An Exploration of Container Escapes - Improving Security with Behavior Analysis

This presentation explores an innovative approach to enhancing containerized application security through behavior analysis during CI testing and native policy generation. Learn how behavioral analysis can replace time-consuming manual policy definitions that are prone to breaking. Discover the value of implementing native security policies directly within container orchestration tools like Kubernetes without third-party dependencies. The talk covers critical policy types including seccomp profiles, network policies, AppArmor, and security context. Gain practical knowledge on performing behavioral analysis with eBPF-based tools, integrating this analysis into CI testing workflows, and implementing native policies for security enforcement. Develop a comprehensive understanding of advanced security approaches for Kubernetes clusters and containerized orchestration environments, equipping yourself with strategies to protect against multiple threat vectors.