SQL Migration to Azure - Best Practices, Accelerators, and Production Case Studies
Explore SQL workload migration to Azure, covering best practices, tools, and real-world case studies. Learn end-to-end migration lifecycle and determine the best approach for your organization.
Power BI Governance - Top Tips
Learn essential Power BI governance strategies to balance user flexibility with risk management in complex deployments across multiple business units. Gain practical techniques for effective implementation.
Demystifying Dynamic SQL
Learn to create and utilize dynamic SQL scripts to enhance productivity and solve programming challenges, while understanding associated risks and mitigation strategies.
Safety Critical Software - Would You Let Linux Drive Your Car
Exploring Linux's potential in safety-critical systems, discussing reliability, traditional approaches, and the challenges of using open-source software in life-dependent applications.
Indirect External Access
Explore indirect external access in Linux systems, covering implementation, benefits, and potential challenges for developers and system administrators.
Why is devm_kzalloc() Harmful and What Can We Do About It
Explore the drawbacks of devm_kzalloc() in Linux kernel development and discover alternative approaches for efficient memory management and resource allocation.
Trusting SDKs
Explore the risks of third-party SDKs in iOS development and learn how attackers can inject malicious code into your app. Discover vulnerabilities and protection strategies.
Where Are Your Images Running? Stop Worrying and Start Encrypting!
Explore container image encryption for geofencing execution, ensuring trusted nodes run trusted images. Learn about DevOps, trust bootstrapping, and key management for secure container deployment.
Making Compliance Cloud Native
Explore how to meet compliance requirements in containerized environments using cloud-native technologies. Learn techniques for communicating with auditors and addressing misconceptions about Kubernetes and container security.
Threat Modelling - Securing Kubernetes Infrastructure & Deployments
Explore secure Kubernetes architecture, threat modeling, and defense-in-depth strategies for regulated environments. Learn real-world examples, compliance standards, and advanced mitigations for multi-tenant security.
Securing Container Delivery with TUF
Explore TUF's architecture for secure container delivery, protecting against attacks and mitigating risks in software distribution, even after security breaches.
The Common Configuration Scoring System for Kubernetes Security
Explore KCCSS, an open-source framework for assessing Kubernetes workload risks. Learn how it calculates scores, its implementation in kube-scan, and best practices for securing K8s applications.
Uncharted Territories - Discovering Vulnerabilities in Public Helm Charts
Explore vulnerabilities in public Helm Charts, examining security considerations for both Helm as a tool and individual charts. Learn about CNCF's security investments and their impact on Kubernetes ecosystem.
Lessons From Migrating to SPIFFE After 10 Years of Service Identity at Square
Insights from Square's migration to SPIFFE for service identity across environments, covering challenges, community support, risk management, and lessons learned.
Using Open Policy Agent to Meet Evolving Policy Requirements
Explore how Open Policy Agent enables rapid development and deployment of evolving security policies for Kubernetes platforms, meeting diverse compliance requirements across commercial and government environments.
How DoD Uses K8s and Flux to Achieve Compliance and Deployment Consistency
Explore DoD's journey with K8s and Flux for improved compliance, deployment consistency, and air-gapped operations in restricted environments.
Evaluating Business Risk for Open Source Cloud Native Projects
Explore strategies for assessing and mitigating business risks associated with open source cloud native projects, focusing on governance, neutrality, and community factors.
Policy Matters! The Why, What, and How of Kubernetes Policy Management
Explore Kubernetes policy management essentials, including real-world use cases, compliance automation, and best practices for effective policy-as-code implementation across multiple clusters.
The Hidden Costs - How "Free" Is Kubernetes Really?
Explore hidden costs of Kubernetes adoption, including infrastructure, security, automation, and skill enablement. Learn from real-world experiences to optimize your CaaS implementation.
A Safer Curl - Bash for the Cloud
Learn how to transform risky curl | bash installations into secure one-liners using Porter and Notary, making cloud-native application deployments safer without sacrificing convenience or ease of use.
Quantifying the Business Value of Cloud-Native Data Management
Explore quantifiable business value of cloud-native data management beyond loss prevention, including improved app migration, CI/CD pipeline efficiency, and comprehensive lifecycle cost analysis.