Making Sense of Security Supply Chain - An Overview for Beginners
Explore supply chain security fundamentals, tools like Fulcio, Rekor, and cosign, and their integration in this beginner-friendly overview of the rapidly evolving landscape.
Threat Modeling for AI Apps with Attacks as Code
Explore automated threat modeling for AI apps using Secops-Chaos framework. Learn to encode TTPs as security experiments and map MITRE ATLAS TTPs to AI apps in Kubernetes environments.
Scan, Patch, VEX - Using Open Source Tools to Manage Vulnerabilities in Containers
Learn to manage vulnerabilities in cloud-native environments using open-source tools like Trivy and Copacetic, and standards like VEX. Improve security across development, testing, and production.
How to Generate VEX Automatically for Your Project
Learn to automate VEX generation for Kubernetes workloads, reducing false positives in security scans and streamlining vulnerability management using Kubescape and a new GitHub Action.
SPIFFE Ecosystem: MTLS and Identity with Linkerd and Teleport
Explore SPIFFE ecosystem growth, focusing on Linkerd and Teleport's implementation for workload identity verification across Kubernetes clusters and external environments.
IAM Confused - Getting Work Done and Keeping SecOps Happy
Explore effective IAM strategies to balance productivity and security in cloud environments, addressing common challenges and implementing best practices for access management.
Cloudy with a Chance of Zero Trust: Navigating Security in the Cloud Native Cosmos
Explore zero trust security for containerized workloads, covering threat vectors, implementation strategies, and tools. Gain insights on enhancing your organization's security posture in cloud-native environments.
Leveraging the Linux Kernel for Building a Zero-Trust Environment Without a Service Mesh
Explore an innovative approach to zero-trust security using a Linux kernel module for mTLS and access control, avoiding service mesh complexities while maintaining strong workload identities and traffic encryption.
CVE Context Matters - Prioritizing Vulnerabilities in Cloud-Native Projects
Explore vulnerability scanning in cloud-native projects, learn to prioritize vulnerabilities, and implement effective scanners. Gain insights on assessing relevance and improving daily workflows.
Championing Security - Scaling Security at Every Level
Explore the concept of Security Champions to address enterprise security challenges. Learn best practices for implementing a program that empowers team members to promote and integrate security across the organization.
Secure Workload Identities with SPIFFE, Cert-Manager, and Trust-Manager
Secure cloud-native workloads using SPIFFE, cert-manager, and trust-manager for robust identity management and authentication in distributed systems.
Securing Applications in SDLC and Cloud-Native Web and API Protection - Sessions 1 and 2
Learn secure coding practices, identify vulnerabilities, and integrate security into SDLC. Explore cloud-native WAAP for effective web app and API protection using machine learning.
Relational Observability for Cloud-Native Security and Data Science
Explore SysFlow, a runtime observability framework for cloud-native security. Learn about its telemetry format, behavioral graphs, and tools for collecting and processing data in Kubernetes environments.
Securing Jupyter Notebooks with KubeArmor
Learn to enhance security for Jupyter Notebooks using KubeArmor, exploring advanced protection techniques for cloud-native environments and data science workflows.
Controlling Access to External APIs with Cilium
Step-by-step guide on configuring Cilium to limit GitHub repo access for cluster workloads, covering TLS termination, certificate management, and L7 network policies for enhanced security in multi-tenant environments.
Cloud Native Security Exposed: A Layered Approach to Cloud Security
Explore a layered approach to cloud native security, covering threat vectors, application lifecycle, and securing compute and container layers for robust protection.
Open Policy Agent Deep Dive
深入探讨开放策略代理(OPA)在微服务和Kubernetes中的应用,包括核心语言特性、搜索、组合和复杂数据查询,助您实现"策略即代码"以增强系统控制和可视化。
Security Chaos Engineering for Cloud Native Infrastructure
Explore Security Chaos Engineering for proactive cloud-native security. Learn to inject controlled faults, analyze mechanisms, identify blind spots, and enhance resilience against cyber threats.
Security TAG Closing - Highlights and Future Work
Wrap-up of Cloud Native Security Con, highlighting Security TAG's work, future plans, and ways to get involved. Covers whitepapers, assessments, audits, and ecosystem insights.
The Long and Windy Road to Cloud Native Security
Explore cloud-native security strategies, from leadership buy-in to InfoSec collaboration. Learn to establish scalable programs, engage with organizational structures, and leverage upstream communities for guidance.
Security Champions Program: Scaling Up Cybersecurity Expertise - The What, Why, and How
Explore the importance of Security Champions programs in cybersecurity strategy, including implementation, costs, and benefits for scaling up security expertise in technical teams.