How This Innocent Image Had a Party in My Cluster
Explore sophisticated techniques used by malicious actors to evade container image scanning, and learn practical advice for detecting and mitigating these advanced attacks in Kubernetes clusters.
Implement Kubernetes Runtime Based on Rust-vmm
Explore implementing Kubernetes runtime with Rust-vmm for enhanced container isolation, improved security, faster startup, and better hardware utilization. Learn about OCI approaches and custom VMM creation.
Security Kill Chain Stages in a 100k+ Daily Container Environment with Falco
Explore how MathWorks uses Falco to detect security threats in a large-scale container environment, covering implementation strategies, rule creation, and mapping to the Security Kill Chain.
Notary v2 - Redesigning the Secure Supply Chain for Containers
Explore Notary v2's redesign for secure container supply chains, focusing on OCI registry-native protocols and improved ecosystem security based on community experience.
More Than Secure - Containerd + KataContainers as Kubernetes Runtime
Explore integrating KataContainers with containerd for enhanced Kubernetes runtime security, performance, and multi-tenancy support using hardware virtualization.
Kubernetes VM Solutions for Multi-Tenant Applications
Explore VM solutions for Kubernetes multi-tenant apps, including KubeVirt, Virtlet, and RancherVM for traditional workloads, and Kata Containers and gVisor for secure container isolation.
Enhancing Kubernetes with the Security Profiles Operator
Explore Kubernetes security enhancement with Security Profiles Operator. Learn to manage seccomp, AppArmor, and SELinux profiles using cloud-native APIs for improved workload security and simplified administration.
Notary v2 - Supply Chain Security for Containers
Explore Notary v2's advancements in container supply chain security, its integration with other initiatives, and its path to production. Learn about registry-native solutions and ongoing developments.
My Container Image has 500 Vulnerabilities, Now What?
Explore container image vulnerabilities, their origins, and effective strategies for prioritization and remediation in this insightful talk on securing Kubernetes environments.
Back to the Drawing Board - Building Containers with SBoMs
Explore container SBoMs, their importance, and how to generate accurate ones during build time using tools like Tern and Buildah while adhering to OCI specifications.
The Hitchhikers Guide to Container Security
Explore risky Pod privileges, their impact on cluster security, and learn to create effective security policies for safer Kubernetes environments.
Protecting the Omniverse - How NVIDIA is Securing Containers
Discover NVIDIA's approach to container security, integrating automated checks into CI/CD pipelines for early issue detection and resolution, empowering development teams with decentralized policies.
Deploying Applications to Windows Containers and Windows Server 2016
Learn to deploy applications using Windows Containers on Windows Server 2016. Explore development environments, building, scaling, and integration with Linux containers for real-world deployments.
Security in Cloud-Native
Explore cloud-native security approaches, focusing on data protection, infrastructure trustworthiness, and common vulnerabilities. Learn strategies for securing both Linux and Windows deployments in the cloud.
What Vulnerabilities? Live Hacking of Containers and Orchestrators
Live hacking demonstration exploring container and orchestrator vulnerabilities, showcasing real-world attack scenarios and defense strategies. Emphasizes best practices, security policies, and monitoring for effective prevention.
Least Privilege: Security Gain without Developer Pain
Automated approach to implement least privilege security without impacting developer productivity. Combines data gathering and policy adjustment to remove unused permissions across applications.
Real Zero Trust Security for Containerized Environments
Discover practical strategies for implementing zero trust security principles in containerized environments, from fundamental concepts to real-world DevOps implementation examples.
Project Copacetic - Directly Patch Container Image Vulnerabilities
Discover how to efficiently patch container image vulnerabilities with Project Copacetic, streamlining security updates through automated scanning, direct patching, and seamless pipeline integration.
From Cosign to an Ecosystem - The Evolution of Sigstore
Explore the evolution of Sigstore's software security ecosystem, from its core components to advanced integrations for package managers, CI workflows, and policy enforcement tools.
Automated Vulnerability Patching with Copa
Discover how Copa automates container vulnerability patching, enabling swift OS-level remediation without upstream rebuilds while streamlining security workflows for DevSecOps teams.
Security in Google Kubernetes Engine - GKE Security Posture and Threat Detection
Discover how Google Cloud enhances Kubernetes security through automated vulnerability management, threat detection, and compliance tools, making complex environments safer and more manageable.