Cloud Native Security

DISCOVER A COMPREHENSIVE GUIDE TO SECURING YOUR CLOUD NATIVE TECH STACK

In Cloud Native Security, accomplished IT security professionals and authors Chris Binnie and Rory McCune deliver a detailed treatment of how to minimize the attack surfaces found on today's Cloud Native infrastructure. Incorporating hands-on examples, the book teaches you to mitigate threats and eliminate areas of concern that tend to lead to security compromises. The book contains the information that security professionals need to know in order to operate secure, hardened and therefore reliable Cloud Native estates.

Beginning with accessible and easy-to-understand content about Linux containers and container runtime protection, the book moves on to more advanced subjects, like complex attacks on Kubernetes. You'll learn about forensic logging and Kubernetes vulnerabilities, Common Vulnerability and Exploit scanning tools (CVEs), baseline scans, how to codify security, and how to scan popular code repositories for vulnerabilities.

You'll also discover how to use Configuration Management tools like Ansible to enforce security controls and help mitigate against attackers gaining a foothold and create predictable, reliable, and secure hosts. Finally, topics like network policies, pod hardening, and Kubernetes Role Based Access Control (RBAC) functionality are all covered in extensive depth.

Perfect for DevOps engineers, platform engineers, security professionals, and students, Cloud Native Security will earn a place in the libraries of all professionals who need to improve their understanding of modern security vulnerabilities and challenges.

The book delivers thorough and comprehensive explanations of:

• Installing and configuring multiple types of DevSecOps tooling in CI/CD pipelines
• Building forensic logging systems that provide exceptional levels of detail in busy containerized estates
• How to secure Kubernetes, the most popular container orchestrator
• Hardening cloud platforms and automating security enforcement in the cloud with sophisticated policies