TUF-En Up Your Signatures - Enhancing Software Distribution Security
Explore The Update Framework (TUF) for enhanced software signing and verification. Learn about its security features, integrations, and new developments for secure software distribution at scale.
Software Bill of Materials (SBOM) in Kubernetes - Best Practices and Approaches
Explore SBOM implementation in Kubernetes, comparing approaches and best practices. Learn how Paketo Buildpacks embeds SBOMs in application images using Syft, enhancing software supply chain security.
Putting Hackers Breaching Your Cluster in Automatic Quarantine
Explore automatic isolation techniques for breached apps in Kubernetes clusters, enhancing overall security and minimizing potential damage from hacker intrusions.
Securing Open Source Software Supply Chain - Continuous Secure Software Ingestion
Explore secure OSS ingestion in enterprises using Continuous Secure Software Ingestion (CSSI) application, built on Tekton & Open Policy Agent, for automated artifact grooming and policy-driven security checks.
Why Machines Deserve Rights - Rethinking Automated Infrastructure Access with OSS Teleport Machine ID
Explore identity-based access control for machines in modern infrastructure. Learn about Teleport Machine ID for secure, auditable, and efficient automated access to cloud resources.
Secure CI/CD Using JSON Web Token (JWT)
Explore how GitLab leverages JWT for secure access to secret management solutions, enhancing DevSecOps practices and addressing challenges in retrieving sensitive data across cloud providers.
Fileless Attack - Detecting the Undetectable
Explore fileless attacks in Linux containers, their detection using eBPF tools like Falco, Tracee, and Tetragon, and learn to identify unexpected activities in cloud-native environments.
Hack Back: Learning Security with Capture-The-Flag Events
Explore state-of-art Kubernetes attack scenarios and defense strategies through Capture-The-Flag exercises. Learn to improve your organization's security using open-source tools like Simulator and Tetragon.
Notary: State of Development and Supply Chain Security
Explore supply chain security with Notary project overview, Notary v2 updates, and ecosystem context. Learn about TUF and in-toto projects and their role in achieving security outcomes.
Achieving End-to-End Software Supply Chain Security with in-toto
Explore in-toto's advancements in software supply chain security, including artifact tracking, attestation types, and integrations with CNCF projects for cloud-native identity protection.
Building Sigstore Policies from Scratch
Learn to create and implement Sigstore policies for secure software supply chains, enhancing your project's integrity and trust in the cloud-native ecosystem.
Life of a Sigstore Signature - Understanding Code Signing for Container Images
Explore Sigstore's code signing process for Kubernetes images, including keyless signing, certificate authorities, and transparency logs. Learn to configure admission controllers for cluster security.
Know Your Dependencies - A Guide to Automating Dependency Assurance
Explore automated dependency assurance mechanisms for enhanced visibility into software components, addressing vulnerabilities and license obligations while maintaining development velocity.
Sigstore: Evolution and Future of Software Security Signing
Explore Sigstore's journey in software security signing, its impact on Kubernetes, and future directions. Learn about supply chain security and cutting-edge cryptographic technologies.
Project Calico Network Policies
Explore Project Calico's network policies for Kubernetes, enhancing security and control in cloud-native environments.
SLSA with Cosign and Kyverno - Securing Software Delivery in Cloud Native Environments
Explore SLSA, Cosign, and Kyverno for enhancing software delivery security in cloud-native environments. Learn practical techniques to safeguard your development pipeline.
Keeping Up with CVEs: Finding Needles in Haystacks - Practical Vulnerability Assessment
Discover practical approaches to assess product security beyond raw vulnerability numbers, focusing on risk assessment and understanding scanner limitations in container image analysis.
Data Security and Storage Hardening in Rook and Ceph
Explore security options for Rook with Ceph, including threat modeling, encryption, access controls, and infrastructure hardening for robust data protection in container-based storage systems.
Change is Hard - Securing the Future Today
Explore the socio-technical challenges of implementing modern security practices, blending research and anecdotes to address resistance to change and holistic problem-solving approaches.
SPIFFE: In Theory and Practice - Deep Dive and Q&A
Explore SPIFFE's vision, components, and role in cloud-native environments. Learn about the SPIFFE specification, IDs, naming, and trust domains in this informative deep dive with Q&A.
Shifting Security Left - Simplifying Security for Kubernetes and OpenShift Environments
Learn to simplify security in Kubernetes and OpenShift, focusing on authentication, secrets management, and bridging the gap between security and DevOps for more efficient cloud-native environments.