Minimizing Blast Radius of Chained Kubernetes Misconfigurations and Image Vulnerabilities
Explore strategies to minimize security risks in Kubernetes deployments, focusing on misconfigurations, image vulnerabilities, and balancing security with usability in cloud-native environments.
What is Lacking in Linux Security and What Should We Do About It - Panel Discussion
Experts discuss current Linux security challenges and potential solutions, exploring vulnerabilities, best practices, and future improvements for enhanced system protection.
Automatically Securing Linux Application Containers in Untrusted Clouds
Explore techniques for automatically securing Linux application containers in untrusted cloud environments, enhancing protection against potential threats and vulnerabilities.
Live Hack: Exploiting and Securing Mis-Configured Kubernetes Clusters
Explore key Kubernetes security vulnerabilities through live hacking, understanding their implications, potential attack vectors, and remediation strategies for robust cluster protection.
From Legacy to Kubernetes Securely and Quickly
Migrate legacy apps to Kubernetes with Docker Desktop. Learn basics, containerization, security best practices, and implementation techniques for secure orchestration and limited attack surface.
Developer Environments in Docker
Learn to create robust development environments using Docker, Docker Compose, and shell scripts. Discover how to spin up your entire application in various modes with a single configurable command.
Docker Build: How to Build and Deploy HIPAA Compliant Container Apps
Learn to build and deploy HIPAA-compliant digital health apps using Docker containers and MedStack's privacy compliance automation platform. Streamline development and ensure data protection for healthcare applications.
How to Promote the Use of Best Practices and Automate Security Policies
Explore container security automation in CI/CD pipelines, focusing on vulnerability scanning, admission controls, and runtime security using tools like OPA and Kubernetes Admission Controls.
CVE Overload: Scaling Container Vulnerability Scans
Strategies for scaling container vulnerability scans: risk assessment, streamlined triage, automation, and data-driven insights to manage CVEs effectively in large-scale environments.
Streamlining FedRAMP Compliance with CNCF Technologies
Discover how CNCF technologies streamline FedRAMP compliance, enabling efficient government collaboration. Learn from Palantir's journey in modernizing infrastructure with Kubernetes to meet technical requirements and reduce support burden.
Kubernetes Authentication and Authorization at Robinhood - Lessons from Reductions, Migrations, and Designing Automation
Explore Robinhood's journey in implementing least privilege for Kubernetes RBAC, including challenges, solutions, and lessons learned in managing authentication and authorization.
K8s Post-Exploitation: Privilege Escalation, Sidecar Container Injection, and Runtime Security
Explore post-exploitation scenarios in Kubernetes, including privilege escalation, sidecar container injection, and runtime security. Learn detection techniques and security measures to protect your cluster.
OIDC and Workload Identity in Kubernetes
Explore OIDC and Workload Identity in Kubernetes for secure cloud resource access. Learn setup, authentication workflows, and implementation on public clouds through concepts and demos.
Kubernetes DoS Protection at Google Scale
Explore Kubernetes DoS protection strategies, configurable limits, and real-world scenarios from Google's experience. Learn about recent developments to enhance control plane security.
Beyond the Cluster: Harnessing the Power of Kubernetes Namespaces
Explore Adobe's journey in building a cross-cloud, multi-tenant Kubernetes platform. Learn about tools, challenges, and lessons for balancing velocity and reliability in modern developer ecosystems.
Challenge to Implementing Scalable Authorization with Keycloak
Explore scalable authorization implementation using Keycloak, combining it with OPA and CockroachDB for enhanced security, performance, and multi-cloud resilience in API and service development.
AI and Kubernetes - A Winning Combination for Modern App Development
Explore how AI and Kubernetes intersect in modern app development, leveraging Azure's tools for seamless production deployment, AI-assisted scaling, and balancing innovation with security and cost.
Introducing Kubescape - Open Source Tool for Testing Kubernetes Deployments
Explore Kubescape, an open-source tool for testing Kubernetes deployments, enhancing security and compliance in cloud-native environments.
Using Policy as Code to Manage Security Risk in Kubernetes
Learn to manage Kubernetes security risks using policy as code, focusing on integrating Terrascan and addressing specific CVEs for enhanced cloud-native security.
Windows Containers: Architecture, Security, and the Siloscape Vulnerability
Explore Windows containers, their architecture, and security implications, including the Siloscape attack and mitigation strategies for cloud environments.
Easy, Secure Kubernetes Authentication with Pinniped
Explore secure Kubernetes authentication using Pinniped, a CNCF project. Learn implementation strategies and best practices for enhanced cluster security.