Better Build Pipelines with OpenSSF Projects - Enhancing Trust and Security
Enhance build pipeline security using OpenSSF projects: cosign, SBOMs, and SLSA. Demonstrate kpack for container image building on Kubernetes, integrating signed images and SBOM generation.
Continuous Compliance in Kubernetes Environments with KubeArmor
Explore continuous compliance in Kubernetes using KubeArmor. Learn to enhance security, maintain regulatory standards, and automate compliance checks in cloud-native environments.
Container & Microservice Security
Comprehensive overview of container and microservice security concerns, offering best practices and guidance for addressing potential vulnerabilities in modern software architectures.
Docker Security
Explore Docker container security concerns and solutions in this informative talk. Learn about potential vulnerabilities, best practices, and strategies to enhance the security of your containerized applications.
Insights in Container Security
Explore container security features, threats, and best practices for Docker in production environments. Learn about isolation, Linux capabilities, namespaces, and defense-in-depth strategies.
Docker Security
Comprehensive overview of Docker security concerns and best practices, covering kernel attacks, container breakouts, privilege management, image scanning, and practical mitigation strategies.
The Hacker’s Guide to Kubernetes Security
Comprehensive guide to Kubernetes security risks, focusing on OWASP Top 10. Live demos of exploits, common vulnerabilities, and best practices for hardening k8s clusters.
Docker Security for Developers
Practical guide for developers on Docker security best practices, covering strong defaults, official images, least privilege, and microservices to enhance application security.
Container Escape - All You Need Is Cap - Capabilities
Explore container capabilities, their role in container escapes, and strategies to mitigate risks in this insightful session on container security internals.
Secure Socks - Exploring Microservice Security in an Open Source Sock Shop
Exploring microservice security through an open-source sock shop, covering PCI compliance, trust, surface area limitation, container security, network segmentation, and software-defined networking.
Container Security - Strengthening the Heart of Your Operations
Explore best practices and effective steps to secure containers, safeguard the software supply chain, and protect end-users from critical security risks in production environments.
Containerize Your Python Apps Like It's 2024
Aprenda técnicas avançadas para containerizar aplicações Python de forma eficiente, segura e atualizada, utilizando os recursos mais recentes do Docker.
Dynamic Credentials for Kubernetes Workloads with Vault and VSO
Master dynamic credential management in Kubernetes using Vault Secrets Operator (VSO) to automate and secure workload authentication without modifying existing code.
Kubernetes Security for JavaScript Applications
Master essential security practices for deploying JavaScript applications in Kubernetes, covering containerization, multi-layered protection, control plane security, and network security best practices.
Build a Container Image from Scratch - Understanding Docker Image Components
Dive into the step-by-step process of manually creating container images, understanding their core components, layers, metadata, and configuration while learning to build and run them without Docker.
Blackbox Containers: Container Security in the Enterprise
Dive into container security fundamentals, lifecycle management, and enterprise-level best practices for securing containerized applications in modern development environments.
Secure Containers - Do Reduction Strategies Fix Your Nightmares?
Explore container security challenges and reduction strategies to enhance your Docker environment's protection against vulnerabilities and potential threats.
Exploiting the Unexploitable - Advanced JavaScript Vulnerability Chains in Kibana
Dive into advanced exploitation techniques for JavaScript vulnerabilities, focusing on Prototype Pollution attacks and RCE chains through real-world Kibana Bug Bounty examples and defense strategies.
С Какого Конца Начинать Безопасную Разработку - Инструменты и Подходы
Узнайте эффективные подходы к внедрению безопасной разработки, включая анализ инструментов сканирования уязвимостей и практические рекомендации по их интеграции в процесс разработки.
Network Policy для разработчиков: как, зачем и почему
Discover how to effectively implement Network Policy in Kubernetes, focusing on declarative approaches, GitOps methodology, and security best practices for microservices deployment.
M9sweeper - The Open Source Kubernetes Security Platform
Explore M9sweeper, an open-source Kubernetes security platform. Learn about cloud security, container virtualization, and best practices for securing Kubernetes environments.