红帽：2023年Kubernetes 安全报告（英文版）（23页）.pdf

1、State of Kubernetes security report2023Executive summaryOur 2023 edition of the State of Kubernetes Security Report delves into the latest findings from our annual survey around cloud-native security,focusing on containerized workloads and Kubernetes.This report is based on a survey of 600 DevOps,en

2、gineering,and security professionals from across the globe spanning large enterprises and small-to-medium sized organizations.The report uncovers some of the most common security challenges organizations face on their cloud-native adoption journey,and their impact on the business.We examine specific

3、 security risks that organizations are most worried about and the steps they take to mitigate those risks,including risks to their software supply chain and their applications at runtime.In addition,we identify the types of security incidents and how often survey respondents experienced them in thei

4、r Kubernetes environment,and provide best practices and guidance for application development and security teams that could lower their security risk.With security as one of the biggest concerns with Kubernetes adoption,and security identified as the#1 IT funded priority for 2023,its never been more

5、important for the Security team to collaborate with the Development and Operations team and embed security controls earlier in the developer workflows.Our report looks at how responsibility for Kubernetes security is distributed across Dev,Sec,and Ops,and reveals the latest trends in DevSecOps adopt

6、ion.As always,we encourage readers to benchmark the health of their Kubernetes security against the findings in this report to find areas of improvement and get insights into how to reduce or eliminate security gaps.Container and Kubernetes security,while challenging,offers an opportunity for organi