Dor Serero
Software Engineer
Tel Aviv, Israel
Actions
Dor Serero is a software engineer with experience building distributed systems and cloud security across AWS, Microsoft, and Google. Passionate about Open-source, Linux and eBPF, he is the founder and maintainer of Micromize and a frequent contributor to CNCF Inspektor Gadget. Outside of work, you can find Dor spending time with his wife and two daughters or holding a video game controller.
Badges
Area of Expertise
Topics
Micromize: Keeping Container Semantics at Runtime
Cloud native workloads are more secure when they stay immutable, minimal, predictable, and limited to the behavior they were designed to have. By default, containers provide some level of isolation, but they do not fully enforce this opinionated model at runtime. A workload can still drift, execute unexpected code, or reach kernel functionality it should never need.
This poster presents Micromize, an open source project that uses eBPF LSM to preserve well-formed cloud native workload behavior after deployment. Micromize narrows runtime behavior and reduces unnecessary kernel exposure, helping close classes of attacks that depend on mutability, unexpected execution, or access to irrelevant kernel interfaces.
We will show the design, tradeoffs, and open questions behind enforcing stricter runtime semantics for workloads that are intentionally built to be immutable and predictable.
Auto EKS Under the Hood: A Deep Dive into Bottlerocket
Bottlerocket is the operating system powering worker nodes in Auto EKS. It’s minimal, opinionated, and built for containers. This session deep-dives into Bottlerocket’s design decisions, why it looks nothing like a traditional Linux host, and what that means when migrating workloads. We’ll examine the security posture, the architectural trade-offs, and the real-world patterns that break when moving from Amazon Linux.
What Doesn’t Kill You Makes You Stronger: The Vulnerabilities That Redefined Kubernetes Security
A decade ago runC escape CVE-2019-5736 proved a single process could seize an entire node. Five years later, CRI-O’s cr8escape showed the threat hadn’t gone away, it just moved. We’ll sprint through five pivotal CVEs that rewrote Kubernetes threat models and examine how these vulnerabilities were discovered, exploited, mitigated and we’ll uncover patterns and lessons that have shaped the security landscape.
Instead of a history lesson, we’ll decode each incident into a reusable threat-model pattern and will describe what capability was abused, which boundary failed, and which control closed the gap. Alongside the controls that were built into Kubernetes, we’ll spotlight the open-source tools that each crisis propelled into the cloud-native landscape and explain why operators still rely on them today.
Attendees will gain insight into how the security of containerized workloads has matured and explore the shifts within the ecosystem that have driven today’s increased resilience.
Reinventing Seccomp for Fun and Profiles
Seccomp has long been a critical security feature in the Linux kernel, as a powerful tool for access control. With the emergence of eBPF, the landscape of kernel security has started evolving rapidly. It offers opportunities for improving and extending security policies. In this talk we will show how to achieve some of seccomp's capabilities and extend them using eBPF and KRSI in security use cases.
The talk will give an overview of Seccomp in general and in Kubernetes, focus on its importance in securing containerized workloads. We will review applicable eBPF capabilities, showing how it changes the way we can inspect and filter syscalls at runtime. We will introduce KRSI and LSM, showing how they can enhance kernel security.
The session will end with a demo of our PoC that leverages eBPF and KRSI to create a modern alternative to seccomp. Illustrating a real-world option, will provide attendees with practical knowledge on how to reinvent Seccomp for enhanced security.
AWS IL Community Day 2026 Sessionize Event
CNCF-hosted Co-located Events North America 2025 Sessionize Event
CNCF-hosted Co-located Events North America 2024 Sessionize Event
Please note that Sessionize is not responsible for the accuracy or validity of the data provided by speakers. If you suspect this profile to be fake or spam, please let us know.
Jump to top