Continuous Delivery: The Missing Piece in the GitOps-OCI Security Puzzle
Explore the challenges of maintaining trust in containerized deployments using GitOps and OCI. Learn how Continuous Delivery offers a solution to bridge the gap between secure image signing and code-based storage.
Tetragon Kubernetes Policy Filtering - Cloud Native Live
Explore Tetragon for Kubernetes policy filtering, enhancing security and observability in cloud-native environments through advanced system-level telemetry and policy enforcement.
Detection Engineering in Kubernetes Environments - Wrangling Security Data Out of Your Clusters
Explore Kubernetes security: log types, detection strategies, and real-world scenarios. Learn to identify malicious activities and risky configurations in both self-managed and CSP-managed clusters.
Avengers Assemble: Threat Modeling Kubernetes Clusters at Massive Scale
Explore threat modeling for Kubernetes clusters at scale, identifying potential security risks and countermeasures in microservices architectures to enhance protection against unauthorized access and resource misuse.
CSI Forensics - Unraveling Kubernetes Crime Scenes
Explore advanced DFIR techniques for container environments, focusing on Kubernetes. Learn to checkpoint compromised apps, conduct memory forensics, and understand the latest DFIR capabilities for effective incident response.
User Namespaces in Kubernetes - Security and Flexibility
Explore user namespaces in Kubernetes 1.30 beta, enhancing security and flexibility. Learn concepts, mitigate vulnerabilities, and run Docker inside containers without privileged mode.
Malicious Compliance Automated: Building Secure Containers and Obfuscating Content
Explore container image compression techniques, secure image building, and obfuscation methods to reduce attack surfaces and disrupt vulnerability scanners. Learn automation and Linux kernel interfaces for enhanced security.
Demystify Modern Signing: Keys, Certificates, and Envelopes
Explore practical aspects of cryptographic signing tools, covering key algorithms, signing envelopes, certificates, and verification, with a focus on identity-based signing using short-lived keys.
From Risks to Resilience: Leveraging CNCF Projects Against Kubernetes' OWASP Top 10
Explore strategies to mitigate OWASP Kubernetes Top Ten security risks using CNCF projects. Learn actionable insights to enhance the security of your Kubernetes deployments.
Container Images and Security 101: 5 Need to Know Facts
Explore 5 essential facts about container image formats, security tools, and best practices for confident application deployment in cloud and Kubernetes environments.
Threat Modelling: How to Improve Your Kubernetes Security Posture
Learn to enhance Kubernetes security through innovative threat modeling techniques, focusing on identifying risks in complex environments and improving overall security posture for development and SRE teams.
Thinking Like a Threat Actor in Kubernetes Environments
Explore threat actor mindsets to enhance Kubernetes security. Learn proactive defense strategies and vulnerability assessment techniques for robust cloud-native environments.
Modernizing Image Security in CI/CD with Cosign and OPA
Explore Cosign for image signing and OPA for policy enforcement in CI/CD pipelines. Learn implementation strategies and see a hands-on demo for securing Kubernetes deployments.
Deploying HashiCorp Vault on Kubernetes - Part 7
Learn to deploy Vault on Kubernetes, inject secrets into applications using Vault agent sidecar injector, and utilize Vault Secrets Operator for enhanced security and secret management in Kubernetes environments.
Secure Container Management with Podman - Installation and Usage Guide
Learn to use Podman for secure, rootless container management. Covers installation, running containers, security features, Podman Compose, building images, handling privileged ports, and setting up Podman services.
Secure Development with Docker - Workshop
Comprehensive workshop on securing software supply chains using Docker, covering common attacks, remediation strategies, and leveraging Docker Scout for actionable insights and early problem detection.
Securing the Secrets Manager with KubeArmor
Explore securing secrets management in cloud-native environments using KubeArmor. Learn advanced techniques for protecting sensitive information and enhancing overall system security.
Kubernetes Privilege Escalation Tactics - Understanding and Mitigating Vulnerabilities
Explore Kubernetes vulnerabilities, privilege escalation tactics, and mitigation strategies. Learn to secure clusters against insider threats and external attacks through hands-on demonstrations and best practices.
KubeArmor: Cloud-Native Runtime Security Enforcement
Explore KubeArmor: a runtime security system for cloud-native environments. Learn how it restricts pod, container, and node behavior using Linux security modules and generates rich alerts with eBPF.
Enforcing Network Policies for Host Processes via eBPF
Innovative approach using eBPF to identify and secure network traffic from host processes and pods using host network, enhancing Kubernetes network security beyond traditional methods.
How I Met Your Software - An Image's Journey of Consuming and Securing Software in Cloud Native
Explore software consumption in cloud-native environments, from distribution choices to Kubernetes workloads. Learn about trade-offs, security considerations, and optimizing image deployment.