WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
WeAreDevelopers LIVE • Feb 24, 2022

Security Challenges of Breaking A Monolith

Reinhard Kugler

Decomposing your monolith expands your external attack surface, yet strictly limits a vulnerability's blast radius. Discover how to map trust boundaries and confidently secure modern distributed architectures.

Pause
Mute Enter Fullscreen
#1 about 8 min

Building a monolithic video streaming and sharing application

How hardware scaling limitations drive the shift from a monolithic application to distributed services.

#2 about 2 min

Breaking the monolith into isolated microservices and components

Extracting specific functions into microservices solves resource idling and performance bottlenecks.

#3 about 2 min

Addressing base image vulnerabilities in application containers

Containerizing microservices introduces supply chain risks through vulnerable dependencies in base images.

#4 about 3 min

Mapping trust boundaries across frontend and backend services

Separating frontend systems from backend message brokers reduces the attack surface for bad actors.

#5 about 7 min

Managing authentication and authorization for cloud storage buckets

Configuring explicit bucket policies ensures only authorized identities can interact with sensitive cloud storage.

#6 about 3 min

Generating temporary access tokens with pre-signed URLs

Pre-signed URLs enable temporary anonymous access but introduce risks if private signing keys leak.

#7 about 2 min

Distributing and securing keys across cloud container workloads

Distributing long-lived access keys across Kubernetes containers increases the risk of endpoint compromise.

#8 about 3 min

Validating untrusted storage uploads with serverless cloud functions

Invoking a serverless function upon file upload provides scalable input validation for untrusted assets.

#9 about 2 min

Exploiting media transcoders via processing vulnerabilities in containers

Parsing untrusted media uploads in a transcoding container risks arbitrary code execution vulnerabilities.

#10 about 3 min

Escalating privileges from local container exploits to infrastructure

Compromising a single container provides access to environmental secrets and internal infrastructure.

#11 about 1 min

Mitigating container escalation paths using system call filters

Applying seccomp profiles improves container integrity by restricting unauthorized system interactions.

#12 about 3 min

Evaluating the security posture of microservices versus monolithic systems

Microservices effectively contain security breaches by complicating privilege escalation across isolated network boundaries.

#13 about 12 min

Addressing audience questions on security and microservice architectures

Technical discussion covers artificial intelligence in log analysis and the organizational tradeoffs of architectural decisions.

Matching moments

3:18 min

Transitioning from a monolith to a microservice architecture

Aleksandr Kalikov · LIVE

2:14 min

Evaluating data storage limitations and monolithic architectural challenges

George Asafev · WWC 2023

3:32 min

Transitioning from monolith architectures to microservices and Kubernetes

Liviu Costea · LIVE

3:07 min

Transitioning architecture to microservices at Netflix

Steve Upton Steve Upton · WWC 2022

3:38 min

Shifting from monolithic architectures to microservices and containers

Markus Kett Markus Kett · WWC 2022

1:39 min

Introduction to Kubernetes security challenges and opportunities

Marc Nimmerrichter · WWC 2022

More from WeAreDevelopers LIVE

Aliens in Quarantine, Python Deprecates Loops, and AI Buys Old Books - Zbyszek Tenerowicz thumbnail
5:43
5 days ago

Aliens in Quarantine, Python Deprecates Loops, and AI Buys Old Books - Zbyszek Tenerowicz

Chris Heilmann, Daniel Cranney

WeAreDevelopers LIVE - Node and Package Security thumbnail
1:08:30
5 days ago

WeAreDevelopers LIVE - Node and Package Security

Chris Heilmann, Daniel Cranney, Zbyszek Tenerowicz

WeAreDevelopers LIVE - Streaming HTML thumbnail
1:10:26
12 days ago

WeAreDevelopers LIVE - Streaming HTML

Chris Heilmann, Daniel Cranney, Jad Joubran

WeAreDevelopers LIVE - CODE100 at WeAreDevelopers Europe thumbnail
1:02:34
19 days ago

WeAreDevelopers LIVE - CODE100 at WeAreDevelopers Europe

Chris Heilmann, Daniel Cranney, Justin Halsall, Werner Jeschko, Nicole Jeschko, Mirco Tomić

WeAreDevelopers LIVE - Web Performance in an AI World thumbnail
1:07:59
26 days ago

WeAreDevelopers LIVE - Web Performance in an AI World

Chris Heilmann, Daniel Cranney

FIFA Hack, Midjourney Does Ultrasounds, and Trampoline Traffic Lights - Nicole Jeschko and Werner Jeschko thumbnail
5:55
about 2 months ago

FIFA Hack, Midjourney Does Ultrasounds, and Trampoline Traffic Lights - Nicole Jeschko and Werner Jeschko

Chris Heilmann, Daniel Cranney

Upcoming sessions on this topic

Open session

World Congress 2026 North America

Stop Running Mystery Meat in Production

Jeroen van Erp

Technical Advocate @ SUSE

Jeroen van Erp
Open session

World Congress 2026 North America

It passed auth, then production caught fire

Alex Olivier

Co-founder & CPO @ Cerbos | OpenID AuthZEN Co-chair

Alex Olivier
Open session

World Congress 2026 North America

rm -rf: Horror Stories From Unsandboxed AI Agents (and How Docker Fixes This)

Rishab Kumar

Staff Developer Evangelist @ Twilio

Rishab Kumar
Open session

World Congress 2026 North America

On the Public Clock: Open-Source Defense When You're Not in the Club

Nicholas Muy

VP Engineering Platform and Security at Scrut.io

Nicholas Muy
Open session

World Congress 2026 North America

Microservice Cognitive Index for Deploy Diagnosis and Change Impact

Sachin Gupta

Member of Technical Staff 2 at eBay

Sachin Gupta
Open session

World Congress 2026 North America

Run your agents in Kubernetes: Build once, deploy anywhere. But really?

Michal Salanci

Senior Systems Engineer at ESET Cybersecurity

Michal Salanci

Related videos

Microservices? Monoliths? An Annoying Discussion! thumbnail
25:05
WWC 2024 • almost 2 years ago

Microservices? Monoliths? An Annoying Discussion!

Eberhard Wolff

Microservices: how to get started with Spring Boot and Kubernetes thumbnail
1:02:46
LIVE • almost 5 years ago

Microservices: how to get started with Spring Boot and Kubernetes

Aleksandr Kalikov

Reliable scalability: How Amazon.com scales on AWS thumbnail
22:24
WWC 2024 • almost 2 years ago

Reliable scalability: How Amazon.com scales on AWS

Florian Mair

Microservice-Ready Without Microservices: Introducing Hexagonal Architecture in a Monolith thumbnail
37:24
Europe 2026 Virtual • about 1 month ago

Microservice-Ready Without Microservices: Introducing Hexagonal Architecture in a Monolith

Matthias Kauzmann

How to Destroy a Monolith? thumbnail
26:45
WWC 2025 • 12 months ago

How to Destroy a Monolith?

Babette Wagner

You can’t hack what you can’t see thumbnail
29:34
LIVE • almost 6 years ago

You can’t hack what you can’t see

Reto Kaeser

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.