Keeping Your Kubernetes Cluster Secure
Discover open-source tools for securing Kubernetes clusters at multiple levels, from hardening nodes to monitoring container behavior and enforcing policies.
Why Should Developers Care About Container Security?
Explore container security best practices, learn to spot vulnerabilities, and discover how to secure Dockerfiles and deployment manifests before committing code.
Container Standards Explained
Explore OCI specifications driving container implementations. Gain insights into Docker, related projects, and the Open Container Initiative's impact on the container ecosystem.
Strengthening Kubernetes Security with M9sweeper
Discover how to enhance Kubernetes cluster security using m9sweeper, an open-source tool for detecting vulnerabilities and misconfigurations in deployments.
EKS IAM Role Integration with Kubernetes ServiceAccount for AWS Cloud Native Applications
Manage security governance for AWS IAM credentials in Kubernetes cloud-native app deployments. Learn EKS OIC IAM Role integration with ServiceAccounts.
Trivy Vulnerability Scanning for Containers and Artifacts
Explore a simple, comprehensive vulnerability scanner for containers and artifacts. Learn to enhance security in your development pipeline.
Hacking Kubernetes: Live Demo Marathon
Witness live demonstrations of Kubernetes hacking techniques and learn essential security practices to protect your containerized environments.
Securing Access to Kubernetes Clusters on AWS
Learn strategies and best practices for securing Kubernetes clusters on AWS, focusing on access control and protection of cloud workloads.
Insecure Execution: Attacking the Cloud Native Supply Chain
Explore cloud native supply chain vulnerabilities and learn strategies to enhance security against internal threats and software implants.
Pod Security Policy is Dead, Long Live... What's Next?
Explore alternatives to deprecated Pod Security Policies in Kubernetes, understanding their importance and discovering new solutions for securing your clusters.
Essential Security Checks for Your Go Project
Implement essential security checks in Go projects using open-source tools like gosec, govulncheck, and sigstore/cosign. Learn to integrate code analysis, vulnerability scanning, and supply chain security.
Kubernetes Debugging Techniques - Ephemeral Containers
Explore Kubernetes debugging with ephemeral containers, focusing on troubleshooting distroless and slim images. Learn tips and tricks for effective container management.
Kubernetes CKS Certification Guide 2023 - Exam Preparation and Falco Demo
Explore Kubernetes CKS certification essentials, including exam tips, cloud-native concepts, and Falco security tool. Gain insights and practical knowledge to become a certified Kubernetes security specialist.
Ensuring Success with Kyverno in Production - What You Must Know
Explore essential strategies for successful Kyverno deployment in production environments, covering policy creation, enforcement, scalability, and integration with existing workflows. Gain insights on optimizing performance and maintaining stability.
Safeguarding Cloud Native Supply Chain - Notary Project Overview and New Features
Explore how Notary Project enhances cloud native supply chains through authentic container images and OCI artifacts. Learn about new features, roadmap, and upcoming developments in software supply chain security.
Attacking and Defending Kubernetes Clusters with KubeHound Attack Graph Model
Explore Kubernetes cluster security using KubeHound attack graph model. Learn offensive and defensive strategies to enhance your IT infrastructure protection.
Kubernetes Bootstrap Tokens and AKS - Security Implications
Explore Kubernetes bootstrap tokens and AKS security in this TROOPERS24 talk. Gain insights into node authentication and potential vulnerabilities in container orchestration.
Hitchhiker's Guide to Automotive Container Security Using eBPF
Explore automotive container security with eBPF in this TROOPERS24 talk. Learn innovative techniques to enhance vehicle cybersecurity and protect against emerging threats in the automotive industry.
Argo CD and GitOps Security: Exploiting Redis Vulnerability in Kubernetes Clusters
Unveiling a critical vulnerability in Argo CD, exposing Kubernetes clusters to privilege escalation attacks. Learn about the exploit, its impact, and essential mitigation strategies for GitOps security.
The Runtime Rodeo - Taming Open Source Image Behavior
Explore a new standard for creating behavioral fingerprints of open source images at runtime, enhancing cloud native security beyond traditional software supply chain measures.
A Step Closer to Secure Development: Using in-Toto and OPA Gatekeeper to Verify Artifact Integrity
Explore securing software supply chains using in-toto, Witness, Archivista, and OPA Gatekeeper. Learn to verify artifact integrity from development to Kubernetes deployment.