Sandboxing Wasm Programs - Syscall Isolation Techniques for Edge Computing
Explore Wasm runtime sandboxing techniques, including SELinux, cgroups, and seccomp. Learn about Callander, a novel syscall sandboxing tool, to enhance security in edge computing platforms.
Spring Framework 2024 Keynote
Explore the latest innovations and future directions of the Spring Framework in this comprehensive keynote from the Spring I/O 2024 conference in Barcelona.
Apps Are the New Edge - Mobile, Edge and Cloud
Explore the evolving landscape of app deployment across mobile, edge, and cloud environments, examining their impact on modern technology infrastructure and development practices.
Applications, Cloud, and Hackers - Security Challenges in Modern Computing - Lecture 1
Explore cloud application security challenges and solutions in this talk, covering threat landscapes, attack vectors, and defensive strategies for modern cloud environments.
Building Secured Container Images with Wolfi - Zero CVE Container Development
Discover how to achieve zero CVE container security using Wolfi OS, a modern alternative to traditional distroless solutions, with practical insights from VPBank's successful implementation.
The GitHub Actions Worm - Understanding CI/CD Platform Vulnerabilities
Dive into the security vulnerabilities of GitHub Actions, exploring how malicious code can spread through Action dependencies and learning essential defense strategies against CI/CD platform attacks.
Bypassing Falco - How to Compromise a Cluster without Tripping the SOC
Explore techniques to bypass Falco's default ruleset, enabling stealthy cluster compromise. Learn 9 bypass classes for target enumeration, privilege escalation, and lateral movement without alerting security teams.
Extend Falco with Plugins - Trigger Alerts with Any Stream of Events
Learn to extend Falco's capabilities with plugins, enabling custom event streams and alerts. Explore architecture, plugin types, SDK usage, and real-world applications for enhanced cloud-native security monitoring.
PolicyReport CRD - Managing Admission Control, Runtime, and Scan Reports
Explore PolicyReport CRD for standardized Kubernetes policy management. Learn about adapters for various engines and discover Policy Reporter's integration capabilities.
Keep Calm and Containerd On - Migrating Kubernetes Clusters from Docker to Containerd
Explore Intuit's journey migrating 200+ Kubernetes clusters to containerd, addressing challenges in logging, SELinux, GPU support, and cluster addons. Learn valuable lessons for a smooth transition.
A Treasure Map of Hacking and Defending Kubernetes
Comprehensive guide to Kubernetes security: threat modeling, attack demonstrations, defense strategies, and advanced topics like workload identity and runtime hardening for robust cluster protection.
Falco to Pluginfinity and Beyond - Cloud-Native Runtime Security
Explore Falco's evolution as a cloud-native runtime security project, including its new plugin system for enhanced cloud security and threat detection in Kubernetes environments.
gVisor and Falco - Strengthening Kubernetes and Container Security with Visibility
Explore container sandboxing with gVisor and enhance security monitoring using Falco, improving Kubernetes protection without compromising visibility.
Foster Secure Innovation with Your Kubernetes Platform
Explore comprehensive security strategies for Kubernetes, covering infrastructure protection, supply chain security, and runtime safeguards in mission-critical cloud-native environments.
Demystifying Secure Application Communication with Zero Trust and Istio Without Sidecars
Explore zero-trust architecture for cloud-native apps using mTLS and Istio's ambient mesh. Learn to secure multi-cluster communication without sidecars or app restarts.
Using Falco and eBPF to Protect Your Applications
Explore Falco and eBPF for application protection. Learn about runtime security, syscalls, and Falco's architecture. Discover how to implement, connect, and contribute to this powerful security tool.
How to Contain Security in Your Containers
Learn essential strategies for securing containerized applications, focusing on best practices and tools to mitigate risks in container environments.
Runtime Kubernetes Security: Threat Detection with Falcosidekick
Explore runtime Kubernetes security and threat detection using Falcosidekick. Learn practical scenarios, UI demonstrations, and testing techniques for enhanced cluster protection.
Authorization at Workday - Securing Enterprise Software Solutions
Explore Workday's decade-long journey in authorization, focusing on platform solutions, reusable components, and maintaining industry-standard security while adapting to evolving threats and acquisitions.
Bypassing Falco - Cluster Compromise Without Tripping the SOC
Explore techniques for evading Falco detection in Kubernetes clusters, learning how to compromise systems without alerting security operations centers.
What Cryptographic Library Developers Think About Timing Attacks
Explore cryptographic library developers' perspectives on timing attacks, their mitigation strategies, and the challenges in implementing secure cryptographic systems.