-hunter

What's inside

Syllabus

Good to know

Save this course

Activities

Career center

Reading list

Share

Similar courses