Cloud Attack Surface Management
Explore cloud security challenges and strategies for effective attack surface management in this insightful keynote by Alex Shulman Peleg.
15 Years of OWASP Top 10 - Has the Cloud Made a Difference?
Explore the evolution of web application security over 15 years, examining the impact of cloud computing on OWASP Top 10 vulnerabilities and current cybersecurity challenges.
Azure Vulnerability Testbed (AzGOAT) - Understanding and Hardening Azure Security
Explore Azure security vulnerabilities and defenses with AzGOAT, a lab environment for understanding attack surfaces, designing secure solutions, and minimizing threats in Azure environments.
Abusing Cloud Apps 101 - Command and Control
Explore techniques for exploiting cloud applications as command and control infrastructure, focusing on security vulnerabilities and defensive strategies.
Cloud Custodian - Proactive Governance of Your Cloud, Cluster, and Code
Discover proactive governance for cloud, cluster, and code with Cloud Custodian. Learn to manage resources efficiently and enhance security across your infrastructure.
Standardization and Security - Improving Cloud Security Posture Through Standardization
Explore how Northwestern Mutual enhanced cloud security through standardization, addressing the paradox of choice in development tools and patterns to improve efficiency and reduce vulnerabilities.
Taming Attestation for Cloud Native Edge Security with Parsec
Explore how Parsec simplifies hardware-backed security and attestation for edge devices, enabling secure communication with cloud services across diverse ecosystems.
Mapping Motives: Analysis of 2,000 Enterprise Cloud Detections - Strengthening Multi-Cloud SOC
Analysis of 2,000 cloud detections reveals enterprise control patterns, gaps, and attacker motives. Learn to strengthen multi-cloud security operations with actionable insights and MITRE ATT&CK framework application.
Lessons from 7 Headline-Grabbing Cloud Security Breaches
Analyze 7 real cloud security breaches, exploring attack methods, defense strategies, and specific takeaways to enhance cloud infrastructure protection and avoid similar vulnerabilities.
Securing the Cloud with Canonical Kubernetes and Kubescape
Learn to secure cloud environments using Canonical Kubernetes and Kubescape, exploring key strategies and tools for robust protection in modern containerized infrastructures.
What's New in Kyverno - Cloud Native Policy Management
Explore the latest updates and features in Kyverno, enhancing Kubernetes policy management and automation for improved cloud-native application security and compliance.
Hacking Cloud Native Applications Through Open Source
Explore techniques for hacking Cloud Native applications using open-source tools, focusing on security vulnerabilities and mitigation strategies in containerized environments.
Don't Mind the Gap - Securely Accessing Cloud Resources with SPIFFE/SPIRE
Explore secure cloud resource access using SPIFFE/SPIRE for identity federation. Learn to access AWS and other services without managing API keys, simplifying cross-cloud interactions.
Addressing Evolving Threat Models in Cloud Security with Open-Source Software
Explore evolving cloud security threats and learn to address them using open-source solutions, focusing on practical strategies and real-world use cases for robust cloud-native security.
Addressing Evolving Threat Models in Cloud Security with Open Source Software
Explore evolving cloud security threats and learn strategies to address them using open source tools, focusing on context-aware scanning, threat graphs, and efficient alert management.
From Secure Container to Secure Service
Explore advancements in secure container technologies and their integration with ServiceMesh for enhanced Kubernetes security. Learn about performance improvements, lightweight hypervisors, and end-to-end service protection strategies.
Cross-Tenant Request Forgery Attack in Multi-Tenancy Environments
Unveiling security vulnerabilities in multi-tenant SaaS platforms using OAuth, focusing on the "Cross-Tenant Request Forgery" attack and discussing potential remediations for developers.
Cloud Custodian - State of the Project and Future Developments
Explore Cloud Custodian's 2023 developments, new providers, and future plans. Learn about project organization and contribution process for compliance and FinOps in cloud environments.
Flavors of Certificates in Service Mesh - The Whys and Hows
Explore various certificate deployment options in Service Mesh security, with demonstrations using Istio for scenarios like external management, SPIFFE integration, and 5G Telco Cloud security.
Open Policy Agent (OPA) Introduction and Deep Dive
Explore Open Policy Agent (OPA), a versatile policy engine for Kubernetes, service mesh, CI/CD, and infrastructure. Learn about its features, use cases, and recent updates in this informative session.
Boost Multicloud Security with a Comprehensive Code to Cloud Strategy
Learn how Microsoft Defender for Cloud enhances multicloud security across the application lifecycle. Discover cloud security graph insights and tailored analytics to strengthen defenses and improve incident response in Azure, AWS, and Google Cloud.