Securing Access to Kubernetes Infrastructure with Zero Trust Principles
Learn how to apply zero trust principles to secure access to Kubernetes infrastructure across multiple environments, ensuring controlled and audited cluster access for various teams and systems.
Nurturing Security Permaculture - Kubernetes SIG Security Update
Explore Kubernetes SIG Security's community-driven approach to enhancing project and user security. Learn about recent updates, upcoming initiatives, and opportunities to contribute.
Implementing an Auditable Access Control Strategy Using Cluster Certificate Authority Rotation
Learn how to implement a zero-downtime strategy for rotating cluster certificate authorities and downstream certificates in Kubernetes, ensuring secure and auditable access control.
Kubernetes SIG Auth Deep Dive
Explore Kubernetes authentication, authorization, and security features with experts from Google, Microsoft, and Red Hat. Learn about ongoing projects and opportunities for involvement in SIG Auth.
How the Basics of Kubernetes Authentication Scale for Organizations
Explore Kubernetes RBAC for flexible team access. Learn basics, identity details, common issues, limitations, auditing, and real-world patterns. Includes live demos for DevOps culture support.
Securing the Superpowers: Who Loaded That eBPF Program?
Explore eBPF technology's power and security implications. Learn about auditing, monitoring, and enforcing eBPF program loading on Linux systems using Tetragon for enhanced system protection and accountability.
Adopting CDEvents and Embracing Interoperability in Continuous Delivery
Explore CDEvents' mission to connect and audit diverse continuous delivery tools, its integration progress, adoption challenges, and best practices for seamless software production automation.
Automating Enterprise and Industry Regulation Enforcement During Software Delivery
Learn to automate compliance with industry regulations during software delivery using OPA policies integrated with Spinnaker, enhancing CI/CD processes for enterprise development teams.
Mastering Kubernetes Access Management
Explore advanced Kubernetes access management techniques, focusing on security best practices and efficient user authorization strategies for cloud-native environments.
Amortising Direct Map Fragmentation
Explore techniques for optimizing memory management in Linux systems, focusing on strategies to reduce fragmentation in direct memory mapping.
Dear Security, Compliance, and Auditors - We're Sorry, Love DevOps
Explore the intersection of DevOps with security, compliance, and auditing. Learn strategies to bridge gaps and foster collaboration between these crucial IT domains.
Securing Generative AI - Back to the Future Edition
Explore a trust framework for generative AI, addressing concerns like data handling, PII leakage, and LLM manipulation through access control, authenticity, auditing, and data protection measures.
Binary Policy with IMA and AppArmor for Linux Workstations
Explore Google's innovative approach to Linux workstation security using IMA signatures and AppArmor for binary policy enforcement, addressing challenges in large-scale implementation.
Automating Governance - From Commit to Production with Modern DevOps Practices
Discover modern governance strategies to automate software supply chain processes, ensuring security, compliance, and audit requirements while achieving no-human-hands deployment from commit to production.
DevOps and Security - The Facts, The Myths, The Legend
Debunking myths about DevOps and security, exploring how proper implementation can enhance application security, and discussing its impact on organizational processes and auditing.
Next Generation Authorization: Implementing Okta FGA - DevDay 2023
Explore Okta FGA's flexible, powerful authorization solution. Learn its mechanics, modeling language, and easy integration for improved decision-making and auditability in your applications.
Docker and Legal Compliance - Navigating the Containerized World
Explore legal compliance in Docker deployments, covering best practices, tools, and solutions for audits and continuous integration in containerized environments.
Accelerating Financial Processing and Reporting with Pre-Trained and Custom ML Models
Innovative approach using pre-trained and custom ML models to enhance financial data processing and reporting, streamlining workflows and improving efficiency in generating insights for the finance industry.
The Right Feature at the Right Place - Authorization Example
Explore moving authorization from code to a readable, accessible place using Open Policy Agent and Apache APISIX API Gateway for improved system auditability.
Securing India - The CERT-In Way
Panel discussion on CERT-IN's notification for reporting security breaches, emphasizing timely incident reporting, organizational awareness, and citizen precautions to enhance India's cybersecurity posture.
Mapping the Penetration Tester's Mind - 0 to Root in 60 Min
Gain insight into penetration testing methodology, from project initiation to reporting. Learn how testers approach engagements and acquire knowledge to select the right professional for your security needs.