├── .github └── settings.yml ├── 2019-07-30.md ├── 2019-4-30.md ├── 2019-5-28.md ├── 2020-03-03.md ├── CHARTER.md ├── LICENSE ├── README.md ├── meeting-notes.md └── projects ├── codifying-compliance-controls └── README.md ├── fsug-checklist └── fsug-checklist.md ├── k8s-threat-model ├── AttackTrees │ ├── AccessSensitiveData.md │ ├── AttackerOnTheNetwork.md │ ├── CompromisedContainer.md │ ├── DenialOfService.md │ ├── EstablishPersistence.md │ ├── MaliciousCodeExecution.md │ ├── images │ │ ├── Thumbs.db │ │ ├── attacktree-key.png │ │ ├── dos-leftbranch.png │ │ ├── dos-rightbranch.png │ │ ├── maliciouos-pullsecret.png │ │ ├── malicious-gainaccesstocontainer.png │ │ ├── malicious-loadadditional.png │ │ ├── persistence-containercompromise.png │ │ ├── persistence-secretcompromise.png │ │ ├── scenario-compromisedcontainer.png │ │ └── trustboundaries.png │ └── pdfs │ │ ├── Kubernetes Attack Trees v1.4-persistence.pdf │ │ ├── Kubernetes Attack Trees v1.4.dos.pdf │ │ ├── Kubernetes Attack Trees v1.4.malicious.pdf │ │ ├── Kubernetes Attack Trees v1.4.scenario.compromised.pdf │ │ ├── Kubernetes Attack Trees v1.4.scenario.network.pdf │ │ └── Kubernetes Attack Trees v1.4.sensitive.data.pdf ├── README.md └── Threat Modelling & Kubernetes Security Training - Jon Meadows and Andrew Martin, sig-security _ Financial Services User Group, CNCF (22nd Jan 2020).pdf ├── kubernetes-security-training-system ├── Kubernetes Arena Update-aug.pdf ├── README.md └── Vision-statement.md └── working-groups └── overview.md /.github/settings.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cncf/financial-user-group/HEAD/.github/settings.yml -------------------------------------------------------------------------------- /2019-07-30.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cncf/financial-user-group/HEAD/2019-07-30.md -------------------------------------------------------------------------------- /2019-4-30.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cncf/financial-user-group/HEAD/2019-4-30.md -------------------------------------------------------------------------------- /2019-5-28.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cncf/financial-user-group/HEAD/2019-5-28.md -------------------------------------------------------------------------------- /2020-03-03.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cncf/financial-user-group/HEAD/2020-03-03.md -------------------------------------------------------------------------------- /CHARTER.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cncf/financial-user-group/HEAD/CHARTER.md -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cncf/financial-user-group/HEAD/LICENSE -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cncf/financial-user-group/HEAD/README.md -------------------------------------------------------------------------------- /meeting-notes.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cncf/financial-user-group/HEAD/meeting-notes.md -------------------------------------------------------------------------------- /projects/codifying-compliance-controls/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cncf/financial-user-group/HEAD/projects/codifying-compliance-controls/README.md -------------------------------------------------------------------------------- /projects/fsug-checklist/fsug-checklist.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cncf/financial-user-group/HEAD/projects/fsug-checklist/fsug-checklist.md -------------------------------------------------------------------------------- /projects/k8s-threat-model/AttackTrees/AccessSensitiveData.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cncf/financial-user-group/HEAD/projects/k8s-threat-model/AttackTrees/AccessSensitiveData.md -------------------------------------------------------------------------------- /projects/k8s-threat-model/AttackTrees/AttackerOnTheNetwork.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cncf/financial-user-group/HEAD/projects/k8s-threat-model/AttackTrees/AttackerOnTheNetwork.md -------------------------------------------------------------------------------- /projects/k8s-threat-model/AttackTrees/CompromisedContainer.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cncf/financial-user-group/HEAD/projects/k8s-threat-model/AttackTrees/CompromisedContainer.md -------------------------------------------------------------------------------- /projects/k8s-threat-model/AttackTrees/DenialOfService.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cncf/financial-user-group/HEAD/projects/k8s-threat-model/AttackTrees/DenialOfService.md -------------------------------------------------------------------------------- /projects/k8s-threat-model/AttackTrees/EstablishPersistence.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cncf/financial-user-group/HEAD/projects/k8s-threat-model/AttackTrees/EstablishPersistence.md -------------------------------------------------------------------------------- /projects/k8s-threat-model/AttackTrees/MaliciousCodeExecution.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cncf/financial-user-group/HEAD/projects/k8s-threat-model/AttackTrees/MaliciousCodeExecution.md -------------------------------------------------------------------------------- /projects/k8s-threat-model/AttackTrees/images/Thumbs.db: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cncf/financial-user-group/HEAD/projects/k8s-threat-model/AttackTrees/images/Thumbs.db -------------------------------------------------------------------------------- /projects/k8s-threat-model/AttackTrees/images/attacktree-key.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cncf/financial-user-group/HEAD/projects/k8s-threat-model/AttackTrees/images/attacktree-key.png -------------------------------------------------------------------------------- /projects/k8s-threat-model/AttackTrees/images/dos-leftbranch.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cncf/financial-user-group/HEAD/projects/k8s-threat-model/AttackTrees/images/dos-leftbranch.png -------------------------------------------------------------------------------- /projects/k8s-threat-model/AttackTrees/images/dos-rightbranch.