Deploy a decoy pod within an AKS cluster that mimics a legitimate application but contains fake data or triggers alerts upon access. Monitor network traffic and logs associated with this pod to identify attackers attempting to exploit vulnerabilities or gain access to sensitive information.
Tag: Kubernetes
Mimicked Kubernetes Pods
This element involves deploying deceptive Kubernetes pods that mimic legitimate pods but perform deceptive actions or contain deceptive information.
Fake Kubernetes Secrets
Goal: To identify attackers attempting to steal sensitive information stored as Kubernetes secrets.
Approach: Monitoring access to the fake secrets and analyzing attacker behavior. This element involves creating fake Kubernetes secrets that mimic legitimate secrets but contain misleading or deceptive information.
Attackers who attempt to access or exfiltrate the fake secrets will be identified and their actions will be logged.