Knative Security Pipelines
Explore Knative security pipelines with expert insights on enhancing cloud-native application security, deployment strategies, and best practices for robust containerized environments.
Dynamic Authorization and Policy Control for Kubernetes Clusters
Learn dynamic authorization and policy control techniques for Kubernetes clusters using Open Policy Agent, focusing on admission control and effective policy management.
Production Workload Identity with SPIRE
Explore SPIRE for secure workload authentication in cloud-native architectures. Learn its core design, implementation in production environments, and upcoming features for enhanced identity management.
Getting Started with Container Runtime Security Using Falco
Learn about Falco, a CNCF project for container runtime security. Explore its architecture, rules, and real-world applications. Discover how Falco protects Kubernetes workloads and its future roadmap.
The Falco Playground - WebAssembly and Runtime Security
Explore Falco Playground: a WebAssembly-powered web app for writing and testing Falco rules, enabling runtime security for Linux systems and cloud logs anywhere, with enhanced portability and accessibility.
Cert-Manager Explained in 5 Levels of Difficulty
Explore cert-manager's features and best practices across five difficulty levels, from basic TLS certificate obtainment to developing custom plugins for advanced implementations.
The Next Frontier: Exploring the Confidentiality of Kubernetes Control Planes
Explore confidential computing to enhance security of Kubernetes control planes, focusing on data in-use protection, implementation challenges, and practical approaches for multi-tenant clusters.
Paint the Picture - Detecting Suspicious Data Patterns in Encrypted Traffic with eBPF and KTLS
Explore eBPF and kTLS for detecting sensitive data patterns in encrypted Kubernetes traffic, enhancing security monitoring without operational complexity or application impact.
Using Workload Identity Federation to Increase Developer Productivity
Explore secure API token management using Kubernetes features like Service Account Token Volume projection and Workload Identity Federation for enhanced developer productivity.
RBACdoors - How Cryptominers Exploit RBAC Misconfigurations
Explore how cryptominers exploit RBAC misconfigurations in Kubernetes clusters, including attack techniques, detection methods, and prevention strategies for enhanced security.
Hacking the Cloud Native Renaissance - Lowering Risk of Kubernetes Adoption
Explore Kubernetes adoption risks and security challenges in cloud-native systems. Learn from real-world hacks, container breakouts, and cloud compromises to enhance your system's resilience and protection.
Kubernetes Cluster Security and Usability: Best Practices and Common Pitfalls
Practical guide to securing Kubernetes clusters, covering common misconfigurations, scalable security approaches, and best practices for different deployment scenarios and threat models.
gVisor: Modern Linux Sandboxing Technology - Hack In The Box 2023
Explore gVisor-based Linux sandboxing: advantages, implementation, and applications in security. Learn about existing solutions, primitives, and how to build a process-level sandbox for enhanced observability and protection.
Securing Kubernetes Runtime with KubeArmor
Explore KubeArmor's capabilities for enhancing Kubernetes runtime security, providing robust protection against potential threats and vulnerabilities in cloud-native environments.
GitOps for Application Authorization in Cloud Native Environments
Explore GitOps for application authorization in cloud-native environments, focusing on best practices, implementation strategies, and security considerations.
Falco: Runtime Security for Kubernetes - Episode 16
Explore Kubernetes runtime security with Falco, an open-source tool for detecting unexpected application behavior and threats. Learn features, benefits, and best practices for enhanced cloud-native security.
Tetragon Kubernetes Policy Filtering - Cloud Native Live
Explore Tetragon for Kubernetes policy filtering, enhancing security and observability in cloud-native environments through advanced system-level telemetry and policy enforcement.
User Namespaces in Kubernetes - Security and Flexibility
Explore user namespaces in Kubernetes 1.30 beta, enhancing security and flexibility. Learn concepts, mitigate vulnerabilities, and run Docker inside containers without privileged mode.
Proactive Kubernetes Security: Anomaly Detection and Runtime Alerting in Kubernetes Workloads
Explore innovative anomaly detection for Kubernetes security using KubeCop. Learn about ApplicationProfile baselines, real-world attack scenarios, and hands-on deployment for enhanced cloud-native protection.
Securing CI/CD Runners Through eBPF Agent
Explore eBPF agent-based security for CI/CD runners, addressing pipeline vulnerabilities and introducing a detection tool for various attack scenarios in development environments.
Cloud Native Governance, Risk, and Compliance - Policy-as-Code Applications
Explore policy-as-code's role in security, admission control, and automated compliance auditing. Learn how to implement governance across diverse environments for comprehensive risk management.