DevSecOps Best Practices in Cloud Native Computing - CMCC Case Study
探索中国移动通信公司的DevSecOps最佳实践，了解如何将安全无缝集成到云原生开发和运维流程中，提高效率和安全性。
Taking Control of Reliability in Cloud Native Services - Issues and Best Practices
Explore strategies for maintaining reliability in cloud native services, addressing common pitfalls, best practices, and responsibilities, with insights from a fintech case study.
How to Migrate NF or VNF to CNF Without Vendor Lock-In
Learn to migrate network functions to cloud-native, reducing costs and avoiding vendor lock-in. Explore open-source projects, legacy protocol handling, and 5G API preparation for flexible, future-proof solutions.
4 Essentials for Evaluating Crowdsourced Security Platforms - Rapyd's Journey
Explore crowdsourced security platforms with Rapyd and Bugcrowd experts. Learn evaluation strategies and insights from Rapyd's experience to enhance your organization's security approach.
Path to Production: Sustainable Compliance in Strict Environments
Discover strategies for achieving sustainable compliance in highly regulated environments, focusing on DoD practices using Big Bang, Iron Bank, and Kyverno for faster, secure-by-default Kubernetes deployments.
What Data Tells Us About Software Supply Chain Security and What To Do About It
Experts analyze data from surveys and reports on cloud-native and open source software security, providing actionable insights to improve software supply chain security for organizations and projects.
Supply Chain Security: Building a Knowledge Graph for Artifact Relationships
Explore a supply chain knowledge graph tool that enhances understanding of artifact relationships, enabling better assessment of vulnerabilities and dependencies in software development.
Know Your Dependencies - A Guide to Automating Dependency Assurance
Explore automated dependency assurance mechanisms for enhanced visibility into software components, addressing vulnerabilities and license obligations while maintaining development velocity.
SBOM is Coming - Why You Should Care and How You Can Help
Explore the importance of Software Bill of Materials (SBOM) in cloud-native ecosystems, its impact on security, and how you can contribute to its implementation and adoption.
Turn Contributors into Maintainers with TAG Contributor Strategy
Learn strategies to transform contributors into maintainers using a ladder framework and governance documentation. Discover tools for promoting, recognizing, and evolving roles within CNCF projects.
SBOM: The Rest of the Story - Understanding Software Bill of Materials
Experts discuss Software Bill of Materials (SBOM), addressing misconceptions, sharing challenges, and exploring implementation strategies for enhanced software supply chain security.
Change is Hard - Securing the Future Today
Explore the socio-technical challenges of implementing modern security practices, blending research and anecdotes to address resistance to change and holistic problem-solving approaches.
Application Security for Better Business Value - Expert Insights
Experts discuss how application security practices in cloud-native environments can reduce risks, enhance compliance, and drive innovation, leading to improved business value.
More Than Just a Pretty Penny - Why You Need Cybersecurity in Your Culture
Discover strategies to integrate cybersecurity into workplace culture, empowering employees to identify and address potential risks, fostering a safer digital environment for your organization.
Fighting the Next War - Future Threats to OSS and Software Supply Chain Security
Explore future threats to open-source software and supply chain security, discussing emerging attack vectors and strategies for OSS projects to prepare and protect against evolving risks.
Software Supply Chain Security with TAG Security
Explore software supply chain security with insights on guidance, resources, and recent developments. Learn about the whitepaper, compromise catalog, and reference architecture for secure supply chains.
Untrusted Execution - Attacking the Cloud Native Supply Chain
Explore cloud native supply chain vulnerabilities, threat modeling, and security controls. Learn about trusted execution environments and end-to-end security solutions for protecting complex systems.
Sharing Security Secrets: How to Encourage Security Advocates
Discover strategies for fostering a company-wide security culture, educating non-security teams, and implementing a successful security advocates program to enhance organizational data protection and service availability.
Learning from Supply Chain Failures and Best Practices in Other Industries
Explore supply chain best practices and failures across industries to enhance software supply chain security. Gain insights from physical world processes and apply lessons to critical infrastructure protection.
Security Threat Modeling Live from Scratch Session
Hands-on workshop demonstrating lightweight threat modeling for CNCF projects, led by Andrew Martin. Learn practical techniques to identify and mitigate security risks in cloud-native environments.
How to Trust Your Open Source Software Using Scorecards
Explore OSSF Scorecards to assess open source software health, automate risk evaluation, and build dependency policies for informed decision-making in software development.