Automating Configuration and Permissions Testing for GitOps with OPA Conftest
Learn how The New York Times automates configuration and permissions testing for GitOps using OPA Conftest, enabling secure self-service deployments while maintaining developer autonomy.
Istio for Controls Compliance
Explore Istio's role in regulatory compliance beyond mTLS, covering PCI DSS, FedRAMP, and GDPR. Learn how to implement controls and transition to identity-based security models.
Cluster Grey Zone - Risks in Managed Cluster Middleware
Explore security risks in Managed Cluster Middleware for cloud-based Kubernetes services. Learn about potential vulnerabilities, threat surfaces, and how to adjust your K8s threat model accordingly.
The Compliance Business Case for Kubernetes in the EU - Get Ready for EUCS
Explore EU Cybersecurity Scheme compliance for Kubernetes, focusing on design, enforcement, and auditing using Open Policy Agent and CNCF tools for cloud-native applications.
Scaling Argo Security and Multi-Tenancy in AWS EKS at The New York Times
Explore NYT's approach to scaling Argo security and multi-tenancy in AWS EKS, focusing on architectural patterns, IAM integration, and solutions for scaling challenges in a multi-cluster environment.
Calling OPA from eBPF Through WASM in the Kernel - Exploring Unconventional Technology Integration
Explore the integration of eBPF, WASM, and OPA in kernel space, showcasing innovative approaches to cloud-native technologies and their potential impact on system performance and security.
Container Patching: Making It Less Gross Than the Seattle Gum Wall
Explore strategies for efficient container patching, including prevention, detection, fixing, and monitoring. Learn about opensource tools and best practices to streamline the process and meet security requirements.
Hands-on Hacking Kubernetes and Ways to Prevent It
Hands-on workshop exploring Kubernetes vulnerabilities and prevention strategies. Demonstrates remote code execution exploit and teaches mitigation techniques for enhanced container security.
From the Cluster to the Cloud: Lateral Movements in Kubernetes
Explore techniques for lateral movement from Kubernetes containers to cloud resources, covering RBAC misconfigurations, authentication methods, and real-world incidents. Learn prevention and detection strategies.
Kubernetes to Cloud Attack Vectors: Demos of Cross-Environment Vulnerabilities
Explore attack vectors between managed Kubernetes clusters and cloud environments. Learn best practices for securing EKS, AKS, and GKE against lateral movement and compromise.
Finding the Needles in a Haystack - Identifying Suspicious Behaviors with eBPF
Explore how AWS uses eBPF to identify security risks in Kubernetes, including malicious activities and communication with known threats. Learn advantages, challenges, and practical applications.
Self Healing GitOps - Continuous, Secure GitOps Using Argo CD, Helm and OPA
Explore continuous, secure GitOps using Argo CD, Helm, and OPA. Learn to automate secure deployments, ensure compliance, and implement self-healing GitOps for Kubernetes clusters.
Security++ - Hide Your Secrets via Distributed Hardware Security Module
Explore distributed Hardware Security Modules for enhanced cloud security and performance. Learn how this solution balances remote and local HSMs, enabling secure cryptographic operations across cloud, on-premise, and edge environments.
Securing the Superpowers: Who Loaded That eBPF Program?
Explore eBPF technology's power and security implications. Learn about auditing, monitoring, and enforcing eBPF program loading on Linux systems using Tetragon for enhanced system protection and accountability.
Top 5 Authorization Trends in 2022 - A Year in Review
Explore the top 5 authorization trends of 2022 in cloud-native computing, offering insights into evolving security practices and technologies.
Managed Kubernetes Service: Day Zero Survival Guide - Planning and Design Considerations
Essential considerations for planning and designing managed Kubernetes clusters, covering application readiness, organizational impact, developer needs, cost, sustainability, and security aspects.
Secret Management in Kubernetes: Using Secret Store CSI Driver
Explore secure secret management in Kubernetes using Secret Store CSI Driver. Learn its architecture, multi-credential provider support, and see code examples for robust security implementation.
A Confidential Story of Well-Kept Secrets - Secure Secret Management in Kubernetes
Explore secure secret management in Kubernetes with Lukonde Mwila. Learn strategies for storing, sharing, and consuming sensitive data, with real-world examples and a demo using ESO, ArgoCD, and OPA Gatekeeper.
The Hacker's Guide to Kubernetes - Exploiting Vulnerabilities and Best Practices
Interactive demos showcasing live Kubernetes hacking, exploring OWASP Top 10 vulnerabilities and exploits. Learn to identify and mitigate security risks in k8s clusters, containers, and components.
Canals and Bridges: Using Amsterdam's Transit System to Secure Kubernetes Networks
Explore Kubernetes network security through Amsterdam's canal system analogy. Learn threat modeling, monitoring tools, and NetworkPolicies to implement robust security strategies for complex K8s environments.
Cert-Manager for SPIFFE: Solving Multi-Cloud Workload Identity - Lecture
Explore how cert-manager leverages SPIFFE to solve multi-cloud workload identity challenges, enabling secure pod access across different cloud environments.