How We Built Ubuntu Distroless Containers
Explore the creation of Ubuntu distroless containers, understanding principles, benefits, and techniques for building secure, minimal-footprint images from scratch using standard tools.
Implementing Container Privilege Escalation Detection Using eBPF for Cloud Native Security
Explore eBPF-based techniques for detecting and preventing container privilege escalation in cloud environments, with practical implementation examples and real-world applications.
Docker Security Insights - Vulnerabilities and Best Practices
Explore Docker security vulnerabilities, countermeasures, and best practices for production environments. Learn about container risks, secrets management, content trust verification, and open-source library considerations.
Containers: Attack and Defense Strategies
Explore container security vulnerabilities and defense strategies with experts Rohit Pitke and Emmanuel Law in this OWASP Foundation presentation.
Securing Containers on the High Seas
Strategies for secure container implementation, focusing on infrastructure, architecture, tooling, policies, and processes. Explores container lifecycle security from development to production.
Continuous Kubernetes Security - Best Practices and Risk Mitigation
Explore Kubernetes security landscape, risks, and best practices. Learn to configure least-privilege access, isolate workloads, and maintain secure configurations across cluster rebuilds.
Docker 201 Security - Top 10 Security Practices for Containers
Learn Docker security best practices, including top 10 security bullet points, common pitfalls to avoid, and advanced techniques for tightening container security in both Docker and Kubernetes environments.
Breaking Out of the Container Without Zero Day - Security Risks in DevOps
Explore container security risks in DevOps environments, focusing on potential vulnerabilities and attack vectors beyond zero-day exploits. Learn strategies to enhance container security and protect your infrastructure.
OWASP Docker Top 10 Security Risks
Explore critical security risks in Docker environments and learn essential mitigation strategies to protect containerized applications from vulnerabilities.
How to Lose a Container in 10 Minutes - Cloud Security Challenges and Mistakes
Explore common mistakes in container deployments, cloud migration challenges, and real-time container vulnerability demonstration. Gain insights on secure containerization practices and cloud-native security approaches.
Can Kubernetes Keep a Secret? - Secure Secret Management in Kubernetes
Explore secure secret management in Kubernetes, including native secrets' limitations and alternative solutions like Kamus for encrypting sensitive data accessible only by your app at runtime.
Software Supply Chain Aspects in Infrastructure as Code
Explore infrastructure-as-code security risks, focusing on supply chain vulnerabilities in reused templates and containers. Learn strategies to mitigate threats and ensure robust IaC practices.
Building Apps in Kubernetes: The Unforgiving Sea of Containerization and the Lifesaver Tools
Explore key security challenges in Kubernetes app development and learn practical solutions using open-source tools. Gain insights from real-life examples to navigate the ecosystem confidently.
Hardening Next Generation Military Software Containers for DoD Software Factories
Explore techniques for hardening open source containers used in military software, reducing vulnerabilities and size by 70% while achieving 200k downloads for enhanced security and efficiency.
Leveraging WebAssembly to Write Kubernetes Admission Policies
Learn to create efficient Kubernetes admission policies using WebAssembly, exploring advantages, security aspects, and practical implementation techniques.
Hack My Mis-Configured Kubernetes
Explore common Kubernetes misconfigurations and learn practical hacking techniques to identify and exploit vulnerabilities, enhancing your understanding of container security.
Building Containers with Software Bill of Materials (SBoMs) - Back to the Drawing Board
Explore innovative techniques for integrating Software Bill of Materials (SBoMs) into container building processes, enhancing security and transparency in software development.
Dynamic Authorization and Policy Control for Kubernetes Clusters
Learn dynamic authorization and policy control techniques for Kubernetes clusters using Open Policy Agent, focusing on admission control and effective policy management.
Tetragon: A Kubernetes Observability and Security Tool
Explore Tetragon, an innovative tool for enhancing Kubernetes observability and security, presented by expert John Fastabend.
Securing Pods via Scheduling - Mitigating Risks from Neighboring Containers
Explore a security-aware pod scheduling scheme for Kubernetes that mitigates risks from vulnerable neighboring containers by co-locating pods based on system call exposure risk.
Containers Security Layers and How Not to Break Them
Explore container security layers and best practices to maintain their integrity, presented by an expert from Palo Alto Networks.