Detect, Decide, Defend: Building Cloud Native Security That Fights Back - Matthias Bertschy, ARMO

This talk, presented by Matthias Bertschy from ARMO, explores innovative approaches to cloud native security through the concept of Cloud Application Detection and Response (CADR). The session addresses the limitations of traditional Kubernetes security tools that often only generate alerts without facilitating actionable responses. By integrating real-time detection with automated remediation, CADR enhances security by correlating posture, configuration, and runtime behavior to provide high-confidence alerts with actionable context. Additionally, the speaker demonstrates how RemOps translates these signals into automated responses within Kubernetes environments, showcasing real-world applications such as auto-rollback for config drift and mitigation of privilege escalation.