Kubernetes has become the backbone of modern cloud-native applications, but it is also a high-value target for attackers. As organizations rapidly adopt containers, service meshes, and automation, securing Kubernetes clusters has become an active security battle.
This book takes a hands-on, end-to-end approach to Kubernetes security. It begins by exploring real-world attack surfaces, guiding readers through container enumeration, RBAC abuse, and cluster takeover techniques. The focus then shifts to defense, covering Kubernetes audit log analysis, runtime detection, monitoring with Prometheus, and incident response. From an offensive perspective, you will learn to scan exposed services, deliver reverse shell payloads, and enumerate internal cluster metadata. Switching to defensive operations, you will conduct threat hunting using API audit logs, correlate runtime telemetry to reconstruct incident kill chains, and run automated tools. Each chapter is built around practical demonstrations that mirror how attacks and detections occur in real environments.
By the end of this book, readers will gain real-world proficiency in both offensive cluster exploitation and defensive forensic analysis in Kubernetes environments. They will be able to identify and exploit common weaknesses, detect malicious behavior, and design Kubernetes clusters.
WHAT YOU WILL LEARN
● Exploit real Kubernetes misconfigurations used in production attacks.
● Perform container enumeration, breakout, and cluster escalation techniques.
● Detect attacks using audit logs and runtime security tools.
● Hunt threats with Falco, Sysdig, Prometheus, and SIEM.
● Analyze network traffic for lateral movement and data exfiltration.
● Reconstruct Kubernetes attack kill chains and respond effectively.
WHO THIS BOOK IS FOR
This book is for security engineers, DevSecOps practitioners, Kubernetes administrators, red teamers, and SOC analysts securing cloud-native environments. Readers should possess basic Linux administration skills, familiarity with Docker container fundamentals, and a foundational understanding of networking concepts and kubectl command-line usage.
外文書商品之書封，為出版社提供之樣本。實際出貨商品，以出版社所提供之現有版本為主。部份書籍，因出版社供應狀況特殊，匯率將依實際狀況做調整。
無庫存之商品，在您完成訂單程序之後，將以空運的方式為你下單調貨。為了縮短等待的時間，建議您將外文書與其他商品分開下單，以獲得最快的取貨速度，平均調貨時間為1~2個月。
為了保護您的權益，「三民網路書店」提供會員七日商品鑑賞期(收到商品為起始日)。
若要辦理退貨，請在商品鑑賞期內寄回，且商品必須是全新狀態與完整包裝(商品、附件、發票、隨貨贈品等)否則恕不接受退貨。
