AiIAM: Transforming AWS IAM Architecture with LLMs
Explore AiIM, an innovative LLM-powered solution for automating AWS IAM policy generation, streamlining security processes and empowering developers with least privilege access.
Centralized Policy Management
Explore methods for applying centralized policy at scale, focusing on Open Policy Agent (OPA) and its integration with Kubernetes for improved security and compliance in complex microservices architectures.
Writing Your Own Ticket to the Cloud Like APT - A Deep Dive to AD FS Attacks, Detections, and Mitigations
Explore AD FS attacks, detections, and mitigations for Azure AD security. Learn about identity federation vulnerabilities and strategies to protect cloud-based resources from unauthorized access.
IAM The One Who Knocks
Exposing hidden risks in multi-cloud IAM, detailing access flaws, misconfigurations, and inconsistencies that can lead to unintended access and privilege escalation across cloud providers.
Emerging Threats Against Cloud Application Identities and What You Should Do About It
Explore emerging threats to cloud application identities, learn detection techniques, and discover strategies for recovery and defense in this comprehensive cybersecurity session.
Rethinking Apache Kafka Security and Account Management - Centralized Identity Management
Explore centralized identity management for Apache Kafka, focusing on OAuth integration, security enhancements, and best practices for seamless access control across cloud and on-premises environments.
Cloud Compromises: Lessons Learned from Mandiant Investigations in 2023
Explore real-world cloud security threats from 2023, gain insights from Mandiant's incident response cases, and learn practical recommendations for protecting cloud infrastructure.
Prevent Data Exfiltration with Google Cloud's Built-in Controls
Explore defense-in-depth strategies and Google Cloud's security technologies to mitigate data exfiltration risks, featuring insights from Charles Schwab and Commerzbank.
Generative AI for Defenders with Sec-PaLM 2 and Duet AI
Explore how defenders can leverage generative AI to combat cyberattacks, focusing on Google Cloud Security AI Workbench powered by Sec-PaLM 2 and Duet AI capabilities for enhanced threat detection and response.
How to Use an Encryption Key per IO - SDC 2023
Explore fine-grained data encryption through Key Per IO (KPIO) technology, covering implementation, EU-GDPR compliance, multi-tenant security, and practical NVMe API applications for enhanced data protection.
Overcoming CVE Shock - Adding Perspective in Vulnerability Scanning
Explore vulnerability scanning in Kubernetes, covering auditing, security mechanisms, and CI/CD integration. Learn to overcome challenges and implement effective security measures.
Tools to Help You Secure Your Kubernetes Cluster
Explore 7 essential tools for enhancing Kubernetes cluster security, covering internal complexities and workload protection best practices.
The Hacker’s Guide to Kubernetes Security
Comprehensive guide to Kubernetes security risks, focusing on OWASP Top 10. Live demos of exploits, common vulnerabilities, and best practices for hardening k8s clusters.
A Container Platform for the Banking Industry - Why, What & How
Explore the creation of a compliant container platform at ABN AMRO using EKS, OPA, and Twistlock. Learn from successes and failures in building a secure, scalable solution for enterprise workloads.
OPA for the Cloud Natives
Explore OPA for cloud security: Learn to write declarative policies for APIs, Kubernetes, and applications. Understand the benefits of continuous runtime checking and see hands-on examples.
Cloud Security Made for the EU - Securing Data & Applications
Explore confidential computing and real-time compliance for ultimate data security in EU cloud transitions. Learn key strategies to satisfy data protection regulations and address CISO concerns.
It's Getting Real and Hitting the Fan 2023 Edition - Real World SaaS Attacks
Explore real-world SaaS attacks, failed defenses, and response strategies in cloud-based corporate IT. Gain insights into securing M365, GWS, Okta, Slack, Salesforce, and more.
The Dark Underbelly of 3rd-Party Application Access to Corporate Data
Explore the hidden risks of third-party app access to corporate data, with real-world insights and practical strategies for prevention, detection, and risk mitigation in cloud environments.
M365 Adversary ROI - Microsoft Cloud Attack Insights
Insights from Adversary ROI research and M365 attack data to build effective security plans, reducing cloud attack risks and improving Microsoft 365 tenant protection.
From the Cluster to the Cloud - Lateral Movements in Kubernetes
Explore Kubernetes lateral movement techniques and learn how attackers can pivot from container access to cloud resources. Discover practical tools for threat mitigation and detection in cloud-based Kubernetes environments.
How to Adapt to Security Changes in Cloud SaaS Transformation
Explore the security advantages of cloud migration and learn to evaluate SaaS environments using a detailed framework for comparing on-premise and cloud security postures.