Cloud Native Runtime Security with Falco and Falcosidekick ui

What if we can detect abnormal behavior in the application, container runtime, cloud & cluster environment using the same process?
In this talk, we’ll present Falco along with Falcosidekick-ui
We will show how to use Falco to tap into Linux system calls, the Kubernetes audit logs, and cloud events to provide low-level insight into application and platform behavior and how to write security rules to detect abnormal behavior.
A demo with the installation of Falco and Falcosidekick-ui on Rancher k3s will show how to use the tool in real-life scenarios.
- Speakers: Peter Andersson
- Session code: SUSECON 2022 - BP 1052
- Session Category:
- Session Technical Level:
- Topics:
#suse #rancher #k3s

[@tulv185]

😉