Closing the BPF Map Permission Loophole
Explore a security vulnerability in BPF map permissions and its impact on access control. Learn about proposed solutions to enhance the integrity of BPF map operations in Linux systems.
A Hard Multi-tenancy Solution - Use Case, Challenges and Work
Explore hard multi-tenancy in Kubernetes: use cases, challenges, and solutions for strong isolation among untrusted tenants in shared clusters, with insights and a demo.
Securing Your Healthcare Data with OPA
Explore OPA-driven security for healthcare data, focusing on policy-enabled apps, least-privilege access, and real-world examples of protecting sensitive information in microservice architectures.
Enabling Multi-user Machine Learning Workflows for Kubeflow Pipelines
Explore multi-user workflows for Kubeflow Pipelines using Kubernetes-native solutions. Learn how to implement access control, authentication, and authorization for machine learning platforms.
Hey, Did You Hear About This New CVE? - A Vulnerability Response Playbook
Develop a vulnerability response playbook for Kubernetes infrastructure, covering preparation, mitigation, and cleanup strategies for complex security issues using tools like audit logs and network policies.
AWS Controllers for Kubernetes - The AWS API Universe Now Kubeified
Explore AWS Controllers for Kubernetes (ACK), bridging AWS service APIs and Kubernetes for seamless resource management using familiar Kubernetes tools and configurations.
SAFE - A Cloud Native Security Working Group
Explore cloud native security with SAFE, a working group addressing access controls and safety concerns in modern architectures, presented by Liz Rice from Aqua Security.
Experiences From Running Istio in a K8s Production Environment
Insights on deploying Istio in multi-cloud Kubernetes environments, covering traffic control, security, and overcoming challenges in production settings.
Intro - Harbor
Explore Harbor, an open-source cloud-native registry for secure container image management. Learn about RBAC, vulnerability scanning, image distribution, replication, and provenance through real-world use cases.
What Do You Mean K8s Doesn't Have Users? How Do I Manage User Access Then?
Explore Kubernetes authentication and authorization, including user access management, permissions, RBAC, and security best practices for efficient cluster administration.
Modern Least Privilege with DevSecOps
Explore modern least privilege principles in DevSecOps, focusing on platform teams, continuous delivery, and scaling to zero for enhanced security and efficiency in cloud-native environments.
How NOT to Start with Kubernetes
Practical insights on Kubernetes adoption, covering networking, resource management, security, and common pitfalls to avoid for a smoother implementation and operation.
Data Security - Theoretical and Real World Approaches to Compartmentalization
Explore theoretical and practical approaches to data security in cloud environments, covering formal methods, secure languages, and container-based storage solutions for enhanced protection and reliability.
Secure Your GitOps - How to Implement a Robust Security Strategy
Discover strategies for implementing robust security in GitOps, covering access control, multi-tenant management, and best practices for securing critical components in automated deployment workflows.
GraphQL Authentication and Authorization at Scale
Explore Unity's approach to GraphQL authentication and authorization at scale, focusing on federation, gateway-level implementation, key design decisions, and wide-reaching benefits.
Building JavaScript and Mobile - Native Clients for Token-Based Architectures
Learn token-based authentication for JavaScript and mobile clients, covering protocols, token management, and client-specific approaches for modern API-backed applications.
Gotchas Using Terraform in a Secure Delivery Pipeline
Secure Terraform implementation in CI/CD pipelines: gotchas, best practices, and real-world solutions for managing AWS infrastructure, addressing security, versioning, and automation challenges.
What Vulnerabilities? Live Hacking of Containers and Orchestrators
Live hacking demonstration exploring container and orchestrator vulnerabilities, showcasing real-world attack scenarios and defense strategies. Emphasizes best practices, security policies, and monitoring for effective prevention.
The OWASP Top Ten Proactive Controls 2018
Explore critical security techniques for web application development, including secure coding practices, data protection, and access control, as outlined in the OWASP Top Ten Proactive Controls 2018.
Best Practices for Security and Compliance in Key Vault
Explore essential strategies for robust security and compliance in Key Vault environments, covering data protection, access controls, and encryption measures.
Hardening JavaScript for Supply Chain Security
Explore advanced techniques for securing JavaScript dependencies, including Compartments and LavaMoat, to protect against supply chain attacks and enhance runtime security.