How GitLab improves cloud native application security and protection
Aug 18, 2020Nico Meisenzahl

Summary
This post details how GitLab's Secure and Protect features can be used to address a specific cloud-native application security attack scenario. It demonstrates the use of Container Host Security (Falco) for real-time attack detection, Container Network Security (Cilium Network Policies) for blocking unauthorized network traffic, Web Application Firewall (ModSecurity) for blocking attacks at the Ingress level, and Static Application Security Testing (SAST) with Gosec for identifying and fixing code vulnerabilities. The post also mentions a session at GitLab Commit for further insights.
More from the Security Control Framework trail
- Track organization-wide security risk in one dashboard
- Dependency Firewall: Block risky packages before the build
- Two front doors: Module-level access in a Django GRC app
- How GitLab tracks vulnerabilities through refactors and reformatting
- Shai-Hulud copycat campaign targets Python developers through PyPI typosquatting