Escaping Virtualized Containers
Explore container security, focusing on shared kernel vulnerabilities that may allow processes to escape and compromise the host system. Learn about potential risks and mitigation strategies.
Lean Security
Explore lean security strategies to align with DevOps and Continuous Delivery, enhancing transparency and efficiency while maintaining robust defense systems in fast-paced business environments.
Infosec in the New World Order - Rugged DevOps and More
Explore the intersection of information security and DevOps with Gene Kim, focusing on rugged DevOps principles and their impact on modern cybersecurity practices.
DevOps, CI, APIs, Oh My! - Security Gone Agile
Explore agile security practices for rapid deployment in DevOps environments, covering infrastructure, APIs, and code security to keep pace with modern development cycles.
DevOops, I Did It Again
Explore security vulnerabilities in DevOps tools and practices, including AWS, Chef, Puppet, and Jenkins. Learn about misconfigurations and potential risks in fast-paced development environments.
Automate Security Tests for APIs with Syntribos - An Open Source Security Scanner
Explore Syntribos, an open-source automated security scanner for RESTful APIs. Learn its design, configuration, and capabilities to detect vulnerabilities like SQL injection and DoS attacks efficiently.
Docker Security
Explore Docker's impact on DevOps, its benefits, and security concerns. Learn about container technology, identity management, and emerging solutions in the Docker ecosystem.
Doing AppSec at Scale - DevOps + Agile + CI/CD == AppSec Pipelines
Scaling AppSec through DevOps, Agile, and CI/CD practices. Learn strategies to efficiently manage application security across large organizations using automation, orchestration, and ChatOps.
Rugged Software Engineering
Practical strategies for rapid and secure software development, addressing challenges in modern engineering organizations and emphasizing continuous deployment, vendor alerts, and language safety.
Your Last Manual Assessment
Automate security assessments using browser hooks and Selenium, transforming manual tests into robust scripts ready for continuous delivery integration.
Attacking Development Pipelines for Actual Profit
Explore CI/CD pipeline vulnerabilities and real-world attacks. Learn methodologies for identifying and exploiting weaknesses in development infrastructure for enhanced security.
Threat Modeling for Linux Containers LXC, Docker and the Cloud
Explore threat modeling for complex cloud systems, focusing on Linux containers and OpenStack. Learn innovative approaches beyond traditional data flow diagrams for effective security analysis.
BlackBox - A Container Security Monitor for Protecting Containers on Untrusted Operating Systems
Innovative container security architecture using a trusted monitor to protect data confidentiality and integrity from untrusted operating systems, with minimal performance impact.
Beyond Distributed Tracing
Innovative method for aggregated end-to-end observability in microservices, enhancing root-cause analysis and outage prevention through Critical User Interaction attribution.
Lessons Learned Using the Operator Pattern to Build a Kubernetes Platform
Explore the Operator pattern in Kubernetes for automating SRE tasks, with insights from Red Hat's OpenShift development and guidance on when to implement custom Operators.
CLP - Efficient and Scalable Search on Compressed Text Logs
Innovative tool for lossless log compression with fast search capabilities, outperforming existing solutions in compression ratio, search speed, and ingestion performance for petabyte-scale log management.
Multi-Architecture Container Images - Why Bother, and How To
Explore multi-architecture container images: their importance, how registries handle them, and techniques for building cross-platform containers to ensure software compatibility across diverse CPU architectures.
The Container Operator's Manual
Practical insights on container adoption in production environments, exploring advantages, challenges, and tradeoffs for engineers and organizations considering containerization at scale.
GitOps - An Elegant Tool for Hybrid Cloud Kubernetes
Explore GitOps for consistent application management across multiple Kubernetes clusters. Learn deployment, management, and migration techniques through live demonstrations.
The Map Is Not the Territory - How SLOs Lead Us Astray, and What We Can Do about It
Explore SLO limitations in complex services, understand failure modes, and learn best practices for robust SLO construction to improve reliability and decision-making in modern systems.
Latency SLOs Done Right
Explore effective methods for implementing Latency Service Level Objectives (SLOs), addressing common pitfalls in latency measurement and aggregation for improved service quality tracking.