Introduction to CNCF Security Special Interest Group
Explore CNCF Security SIG's history, achievements, and ongoing efforts in cloud-native security. Learn about authentication, authorization, auditing, and policy enforcement in this informative presentation.
Can SaaS Ever Be Secure? - Security Risks and Compliance in Cloud Services
Explore security challenges and solutions for SaaS, including regulatory compliance, data transfers, and risk assessment. Learn key takeaways for ensuring secure cloud-based services.
Navigating the Security Landscape of a Cloud-First World
Navigating cloud security challenges: shared responsibility, data protection, and enterprise ownership in the era of rapid cloud adoption. Strategies for maintaining security in cloud migrations.
Public Cloud PCI Compliance - Challenges and Solutions
Explore cloud security challenges, PCI compliance in public clouds, and innovative approaches to enhance security posture and meet regulatory requirements.
Empowerment Through Autonomy - SIG Security Overview and Updates
Explore Kubernetes security initiatives, including documentation, audits, and tooling. Learn about the new Self-Assessments subproject and how to contribute to improving Kubernetes safety.
Smart Contract Auditing - Episode 3
Explore smart contract auditing through a real-world example, gaining insights into security practices and vulnerability detection in blockchain technology.
WAVE: A Decentralized Authorization Framework from Transparency Logs
Explore decentralized authorization with WAVE, a framework leveraging transparency logs. Learn about challenges, graph-based approaches, and comparisons to traditional systems.
Securing Access to Kubernetes Infrastructure with Zero Trust Principles
Learn how to apply zero trust principles to secure access to Kubernetes infrastructure across multiple environments, ensuring controlled and audited cluster access for various teams and systems.
Nurturing Security Permaculture - Kubernetes SIG Security Update
Explore Kubernetes SIG Security's community-driven approach to enhancing project and user security. Learn about recent updates, upcoming initiatives, and opportunities to contribute.
Implementing an Auditable Access Control Strategy Using Cluster Certificate Authority Rotation
Learn how to implement a zero-downtime strategy for rotating cluster certificate authorities and downstream certificates in Kubernetes, ensuring secure and auditable access control.
Kubernetes SIG Auth Deep Dive
Explore Kubernetes authentication, authorization, and security features with experts from Google, Microsoft, and Red Hat. Learn about ongoing projects and opportunities for involvement in SIG Auth.
How the Basics of Kubernetes Authentication Scale for Organizations
Explore Kubernetes RBAC for flexible team access. Learn basics, identity details, common issues, limitations, auditing, and real-world patterns. Includes live demos for DevOps culture support.
Securing the Superpowers: Who Loaded That eBPF Program?
Explore eBPF technology's power and security implications. Learn about auditing, monitoring, and enforcing eBPF program loading on Linux systems using Tetragon for enhanced system protection and accountability.
Adopting CDEvents and Embracing Interoperability in Continuous Delivery
Explore CDEvents' mission to connect and audit diverse continuous delivery tools, its integration progress, adoption challenges, and best practices for seamless software production automation.
Automating Enterprise and Industry Regulation Enforcement During Software Delivery
Learn to automate compliance with industry regulations during software delivery using OPA policies integrated with Spinnaker, enhancing CI/CD processes for enterprise development teams.
Mastering Kubernetes Access Management
Explore advanced Kubernetes access management techniques, focusing on security best practices and efficient user authorization strategies for cloud-native environments.
Dear Security, Compliance, and Auditors - We're Sorry, Love DevOps
Explore the intersection of DevOps with security, compliance, and auditing. Learn strategies to bridge gaps and foster collaboration between these crucial IT domains.
Securing Generative AI - Back to the Future Edition
Explore a trust framework for generative AI, addressing concerns like data handling, PII leakage, and LLM manipulation through access control, authenticity, auditing, and data protection measures.
Binary Policy with IMA and AppArmor for Linux Workstations
Explore Google's innovative approach to Linux workstation security using IMA signatures and AppArmor for binary policy enforcement, addressing challenges in large-scale implementation.
Automating Governance - From Commit to Production with Modern DevOps Practices
Discover modern governance strategies to automate software supply chain processes, ensuring security, compliance, and audit requirements while achieving no-human-hands deployment from commit to production.
DevOps and Security - The Facts, The Myths, The Legend
Debunking myths about DevOps and security, exploring how proper implementation can enhance application security, and discussing its impact on organizational processes and auditing.