Practical Guides for Enhancing Your Software Supply Chain Security
Practical guide to fortify software supply chain security using open-source tools. Covers building, packaging, dependencies, code scanning, and establishing trust across the delivery process.
Implementing Kubernetes Security at Scale with HashiCorp and SUSE
Comprehensive Zero Trust solution for Kubernetes security at scale using SUSE Rancher, NeuVector, and HashiCorp Vault. Includes overview, challenges, and live demonstration.
Confidential Computing on Azure - Secure Container Deployment and Management with Contrast
Master secure container deployment in Azure through confidential computing, covering data protection, end-to-end encryption, cluster setup, and container management with Contrast integration.
Secure Container Supply Chain in Kubernetes the Easy Way
Explore secure container supply chain in Kubernetes using Notary v2, ORAS, and Ratify. Learn to sign, verify, and distribute artifacts across registries for enhanced security in cloud-native environments.
Deep Dive into Falco - Empowering DevSecOps with Real-time Container Security
Explore Falco's Kubernetes-native runtime security features, detect threats in real-time, and enhance container security posture through behavior-based rules and customized alerts.
Squashing Trampoline Pods: The Future of Securely Enabling Hardware Extensions
Discover how to secure hardware extensions in Kubernetes by implementing node-level security features and preventing cross-node compromises through advanced admission policies and token claims.
Elevate Your Kubernetes Policy Game with Kyverno - Policy as Code Lifecycle Management
Master Kubernetes policy management with Kyverno through real-world insights from Robinhood's migration journey, covering validation, enforcement, lifecycle management, and performance optimization for large-scale deployments.
Mish-Mesh: Abusing the Service Mesh to Compromise Kubernetes Environments
Discover critical security vulnerabilities in Kubernetes service mesh deployments and learn defensive strategies against unauthorized access, system compromises, and secret exposure.
From Standards to Practice: The Journey to Container Maturity
Discover how Yelp manages container security at scale, from implementing vulnerability tracking to developing maturity models that guide thousands of engineers in maintaining robust Docker and Kubernetes deployments.
Strategies for Patching Critical CVEs in Open Source Software - Best Practices and Tools
Master strategies for handling critical CVEs in open source packages, from patching container images with Copacetic to building projects from scratch, while learning best practices for software supply chain security.
Comparing Kubernetes Security Agents: Falco, Tetragon and KubeArmor
Explore a detailed comparison of three leading eBPF-based Kubernetes security solutions, examining performance impacts, required privileges, and key features to make an informed choice for cluster protection.
CRI-O Features for Fun and Profit - Advanced Kubernetes Container Runtime Capabilities
Discover cutting-edge CRI-O and Kubernetes features, from sigstore signature support to Podman pod integration and OCI artifacts, designed for cluster admins seeking advanced container runtime capabilities.
Robust Multi-Tenancy in Kubernetes - Building and Managing Multi-Tenant Clusters
Discover how Uber implements robust multi-tenancy in Kubernetes, exploring isolation strategies, node pools, and namespace integration for managing multiple users while ensuring security and performance.
Why Perfect Compliance Is the Enemy of Good Kubernetes Security
Discover practical approaches to Kubernetes security that balance compliance requirements with operational efficiency, focusing on risk reduction and platform functionality rather than perfect security scores.
Rogue No More: Securing Kubernetes with Node-Specific Restrictions
Discover essential security enhancements for Kubernetes that prevent escalation attacks through node-specific restrictions, bounded service account tokens, and validating admission policies for robust infrastructure protection.
Stop Kubernetes' Revolving Door: A Hands-on Tutorial to Secure a Kubernetes Cluster
Master essential security practices for Kubernetes clusters through hands-on exercises covering authentication, authorization, network policies, and pod security to protect against potential threats.
Seccomp and eBPF: Understanding Container Security and Kernel Access Control
Explore container security hardening through Seccomp and eBPF, comparing their approaches to limiting Linux kernel access and implementing the principle of least privilege in Kubernetes environments.
Podman: Leaving the Dock - Building and Managing Containers Beyond Docker
Discover how to build and manage containers with Podman, exploring rootless containers, deployment strategies, and real-world applications for both developers and DevOps engineers.
Auditing Kubernetes Users: Tracking Security Holes
Discover how to implement effective Kubernetes auditing mechanisms, track user activities, and detect security vulnerabilities through RBAC analysis and audit API implementation.
Defending AI on Kubernetes - A Red Team Security Playbook
Explore offensive security strategies and defense mechanisms for AI systems on Kubernetes, focusing on vulnerability assessment and protective measures from an attacker's viewpoint.
Watching the Watchers - The Hidden Risks of Container Scanning Tools
Explore critical security risks and mitigation strategies for container vulnerability scanning tools, focusing on system protection, secure configurations, and defense-in-depth approaches.