m0leCon 2022 - Eran Ayalon, Ilan Sokol - Container Escape: All you need is cap (capabilities) скачать в хорошем качестве

m0leCon 2022 - Eran Ayalon, Ilan Sokol - Container Escape: All you need is cap (capabilities)

m0leCon 2022 Turin, Italy - 19/11/2022 In the last few years, containers have become a significant part of the cyber attack surface. Containers are now used by virtually all enterprises for day-to-day operations, making them a prime target for attackers. As a result, the number of cyberattacks involving containers has significantly increased. Consequently, security researchers and blue teams have to be familiar with this whole new world. In our talk, we will be focused on Container escapes. Container escape is considered the "Holy Grail" of the container security attack world. To truly understand the concept of containers and the specific attack vectors we need to dive into important principles in container internals focused on container capabilities. We'll describe how it actually works, how we can use specific container capabilities to pull off container escapes, and how to minimize the danger of this kind of attack.