The Common Configuration Scoring System for Kubernetes Security

Explore the Kubernetes Common Configuration Scoring System (KCCSS) and kube-scan in this 32-minute conference talk. Learn how to assess and score the risk level of entire Kubernetes workloads, including runtime configurations, network settings, Pod Security Policies, and added privileges. Discover how KCCSS, an open-source framework based on the Common Vulnerability Scoring System (CVSS), categorizes risks associated with runtime settings and provides a global risk score for workloads. Gain insights into implementing KCCSS for DevSecOps practices and acquire best practices for securing Kubernetes applications. Presented by Julien Sobrier from Octarine at a CNCF event, this talk offers valuable knowledge for developers and end-users working with Kubernetes and other CNCF-hosted projects.