AppSec, Pipelines, and Clouds: Navigating Modern Security Challenges
Explore cloud security challenges, emerging threats, and strategies for organizations at different stages of cloud adoption based on the State of Cloud Native Security report.
Navigating the Complexity of Cloud-Native Attacks - A Dual Approach to Proactive and Reactive Security
Explore proactive and reactive security strategies to combat sophisticated cloud-native attacks, focusing on risk mitigation and swift threat response.
Building on Microsoft Sentinel Platform
Explore Microsoft Sentinel's latest updates, learn to create codeless connectors, build solution guides, and contribute to the unified SIEM + XDR GitHub repository. Enhance your cloud-native SIEM capabilities for improved data analysis and threat detecti…
Securing Applications and Infrastructure on Kubernetes with Sysdig
Explore cloud-native security challenges and solutions for Kubernetes, covering code, container, cluster, and cloud security. Learn mitigation strategies and Sysdig's comprehensive approach to secure modern applications.
Security Across Development Life Cycle in Cloud-Native
Explora buenas prácticas de seguridad en el ciclo de desarrollo de software cloud-native, abordando contenedores, Kubernetes, infraestructura como código y cargas de trabajo en la nube.
Digital Signature in Cloud Native Practice - Session 10
Explore practical applications of digital signatures in cloud-native environments, enhancing security and authentication for modern distributed systems.
What's Really Happening Inside My Containers? - Exploring with Falco
Explorando segurança em containers com Falco: detecte atividades suspeitas, previna ameaças e proteja seus recursos contra acessos não autorizados e malwares.
Post-Exploiting a Compromised ETCD
Explore advanced techniques for exploiting compromised ETCD in Kubernetes clusters, including data tampering, malicious pod injection, and bypassing security controls.
Service Aware Zero Trust Container Network and Its Offloading to DPU
探讨云原生环境中的零信任容器网络安全方案，介绍将mTLS、IPsec和OVS卸载到DPU上的创新实现，实现高性能、零注入和服务感知的安全网络架构。
Masterclass Carol Valencia - El espectro de Seguridad en Cloud Native - Ekoparty Hackademy
Explora las diferencias entre seguridad tradicional y cloud native, enfocándose en contenedores y Kubernetes. Descubre tendencias y tecnologías clave para la seguridad en entornos cloud modernos.
DSOMM from Theory to Enforcement - Applying Security in Cloud Native Environments
Explore DevSecOps Maturity Model implementation using open-source tools. Live demos showcase practical application of security controls across DSOMM stages for cloud-native environments.
Temporal: Objects in the Rear View Mirror Are Closer Than They Appear - Application Security Challenges in Cloud Native Era
Explore how software development changes impact application security, challenges in Cloud Native workloads, and strategies for staying secure in evolving tech landscapes.
Securing CI/CD Pipelines Through Security Gates
Explore CI/CD pipeline security gates, frameworks, and best practices. Learn to embed security seamlessly in DevOps workflows and eliminate issues before production. Includes live demo.
Automated Cloud-Native Incident Response with Kubernetes and Service Mesh
Explore automated incident response in cloud-native environments using Kubernetes and service mesh. Learn best practices, tools, and techniques for effective security management and threat mitigation.
DevSecOps Best Practices in Cloud Native Computing - CMCC Case Study
探索中国移动通信公司的DevSecOps最佳实践，了解如何将安全无缝集成到云原生开发和 运维流程中，提高效率和安全性。
Trust No System: The Unsettling Reality of Zero Trust
Challenging "Zero Trust" in cloud-native security, this talk explores trust as an observer's decision, debunks myths, and offers strategies for managing trust in cloud environments.
What Can Go Wrong When You Trust Nobody? Threat Modeling Zero Trust
Explore Zero Trust principles and threat modeling for cloud-native systems. Learn to implement secure architectures using Istio, Kubernetes, SPIRE, and OPA for robust, distributed workload protection.
What Data Tells Us About Software Supply Chain Security and What To Do About It
Experts analyze data from surveys and reports on cloud-native and open source software security, providing actionable insights to improve software supply chain security for organizations and projects.
Putting Hackers Breaching Your Cluster in Automatic Quarantine
Explore automatic isolation techniques for breached apps in Kubernetes clusters, enhancing overall security and minimizing potential damage from hacker intrusions.
Verifiable eBPF Traces for Supply Chain Artifacts with Witness and Tetragon
Explore how Cillium Tetragon and Witness integration simplifies build environment validation and detects tampered tooling, enhancing supply chain security through eBPF traces and build policies.
Fileless Attack - Detecting the Undetectable
Explore fileless attacks in Linux containers, their detection using eBPF tools like Falco, Tracee, and Tetragon, and learn to identify unexpected activities in cloud-native environments.