Practical Cloud Native Security with Falco: Risk and Threat Detection for Containers, Kubernetes, and Cloud

As more and more organizations migrate their applications to the cloud, cloud native computing has become the dominant way to approach software development and execution. In the meantime, security threats are growing more sophisticated and widespread every day. Protecting your applications from these threats requires the ability to defend them at runtime, when they're most vulnerable to attacks.

This practical guide introduces you to Falco, the open source standard for continuous risk and threat detection across Kubernetes, containers, and the cloud. Falco creator Loris Degioanni and core maintainer Leonardo Grasso bring you up to speed on cloud native threat detection basics and show you how to get Falco up and running. You'll then dive into advanced topics such as deploying Falco in production and writing your own security rules.

You'll learn how to:

• Leverage runtime security in cloud native environments
• Detect configuration changes and unexpected behavior in the cloud
• Protect containers, Kubernetes, and cloud applications using Falco
• Run, deploy, and customize Falco using advanced concepts
• Deploy, configure, and maintain Falco in a production environment
• Improve your organization's ability to pass compliance audits
• Implement threat detection for containers, Kubernetes, and cloud apps

隨著越來越多的組織將其應用程式遷移到雲端，雲原生計算已成為軟體開發和執行的主要方式。與此同時，安全威脅每天都在變得更加複雜和普遍。保護您的應用程式免受這些威脅的侵害需要在運行時能夠防禦它們，因為這是它們最容易受到攻擊的時候。

這本實用指南向您介紹了Falco，這是一個跨Kubernetes、容器和雲端的持續風險和威脅檢測的開源標準。Falco的創建者Loris Degioanni和核心維護者Leonardo Grasso將帶您了解雲原生威脅檢測的基礎知識，並向您展示如何啟動和運行Falco。然後，您將深入探討一些高級主題，例如在生產環境中部署Falco和撰寫自己的安全規則。

您將學習以下內容：

- 在雲原生環境中利用運行時安全性
- 檢測雲端中的配置更改和意外行為
- 使用Falco保護容器、Kubernetes和雲端應用程式
- 使用高級概念運行、部署和自定義Falco
- 在生產環境中部署、配置和維護Falco
- 提高組織通過合規審核的能力
- 為容器、Kubernetes和雲端應用程式實施威脅檢測