On This Page

Mastering Container Security

NCC Group | December 3 - 4



Overview

Containers and container orchestration platforms such as Kubernetes are on the rise throughout the IT world, but how do they really work and how can you attack or secure them?

This course breaks down the fundamental components of Docker and Linux containers, showing how they work together to create isolated environments for applications.

We'll also be covering fundamental Linux security concepts such as namespaces, cgroups, capabilities and seccomp, along with showing how to secure (or break into) container-based applications.

The course will then move on to the world of container orchestration and clustering, looking at how Kubernetes works and the security pitfalls that can leave the clusters and cloud-based environments which use containers exposed to attack.

Who Should Take this Course

Security employees, from both blue teams (internal defence) and red teams (external testers) who are looking to get a better understanding of containerisation and its security concerns.

Student Requirements

The course assumes a reasonable level of familiarity with Linux basics, but no familiarity with containerisation.

What Students Should Bring

Laptop running virtualization software (preferably VMWare Workstation/Player/Fusion) with 8GB+ RAM and 60GB Free Disk space.

What Students Will Be Provided With

Copies of the course including all exercises and Virtual Machine images used during the course.

Trainers

Rory has worked in the Information and IT Security arena for the last 18 years in a variety of roles, from financial services, to running a small testing company, to working for large companies as a consultant. These days he spends most of his work time on application, cloud and container security. He's an active member of the UK InfoSec community and has been presenting at security and general IT conferences for the last 8 years, including having the accolade of, currently, being the only person to have spoken at all the UK BSides conferences. When he's not working he can generally be found out and about enjoying the scenery in the Highlands of Scotland, if the midgies aren't biting!