Muhammad Yuga Nugraha
Senior Security Engineer
Agoda
Muhammad Yuga Nugraha is a Senior Security Engineer at Agoda. With a background in DevOps, he enjoys security research and exploring potential attack paths in modern infrastructure. He is building kubernetes-security.cloud, an open reference covering Kubernetes security from both offensive and defensive perspectives.
Beyond his day job, he shares his knowledge through community meetups and conferences. His speaking engagements include PyCon, AWS Community Day, OpenInfraDays, Kubernetes Community Day, Cloud Village at DEF CON 33, and BSides.
Speaker sessions
Briefings and Arsenals | Confirmed Speakers | No Session Assigned
Placeholder session for confirmed speakers without an assigned session, allowing them to be pushed to Swapcard and Visit.
- 07:30
- Tue
- 01 Dec
Stage:
Briefing Stage 2
Sessions Type:
Keynote
Honeypod: Turn Your Pod into a Kubernetes Decoy
Honeypod is a Kubernetes operator that deploys a decoy control plane inside an existing cluster and redirects compromised workloads away from the real Kubernetes API. When an attacker steals a ServiceAccount token and begins exploring the cluster, Honeypod makes them believe they have reached the real control plane with realistic workloads, RBAC permissions, and Kubernetes API behavior.
Unlike a simulated API, Honeypod runs a functional Kubernetes control plane. Commands such as kubectl get pods or kubectl create deployment behave as expected, preventing the environment from easily revealing itself as a decoy. Meanwhile, every action performed with the stolen token is attributed and recorded, similar to Kubernetes Audit Logs.
Inspired by post-compromise lateral movement seen in incidents such as the Hugging Face breach, this session explores how Honeypod can contain attackers after initial access, protect real workloads, and help security teams understand what attackers do once they compromise a pod.
- 16:20
- Tue
- 01 Dec
Stage:
Arsenal 3
Sessions Type:
Keynote