Harnessing Permissioned Blockchains for Security and Compliance in Healthcare Data Management
Explore how permissioned blockchains enhance security and compliance in healthcare data management, addressing vital concerns and revolutionizing patient record protection and clinical trial processes.
Open Source and Fast Decision Making in DevOps - MLOps Podcast Episode 164
Explore open-source practices, automation, and version control for operational independence in infrastructure management with RackN CEO Rob Hirschfeld.
Mish-Mesh: Abusing the Service Mesh to Compromise Kubernetes Environments
Discover critical security vulnerabilities in Kubernetes service mesh deployments and learn defensive strategies against unauthorized access, system compromises, and secret exposure.
Pushing Authorization Further: CEL, Selectors and RBAC in Kubernetes
Explore recent authorization advancements in Kubernetes, including CEL integration, selector-aware features, and potential RBAC enhancements for more dynamic runtime security controls.
Rogue No More: Securing Kubernetes with Node-Specific Restrictions
Discover essential security enhancements for Kubernetes that prevent escalation attacks through node-specific restrictions, bounded service account tokens, and validating admission policies for robust infrastructure protection.
Seccomp and eBPF: Understanding Container Security and Kernel Access Control
Explore container security hardening through Seccomp and eBPF, comparing their approaches to limiting Linux kernel access and implementing the principle of least privilege in Kubernetes environments.
Solving Access Control Problems with FHIR Information Gateway in Healthcare Solutions
Master FHIR Information Gateway's access control features to enhance healthcare data security, implement robust authorization mechanisms, and leverage SMART on FHIR scopes for digital health solutions.
How GitOps Changes Identity and RBAC Management with OAuth2 and OIDC
Discover how to streamline GitOps permissions using OAuth2-Token Exchange, Dex, and GitHub Teams with ArgoCD AppProjects for consistent repository access and automated RBAC management.
Taming the Chaos: Fine-Grained RBAC in Argo CD for Incident Avoidance
Discover how to implement fine-grained RBAC policies in Argo CD to prevent accidental actions and enhance security, drawing from Intuit's experience in protecting production systems and enabling confident development.
Building Advanced Permission Systems - From RBAC to ABAC Implementation
Master advanced permission systems implementation, from basic role-based access control (RBAC) to sophisticated attribute-based access control (ABAC), with practical examples and real-world applications.
Auditing Kubernetes Users: Tracking Security Holes
Discover how to implement effective Kubernetes auditing mechanisms, track user activities, and detect security vulnerabilities through RBAC analysis and audit API implementation.
Watching the Watchers - The Hidden Risks of Container Scanning Tools
Explore critical security risks and mitigation strategies for container vulnerability scanning tools, focusing on system protection, secure configurations, and defense-in-depth approaches.
IBAC for Developers - Automating Istio Authorization Policies Using Envoy Metrics With a Declarative Approach
Master Istio Authorization Policies automation through Envoy metrics, implementing identity-based access control with declarative methods for enhanced cloud security.
5 Essential Ansible Security Features for IT Automation
Discover how to enhance IT infrastructure security through 5 essential Ansible features, including SSH configuration, user management, vault encryption, firewall setup, and package updates.
How to Shift-Left and Find Critical Authorization Vulnerabilities Throughout Your CI/CD Pipeline
Discover effective strategies for detecting and preventing authorization vulnerabilities in DevSecOps pipelines, focusing on early identification and remediation across multiple application roles and APIs.
Safeguarding Machine Learning Systems - A Comprehensive Security Plan
Discover a holistic security framework for ML systems, covering data protection, model fortification, platform security, compliance measures, and human-centric safeguards for robust AI deployment.
Workload Identity Federation - Stop Using Long-Lived Credentials in Kubernetes Security
Discover how to implement workload identity federation in Kubernetes, enhancing security through credential management while improving developer experience and reducing system outages.
Multi-Tier Security in WasmCloud: From Developer Constraints to Platform Extensibility
Explore WasmCloud's multi-tier security model for distributed WebAssembly applications, focusing on deny-by-default modes, capability declaration, and pluggable security services implementation.
Secure and Resilient Windows Strategy from Client to Cloud
Discover comprehensive Windows security strategies across client and cloud environments, featuring Windows 11, Windows 365, and Azure Virtual Desktop for enhanced business continuity and data protection.
Accelerate Your Zero Trust Journey - Unifying Identity and Network Access
Discover how to strengthen organizational security through Microsoft's identity-centric Security Service Edge solution, unifying identity and network access while securing applications and resources across all environments.
ZT&T Intent-Based Networking and Blockchain-Driven Approach for Zero Trust and Touch
Explore Zero Trust Networking through an innovative blockchain-driven approach, focusing on secure service policies, NFT-based access tokens, and practical implementation in network infrastructure.