September 28-30, 2020
View More Details & Register
Back To Schedule
Tuesday, September 29 • 10:30am - 11:00am
Securing a Network Virtualized with Containers and Kubernetes: Example Solutions and Current Gaps - Samuli Kuusela, Ericsson & Amy Zwarico, AT&T

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Virtualization is evolving to containerized workloads orchestrated by Kubernetes because of simpler deployment and management than with virtual machines. However, there are concerns that containers are not as secure as virtual machines, and that Kubernetes orchestration can introduce additional risks.

These concerns, both real and perceived, will be described by the speakers, with specific concentration on the risk to the security of the container isolation model. The heart of the talk is a presentation of joint efforts by CNTT and ONAP to define practical security architectures, controls and tests for NFVi with Kubernetes that addresses the realities of such deployments, such as ensuring isolation among cloud native network functions (CNF) with differing operating system privilege requirements. Finally, the speakers present both hardware and software isolation solutions for sandboxing less trusted Edge workloads.

avatar for Amy Zwarico

Amy Zwarico

Director - Cybersecurity, AT&T
Amy Zwarico is a Director of Cybersecurity in AT&T’s Chief Security office, specializing in software, open source and emerging product security. She has been actively involved ONAP (Open Network Automation Platform) security since the Amsterdam release and is currently serving as... Read More →
avatar for Samuli Kuusela

Samuli Kuusela

Security Architect, Ericsson
Samuli Kuusela is a Security Architect in Ericsson’s Chief Technology Office, focusing on getting security right in the Ericsson portfolio, especially in the context of new technologies like cloud-native and Kubernetes. He has been active in ONAP (Open Network Automation Platform... Read More →

Tuesday September 29, 2020 10:30am - 11:00am EDT
Cloud Networking & Edge Theater
  Cloud Networking & Edge
  • Session Slides Included Yes