Protect the Pipe - A Policy-based Approach for Securing CI/CD Pipelines
Explore a cloud-native security framework for CI/CD pipelines using in-toto, Kyverno, and sigstore. Learn to implement policy-based controls and address unique security challenges in modern application delivery.
Pwning the CI Workflow and How to Prevent It
Explore vulnerabilities in CI workflows and learn effective prevention strategies to enhance security in cloud-native environments.
End-to-End Encryption with EnRoute OneStep and LinkerD
Explore end-to-end encryption implementation using EnRoute OneStep and LinkerD for enhanced security in cloud-native applications.
Staring Into the Abyss with the Security Technical Advisory Group
Explore cloud native security with CNCF's Security TAG. Learn about their charter, ongoing projects, and community impact. Discover how to get involved in shaping the future of cloud native security.
Throw Away Your Passwords - Trusting Workload Identity in Cloud Native Systems
Explore modern machine identity and workload authentication in cloud-native systems. Learn about dynamic credentials, hardware roots of trust, and practical implementations to enhance security beyond traditional methods.
Runtime Security in the Cloud Native World
Explore runtime security in cloud-native environments, focusing on detecting and mitigating security breaches in production. Learn about essential tools and strategies for maintaining robust security measures.
How to Achieve Comprehensive Protection for Cloud Native Applications and Workloads
Learn comprehensive protection strategies for cloud-native applications, covering web security, runtime risks, and predictive models. Explore practical solutions and benefits through demos and real-world examples.
Securing Fluent Bit by Way of Fuzzing
Explore automated security testing for Fluent Bit using fuzzing techniques. Learn about implementation, bug detection, and the impact on overall security posture.
Securing Windows Workloads in Cloud Native Environments
Learn strategies and best practices for enhancing security in Windows-based cloud environments, focusing on workload protection and risk mitigation.
Enforce Policy at Ingress Using Open Policy Agent (OPA)
Learn to enforce policies at ingress using Open Policy Agent (OPA). Explore setup, implementation, and demonstration of upper policies for effective cloud-native security.
Cloud Native Authorization Landscape
Explore the evolving landscape of cloud native authorization, examining key concepts, challenges, and emerging solutions in modern distributed systems.
Cloud Native Certificate Management with Linkerd
Explore certificate management in Linkerd, focusing on key benefits and unique aspects of this cloud-native service mesh for Kubernetes environments.
How the Argo Project Transitioned From Security Aware to Security First
Discover how the Argo project enhanced its security strategy, implementing best practices, formalizing processes, and leveraging community resources to transition from security-aware to security-first.
Securing Edge Workloads with Cert-Manager and SPIFFE
Explore securing edge workloads using cert-manager and SPIFFE for efficient certificate management and trust distribution in Kubernetes environments, focusing on ingress and mTLS security.
Open Policy Agent (OPA) - Introduction and Latest Features
Explore Open Policy Agent (OPA) for policy enforcement in cloud-native environments. Learn about its versatile applications and latest features for enhanced security and governance.
Assessing Environments Against Cloud Native Security Best Practices
Insights on assessing cloud native environments against security best practices, including CNCF white papers and NIST controls. Explores open-source automation for efficient audits and cross-mapping frameworks.
Cloud Native Security - Mapping the Landscape
Explore key areas of Cloud Native security: platform security, user management, and software supply chain. Gain insights into best practices, threat mitigation, and resources for further learning.
Securing the Golden Path: Adding Guardrails for Developers Without Compromising Agility
Panel discussion on balancing security and agility in cloud-native development, exploring strategies for implementing guardrails without hindering developer productivity.
Zero Trust Network Policy with Linkerd
Explore zero trust network policy implementation using Linkerd, enhancing security in cloud-native environments through practical demonstrations and expert insights.
Introduction to Open Policy Agent (OPA) for Security and Authorization
Explore Open Policy Agent (OPA), a versatile policy engine for fine-grained, context-aware enforcement across the stack. Learn its applications in microservices, Kubernetes, and API authorization.
Bridging Security and Reality with Open Policy Agent
Explore Open Policy Agent's role in bridging security and real-world scenarios, enhancing policy enforcement and decision-making in modern IT environments.