kubernetes security with falco & falco talon

kubernetes security with falco + falco talon
Presented at the First Cloud Native Community in Tehran.

1. Kubernetes security with Falco jaber zare Senior Devops engineer | Tapsi

2. The Security Camera for Modern Apps CNCF GRADUATED PROJECT created by Sysdig

3. What is Falc o ? Cloud Native Runtime Security Runtime security engine Observability for endpoints and cloud infrastructure Built on eBPF Integrated with Kubernetes CNCF GRADUATED PROJECT

4. About Falco

5. The Falco sensor

6. Sensor Sensor Sensor Sensor System Calls System Calls Audit Logs CloudTrail Alerts Collector High level architecture

7. High level architecture

8. Falco High level architecture

9. Falco rule example A shell is run in a container

10. KCP, with Marvin Beckers Spotify AI Platform, with Avin Regmi and David Xia Dagger, with Solomon Hykes https://kubernetespodcast.com Podcast

11. Falcosidekick

12. Falco Talon What is it good for? React in real-time to the Falco Events Allow fine granularity to match the events to react to Responding to default rules with specific overrides Falco Talon Response Engine for managing threats in Kubernetes clusters.

13. Falco Talon

14. Falco Talon Quarantine Pod in Network Policy

15. CNCF GRADUATED PROJECT Users and builders

16. Demo Detecting a Crypto Mining Malware attack with Falco live Demo : https://falco.org/training/

17. Free E-Book

18. Questions

19. Resources Get started at Falco.org Check out the Falco project in Github Get involved in the Falco community Meet the maintainers on the Falco Slack Follow @falco_org on Join a Falco workshop

20. Thank you!