Workshops


Workshop 3 - Workshop on Securing your Microservices in Kubernetes Container Environment for Serverless PaaS Cloud


Speaker: Dr. Ricci Ieong

Venue:

HKPC Building, 78 Tat Chee Avenue, Kowloon, Hong Kong
Date: 30 - 31 Oct 2019 (2 days)

Time:

09:30 - 17:00
Non-member Fee
HK$6,800 (Early Bird: HK$6,600)
Member Fee for Organiser/Supporting Organisation HK$6,600 (Early Bird: HK$6,400)

Medium of Instruction

Cantonese with handout in English


Nature & Objectives

Serverless PaaS cloud environment is the already considered to be the next wave of Cloud Computing. More companies considered to put their new development into PaaS environment via Container technology. Container technology is gaining popularity in the app development world. By containerizing applications, developers can work and deploy on various environments consistently.

However, convenience comes with risks, and there are a lot of security threats as well as uncertainties coming along. Is container secure? Is PaaS cloud still vulnerable to attack? Who should take care of the PaaS security and how? This intensive 2-day course aims at equipping attendees with practical knowledge of deploying microservices with Dockers and Kubernetes securely on a public cloud environment.


Course Outline

During the workshop, the attendees would be able to have hands on experience in implementing a typical web application in a public cloud with various security features. They include but are not limited to the following areas:

  • Secure virtual network architecture design
  • Security of various cloud service model
  • Introduction on microservices, Docker, Kubernetes and their security concerns
  • Hands-on experiences with Kubernetes deployment and microservices architecture design
  • Security best practices and real-life case studies for Kubernetes deployment
  • Security in Microservices Architecture
  • Serverless application deployment and related security best practices
  • Secure dockerfiles deployment
  • Identity and access management

The workshop will be conducted in Google Cloud Platform environment. Some of the security features available on cloud platform will also be introduced during the workshop.


Who Should Attend

Target audiences would be individual who are interested in cloud deployment and familiar with network architecture and management. System Integrators, System Administrators / Engineers / Analysts, Technical Engineers / Managers, Information Security Analysts / Managers would also be beneficial by attending the course.


Speaker

Dr. Ricci Ieong
Principal Consultant
eWalker Consulting (HK) Limited

CISSP, CISA, CCSK, CCSP, CCFP, CEH, F.ISFS, ISSMP, ISSAP, ISO 27001LA, STAR Auditor

Dr Ieong has over 15 years of industry experience in the Information Technology Industry as well as more than 15 years of experience in IT Security area specialized in Security Risk Assessment, IT Audit, Ethical Hacking & Penetration Test, Smart Card & Biometrics System deployment and Computer Forensics Investigation. He currently serves as Principal Consultant of eWalker Consulting (HK) Ltd.

He has worked for HP and founded the first HP e-Security Center (also known as Penetration Test Center) in Hong Kong. He has led and conducted over 100 security assessments, IT Security Audits, penetration tests and incident handling services for HKSAR government departments, banks and multinational organization in Hong Kong throughout these years. He is one of the founding instructors in the first diploma and graduate diploma course in computer security and forensics investigation recognized by HKSAR law enforcement team. In year 2002, Dr Ieong was invited by HKSAR government HK Police Force to courtroom as the first expert witness in HK Computer Crime Investigation.

Dr Ieong is the founding member and Council member of the Information Security and Forensics Society (ISFS). He recently founded the Cloud Security Alliance Hong Kong and Macau Chapter and participated as Director of Education. He has conducted over 20 technical IT security training and workshop on cloud computing security recently in 2010. Besides, he has been invited to provide cloud security awareness training to general public audience.

Copyright © 2019 Hong Kong Productivity Council. All Rights Reserved.