WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
WeAreDevelopers LIVE • Feb 24, 2022

Security Challenges of Breaking A Monolith

Reinhard Kugler

Decomposing your monolith expands your external attack surface, yet strictly limits a vulnerability's blast radius. Discover how to map trust boundaries and confidently secure modern distributed architectures.

Pause
Mute Enter Fullscreen
#1 about 8 min

Building a monolithic video streaming and sharing application

How hardware scaling limitations drive the shift from a monolithic application to distributed services.

#2 about 2 min

Breaking the monolith into isolated microservices and components

Extracting specific functions into microservices solves resource idling and performance bottlenecks.

#3 about 2 min

Addressing base image vulnerabilities in application containers

Containerizing microservices introduces supply chain risks through vulnerable dependencies in base images.

#4 about 3 min

Mapping trust boundaries across frontend and backend services

Separating frontend systems from backend message brokers reduces the attack surface for bad actors.

#5 about 7 min

Managing authentication and authorization for cloud storage buckets

Configuring explicit bucket policies ensures only authorized identities can interact with sensitive cloud storage.

#6 about 3 min

Generating temporary access tokens with pre-signed URLs

Pre-signed URLs enable temporary anonymous access but introduce risks if private signing keys leak.

#7 about 2 min

Distributing and securing keys across cloud container workloads

Distributing long-lived access keys across Kubernetes containers increases the risk of endpoint compromise.

#8 about 3 min

Validating untrusted storage uploads with serverless cloud functions

Invoking a serverless function upon file upload provides scalable input validation for untrusted assets.

#9 about 2 min

Exploiting media transcoders via processing vulnerabilities in containers

Parsing untrusted media uploads in a transcoding container risks arbitrary code execution vulnerabilities.

#10 about 3 min

Escalating privileges from local container exploits to infrastructure

Compromising a single container provides access to environmental secrets and internal infrastructure.

#11 about 1 min

Mitigating container escalation paths using system call filters

Applying seccomp profiles improves container integrity by restricting unauthorized system interactions.

#12 about 3 min

Evaluating the security posture of microservices versus monolithic systems

Microservices effectively contain security breaches by complicating privilege escalation across isolated network boundaries.

#13 about 12 min

Addressing audience questions on security and microservice architectures

Technical discussion covers artificial intelligence in log analysis and the organizational tradeoffs of architectural decisions.

Matching moments

3:18 min

Transitioning from a monolith to a microservice architecture

Aleksandr Kalikov · LIVE

2:14 min

Evaluating data storage limitations and monolithic architectural challenges

George Asafev · World Congress 2023

3:32 min

Transitioning from monolith architectures to microservices and Kubernetes

Liviu Costea · LIVE

3:07 min

Transitioning architecture to microservices at Netflix

Steve Upton Steve Upton · World Congress 2022

3:38 min

Shifting from monolithic architectures to microservices and containers

Markus Kett Markus Kett · World Congress 2022

1:39 min

Introduction to Kubernetes security challenges and opportunities

Marc Nimmerrichter · World Congress 2022

More from WeAreDevelopers LIVE

WeAreDevelopers LIVE - Tech Education in Two Languages thumbnail
1:00:18
4 days ago

WeAreDevelopers LIVE - Tech Education in Two Languages

Daniel Cranney, Roxy Rodriguez-Becker

WeAreDevelopers LIVE - Playing in Production thumbnail
1:06:40
11 days ago

WeAreDevelopers LIVE - Playing in Production

Andrew MacLean, Daniel Cranney, Christian Heilmann

WeAreDevelopers LIVE - Is CSS Catching Up to Flash? thumbnail
1:03:33
25 days ago

WeAreDevelopers LIVE - Is CSS Catching Up to Flash?

Chris Heilmann, Daniel Cranney, Bramus Van Damme

WeAreDevelopers LIVE - Project Chopin: Make Your Team and Agents Play Along thumbnail
1:21:17
about 1 month ago

WeAreDevelopers LIVE - Project Chopin: Make Your Team and Agents Play Along

Chris Heilmann, Daniel Cranney, Krzysztof Cieślak

Fake or News - AI Toothbrushes, Carrier Pigeon Tech & Life on Mars - Krzysztof Cieślak thumbnail
4:23
about 1 month ago

Fake or News - AI Toothbrushes, Carrier Pigeon Tech & Life on Mars - Krzysztof Cieślak

Chris Heilmann, Daniel Cranney

WeAreDevelopers LIVE - Open Source Agent Toolkits thumbnail
1:00:38
about 1 month ago

WeAreDevelopers LIVE - Open Source Agent Toolkits

Chris Heilmann, Daniel Cranney, Eddie Jaoude

Upcoming sessions on this topic

Open session

Supply Chain Security for the Everyday Engineer

  • Pradumna Saraf

    Kestra Technologies

    Quality Assurance Engineer

Open session

Shipping MCP to Real Users: Scaling, Auth, and the PII Leak You Didn't See Coming

  • Hadar Geva

    Myop

    CTO & Co-founder

Open session

Multi-Cloud Isn't a Project. It's a Side Effect.

  • Antonio Mendoza Pérez

    Temporal Technologies

    Staff Developer Success Engineer

  • Gaurav Thadani

    Temporal

    Staff Developer Success Engineer

Open session

How We Cut Our API's p99 Latency from Minutes to Under a Second

  • Deepak Agrawal

    Atlassian

    Principal Software Engineer

Open session

What I Got Wrong Shipping an MCP Server for Live Infrastructure

  • Pritesh Kiri

    Harness

    Developer Relations Engineer

Open session

Beware of Strangers Bearing Code: Open Source Trust in the Agent Era

  • Vikram Vaswani

    Consultant

Related videos

Microservices? Monoliths? An Annoying Discussion! thumbnail
25:05
World Congress 2024 • about 2 years ago

Microservices? Monoliths? An Annoying Discussion!

Eberhard Wolff

Stop Running Mystery Meat in Production thumbnail
24:12
World Congress 2026 North America • 17 days ago

Stop Running Mystery Meat in Production

Jeroen van Erp

Microservices: how to get started with Spring Boot and Kubernetes thumbnail
1:02:46
LIVE • about 5 years ago

Microservices: how to get started with Spring Boot and Kubernetes

Aleksandr Kalikov

Reliable scalability: How Amazon.com scales on AWS thumbnail
22:24
World Congress 2024 • about 2 years ago

Reliable scalability: How Amazon.com scales on AWS

Florian Mair

Microservice-Ready Without Microservices: Introducing Hexagonal Architecture in a Monolith thumbnail
37:24
Europe 2026 Virtual • 3 months ago

Microservice-Ready Without Microservices: Introducing Hexagonal Architecture in a Monolith

Matthias Kauzmann

How to Destroy a Monolith? thumbnail
26:45
World Congress 2025 • about 1 year ago

How to Destroy a Monolith?

Babette Wagner

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.