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cncf/financial-user-group/HEAD/projects/k8s-threat-model/AttackTrees/images/dos-rightbranch.png -------------------------------------------------------------------------------- /projects/k8s-threat-model/AttackTrees/images/maliciouos-pullsecret.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cncf/financial-user-group/HEAD/projects/k8s-threat-model/AttackTrees/images/maliciouos-pullsecret.png -------------------------------------------------------------------------------- /projects/k8s-threat-model/AttackTrees/images/malicious-gainaccesstocontainer.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cncf/financial-user-group/HEAD/projects/k8s-threat-model/AttackTrees/images/malicious-gainaccesstocontainer.png -------------------------------------------------------------------------------- /projects/k8s-threat-model/AttackTrees/images/malicious-loadadditional.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cncf/financial-user-group/HEAD/projects/k8s-threat-model/AttackTrees/images/malicious-loadadditional.png -------------------------------------------------------------------------------- /projects/k8s-threat-model/AttackTrees/images/persistence-containercompromise.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cncf/financial-user-group/HEAD/projects/k8s-threat-model/AttackTrees/images/persistence-containercompromise.png -------------------------------------------------------------------------------- /projects/k8s-threat-model/AttackTrees/images/persistence-secretcompromise.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cncf/financial-user-group/HEAD/projects/k8s-threat-model/AttackTrees/images/persistence-secretcompromise.png -------------------------------------------------------------------------------- /projects/k8s-threat-model/AttackTrees/images/scenario-compromisedcontainer.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cncf/financial-user-group/HEAD/projects/k8s-threat-model/AttackTrees/images/scenario-compromisedcontainer.png -------------------------------------------------------------------------------- /projects/k8s-threat-model/AttackTrees/images/trustboundaries.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cncf/financial-user-group/HEAD/projects/k8s-threat-model/AttackTrees/images/trustboundaries.png -------------------------------------------------------------------------------- /projects/k8s-threat-model/AttackTrees/pdfs/Kubernetes Attack Trees v1.4-persistence.pdf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cncf/financial-user-group/HEAD/projects/k8s-threat-model/AttackTrees/pdfs/Kubernetes Attack Trees v1.4-persistence.pdf -------------------------------------------------------------------------------- /projects/k8s-threat-model/AttackTrees/pdfs/Kubernetes Attack Trees v1.4.dos.pdf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cncf/financial-user-group/HEAD/projects/k8s-threat-model/AttackTrees/pdfs/Kubernetes Attack Trees v1.4.dos.pdf -------------------------------------------------------------------------------- /projects/k8s-threat-model/AttackTrees/pdfs/Kubernetes Attack Trees v1.4.malicious.pdf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cncf/financial-user-group/HEAD/projects/k8s-threat-model/AttackTrees/pdfs/Kubernetes Attack Trees v1.4.malicious.pdf -------------------------------------------------------------------------------- /projects/k8s-threat-model/AttackTrees/pdfs/Kubernetes Attack Trees v1.4.scenario.compromised.pdf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cncf/financial-user-group/HEAD/projects/k8s-threat-model/AttackTrees/pdfs/Kubernetes Attack Trees v1.4.scenario.compromised.pdf -------------------------------------------------------------------------------- /projects/k8s-threat-model/AttackTrees/pdfs/Kubernetes Attack Trees v1.4.scenario.network.pdf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cncf/financial-user-group/HEAD/projects/k8s-threat-model/AttackTrees/pdfs/Kubernetes Attack Trees v1.4.scenario.network.pdf -------------------------------------------------------------------------------- /projects/k8s-threat-model/AttackTrees/pdfs/Kubernetes Attack Trees v1.4.sensitive.data.pdf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cncf/financial-user-group/HEAD/projects/k8s-threat-model/AttackTrees/pdfs/Kubernetes Attack Trees v1.4.sensitive.data.pdf -------------------------------------------------------------------------------- /projects/k8s-threat-model/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cncf/financial-user-group/HEAD/projects/k8s-threat-model/README.md -------------------------------------------------------------------------------- /projects/k8s-threat-model/Threat Modelling & Kubernetes Security Training - Jon Meadows and Andrew Martin, sig-security _ Financial Services User Group, CNCF (22nd Jan 2020).pdf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cncf/financial-user-group/HEAD/projects/k8s-threat-model/Threat Modelling & Kubernetes Security Training - Jon Meadows and Andrew Martin, sig-security _ Financial Services User Group, CNCF (22nd Jan 2020).pdf -------------------------------------------------------------------------------- /projects/kubernetes-security-training-system/Kubernetes Arena Update-aug.pdf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cncf/financial-user-group/HEAD/projects/kubernetes-security-training-system/Kubernetes Arena Update-aug.pdf -------------------------------------------------------------------------------- /projects/kubernetes-security-training-system/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cncf/financial-user-group/HEAD/projects/kubernetes-security-training-system/README.md -------------------------------------------------------------------------------- /projects/kubernetes-security-training-system/Vision-statement.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cncf/financial-user-group/HEAD/projects/kubernetes-security-training-system/Vision-statement.md -------------------------------------------------------------------------------- /projects/working-groups/overview.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cncf/financial-user-group/HEAD/projects/working-groups/overview.md --------------------------------------------------------------------------------