SPIFFE: In Theory and Practice - Deep Dive and Q&A
Explore SPIFFE's vision, components, and role in cloud-native environments. Learn about the SPIFFE specification, IDs, naming, and trust domains in this informative deep dive with Q&A.
Shifting Security Left - Simplifying Security for Kubernetes and OpenShift Environments
Learn to simplify security in Kubernetes and OpenShift, focusing on authentication, secrets management, and bridging the gap between security and DevOps for more efficient cloud-native environments.
The Software Supply Chain: Challenges and Considerations
Explore the critical aspects and challenges of modern software supply chains in cloud-native environments, focusing on security, efficiency, and best practices.
Telepresence Case Studies - From First Experience to Fast Feedback at Scale
Explore how Telepresence improves developer experience, accelerates inner dev loops, and reduces costs in microservice-based applications. Learn implementation through case studies and a demo.
Archetypes for Reliable Systems - Designing and Running Cloud-Based Internet Services
Explore a model for designing cloud-based services with varying reliability levels, featuring Kubernetes-based deployment strategies, multi-tenant architecture, and seamless infrastructure updates.
Observability and Monitoring in Cloud Native Telco World - Tying It Together
Explore challenges and solutions for integrating cloud-native 5G Core into existing telecom ecosystems, focusing on observability and monitoring in Deutsche Telekom's journey towards full production launch.
Looking Ahead to the Future with Project Sylva - Energy Efficiency and Telco Cloud Platforms
Exploring Project Sylva's impact on telco cloud platforms, focusing on energy efficiency, sustainability, and cloud-native innovations in the European telecommunications industry.
Network Security at Scale: L3 Through L7 at Splunk
Explore Splunk's multi-cloud network security architecture, from VPCs to Istio, addressing scalability, agility, and security challenges across L3 to L7 layers.
Fighting the Next War - Future Threats to OSS and Software Supply Chain Security
Explore future threats to open-source software and supply chain security, discussing emerging attack vectors and strategies for OSS projects to prepare and protect against evolving risks.
OmniBOR: Bringing the Receipts for Supply Chain Security
Discover OmniBOR, a revolutionary approach to capture artifact dependency graphs in software development, enhancing supply chain security and reducing false positives in vulnerability scanning.
Security as Code - A DevSecOps Approach
Explore DevSecOps and Security as Code with CodeQL. Learn to implement security checks, detect vulnerabilities, and foster collaboration between development and security teams for a robust security culture.
From Illuminating to Eliminating Crypto Jacking Techniques in Cloud Native
Explore cryptojacking evolution in cloud environments, from basic attacks to sophisticated techniques targeting containers and Kubernetes. Learn proactive protection strategies using open-source tools for enhanced security.
Securing Diverse Supply Chains Across Interconnected Systems
Explore how SpaceX integrates SBOM and vulnerability discovery tools to enhance security across diverse software systems, reducing response time and improving prioritization for developers.
SLSA FRSCA Recipe for Secure Supply Chain
Explore an end-to-end solution for software supply chain security using OpenSSF-FRSCA, integrating tools like Tekton, Sigstore, and Kyverno to meet SLSA Level 3 requirements.
Zero Trust Supply Chains with Project Sigstore and SPIFFE
Explore zero trust supply chains using Sigstore and SPIFFE. Learn how to enhance software security through cryptographic verification, transparency logs, and verifiable identities in build systems.
Verifying Software Signatures with TUF and Sigstore
Explore secure software verification using TUF and Sigstore. Learn to design effective verification policies, understand signing limitations, and enhance security for open-source repositories and container registries.
Leveraging SBOMs to Automate Packaging, Transfer, and Reporting of Dependencies Between Secure Environments
Explore innovative uses of Software Bill of Materials (SBOMs) for secure asset transfer, dependency management, and cloud-native infrastructure deployments using CycloneDX and open-source tools.
Security Threat Modeling Live from Scratch Session
Hands-on workshop demonstrating lightweight threat modeling for CNCF projects, led by Andrew Martin. Learn practical techniques to identify and mitigate security risks in cloud-native environments.
Security That Enables - Breaking Down Security Silos in the DevOps Ecosystem
Explore strategies to integrate security seamlessly into DevOps, addressing challenges in CI/CD workflows and learning from real-world breaches to enable confident, secure deployments.
Digital Forensics and Incident Response in Containerized Environments
Explore Digital Forensics and Incident Response (DFIR) techniques for containerized applications, focusing on Kubernetes. Learn best practices for evidence collection and incident containment in modern cloud environments.
So You Want to Run Your Own Sigstore - Recommendations for a Secure Setup
Explore secure setups for private Sigstore instances, covering motivations, threat modeling, and operational requirements for enterprise artifact signing and verification.