Falco- Container Native Runtime Security

Microsoft Corporation - 3601 76th Street West, Suite 600 Edina - View Map Cloud Native And Kubernetes Minneapolis
Thu, Jan 24, 2019, 6:00 PM (CST)

About this event

We will open the door at 6:00
Have drinks and pizza until 6:30, then the talk will start.

Container Native Runtime Security
Host intrusion detection (HID) has been around for some time. What if we rethought the problems HID solves in the context of Cloud Native platforms? What if we can detect abnormal behavior in the application, container runtime, & cluster environment as well? In this talk, we’ll present Falco, a CNCF Sandbox project for runtime security. We will show how Falco taps Linux system calls & the Kubernetes API to provide low level insight into application behavior, & how to write Falco rules to detect abnormal behavior. We’ll show how to collect & aggregate alerts using an EFK stack (Elasticsearch, Fluentd, Kibana). Finally we will show how Falco can trigger functions to stop abnormal behavior, & isolate the compromised Pod or Node for forensics. Attendees will leave with a better understanding of what problems runtime security solves, & how Falco can provide runtime security & incident response.

sponsored by.... Food and drinks will be provided courtesy of Sysdig. They will also be raffling off a Google Home Mini so bring a business card for a chance to win!

presented by..... Michael Ducy
Michael Ducy currently works as Director of Community & Evangelism for Sysdig where he is responsible for growing adoption of Sysdig’s open source solutions. Previously, Michael worked at Chef where we held a variety of roles helping customers and community members leverage Chef’s open source and paid solutions, as well as implement the ideas and practices of DevOps. Michael has also worked in a variety of roles in his career including Cloud Architecture, Systems Engineering, and Performance Engineering. Michael holds a Masters in Computer Science from the University of Chicago and an MBA from The Ohio State University.


Thursday, Jan 24
6:00 PM - 7:30 PM (CST)


Microsoft Corporation
3601 76th Street West, Suite 600 Edina