Practical Cloud Native Security with Falco: Risk and Threat Detection for Containers, Kubernetes, and Cloud

Loris Degioanni · Leonardo Grasso

Aug 2022 · "O'Reilly Media, Inc."

About this eBook

As more and more organizations migrate their applications to the cloud, cloud native computing has become the dominant way to approach software development and execution. Protecting modern, cloud native applications from threats requires the ability to defend them at runtime, when they're most vulnerable to attacks.

This practical guide introduces you to Falco, the open source standard for continuous risk and threat detection across Kubernetes, containers, and the cloud. Falco creator Loris Degioanni and core maintainer Leonardo Grasso bring you up to speed on threat detection and show you how to get Falco up and running, plus advanced topics such as deploying Falco in production and writing your own security rules.

You'll learn how to:

• Leverage runtime security in cloud native environments
• Detect configuration changes and unexpected behavior in the cloud
• Protect containers, Kubernetes, and cloud applications using Falco
• Run, deploy, and customize Falco
• Deploy, configure, and maintain Falco in a production environment
• Improve your compliance

About the author

Loris Degioanni is the CTO and founder of Sysdig. He's also the creator of Sysdig, the popular open source troubleshooting tool, as well as the CNCF runtime security tool Falco. Loris was one of the original contributors to Wireshark, the open source network analyzer. He holds a PhD in computer engineering from Politecnico di Torino and lives in Davis, California.

Leonardo Grasso is an open source software engineer at Sysdig and a core maintainer of The Falco Project. He has a strong passion for software design and long professional experience in the R&D field. Leonardo loves contributing to open source projects from his home in Italy and enjoys building tools other engineers would like to use.