Lessons Learned from Automating SLSA-Compliance Evaluation
Explore automating SLSA-compliance evaluation, covering provenance, pipeline dynamics, and challenges in implementing various SLSA levels. Gain insights on evidence-based trust and unfalsifiable provenance.
Open Source Cybersecurity - Addressing Challenges in Software Security
Explore open source cybersecurity challenges and solutions with industry experts, discussing survey findings, enterprise impacts, and automation strategies for improved software security.
Addressing Cybersecurity Challenges in Open Source Software - June 29, 2022
Explore cybersecurity challenges in open source software, focusing on organizational priorities, improvement strategies, and policy drivers. Gain insights from Snyk and Linux Foundation research.
Road to SLSA3 - Non-falsifiable Provenance in Tekton with SPIFFE/SPIRE
Explore non-falsifiable provenance in Tekton using SPIFFE/SPIRE, enhancing software supply chain security and achieving SLSA3 compliance.
Accelerating Software Defined Vehicles Through Open Source Software
Explore how automakers leverage open source software for software-defined vehicles, focusing on Automotive Grade Linux's collaborative platform and future roadmap for connected car technology.
Zero Trust Best Practices in Government and Federal Industries
Explore key components and best practices for implementing zero trust security in government and federal industries, focusing on comprehensive protection strategies and advanced technologies.
Use AI to Turn Data Into Actionable Information With PagerDuty and AWS
Discover how PagerDuty and AWS leverage AI to transform data into actionable insights, streamline incident response, reduce noise, and improve triage efficiency in real-time.
Enabling the Silicon Labs EFR Family in Zephyr - A Case Study from a Port's Lifecycle
Explore the process of integrating Silicon Labs EFR32 MCUs into Zephyr, covering challenges, solutions, and future plans. Learn about BLE support and CI testing in simulated environments.
Recent Advances in U-Boot
Explore major U-Boot developments including Kconfig migration, UEFI support, and binman. Learn about minor enhancements in areas like IPv6, RISC-V, and device tree schema, concluding with a demonstration.
HashiCorp's Multicloud Zero Trust Platform
Explore HashiCorp's innovative platform for implementing zero trust security across multicloud environments, enhancing data protection and access control.
Introducing HAMISPA - High Availability MISP in AWS
Learn to deploy a highly available MISP (Malware Information Sharing Platform) in AWS for enhanced threat intelligence sharing and collaboration.
Fight Back Against Cyber Risk in the Software Supply Chain - Secure DevSecOps Pipeline for Regulated Environments
Secure DevSecOps pipelines for regulated environments: best practices, open-source tools, and real-world application in banking using BIAN framework and technologies like Tekton, Terraform, and SonarQube.
Improve Vulnerability Management with OCI Artifacts - It Is That Easy
Learn to enhance vulnerability management using OCI artifacts. Discover how to efficiently utilize SBOMs, signed attestations, and open-source tools for improved supply chain security at scale.
Automated Cloud-Native Incident Response with Kubernetes and Service Mesh
Explore automated incident response in cloud-native environments using Kubernetes and service mesh. Learn best practices, tools, and techniques for effective security management and threat mitigation.
Filling the Gaps in Kubernetes Flavored SLSA with Threat Modeling
Explore threat modeling for Kubernetes CI/CD security using SLSA standards. Learn to identify and mitigate vulnerabilities in supply chain processes, with practical insights from Tekton's implementation.
DevSecOps Best Practices in Cloud Native Computing - CMCC Case Study
探索中国移动通信公司的DevSecOps最佳实践，了解如何将安全无缝集成到云原生开发和运维流程中，提高效率和安全性。
Trust No System: The Unsettling Reality of Zero Trust
Challenging "Zero Trust" in cloud-native security, this talk explores trust as an observer's decision, debunks myths, and offers strategies for managing trust in cloud environments.
Taking Control of Reliability in Cloud Native Services - Issues and Best Practices
Explore strategies for maintaining reliability in cloud native services, addressing common pitfalls, best practices, and responsibilities, with insights from a fintech case study.
Critical DevSecOps Considerations for Multi-Cloud Kubernetes
Explore DevSecOps for multi-cloud Kubernetes: containerization, infrastructure, observability, and system-wide security best practices. Gain insights from cloud-native experts on optimizing and securing Kubernetes environments.
What Can Go Wrong When You Trust Nobody? Threat Modeling Zero Trust
Explore Zero Trust principles and threat modeling for cloud-native systems. Learn to implement secure architectures using Istio, Kubernetes, SPIRE, and OPA for robust, distributed workload protection.
Path to Production: Sustainable Compliance in Strict Environments
Discover strategies for achieving sustainable compliance in highly regulated environments, focusing on DoD practices using Big Bang, Iron Bank, and Kyverno for faster, secure-by-default Kubernetes deployments.