Securing Shopify's Software Supply Chain - Mitigating Supply Chain Attacks
Explore techniques for securing software supply chains, including cloud-based defenses, trust establishment, and malicious behavior detection, drawing from Shopify's experiences.
The Attacker's Guide to Exploiting Secrets in the Universe
Explore methods to discover and exploit secrets in git repositories, containers, and compiled apps. Learn about vulnerabilities in API keys and credentials across various environments.
Secure Containers and Workloads with Certificates in CI/CD Pipelines
Learn to enhance security in CI/CD pipelines by implementing certificate-based protection for containers and workloads, ensuring robust safeguards for cloud-native applications.
Introduction to Zero Trust Networking and Infrastructure Access with Twingate
Explore Zero Trust Networking and secure infrastructure access with Twingate. Learn why VPNs fall short for IaC and discover innovative solutions for DevOps and IT teams, including Kubernetes integration.
Threat Model Report: Security Considerations for Hardening Declarative GitOps on Kubernetes with Argo CD
Explore security considerations for hardening Argo CD deployments in Kubernetes, focusing on mitigating misconfigurations and implementing best practices to enhance GitOps workflows.
Threat Model Report: Security Considerations for Hardening Declarative GitOps on Kubernetes with Argo CD
Explore security considerations for hardening Argo CD deployments in Kubernetes, focusing on mitigating misconfigurations and implementing best practices to enhance GitOps workflows.
Envoy Gateway End User Threat Model Report: Raising Awareness of Gateway API Security
Explore Envoy Gateway's security through a threat-driven analysis, providing insights for confident deployment as an edge proxy in Kubernetes clusters.
A Telco CNF Journey from Zero to Millions
Explore the challenges and solutions in deploying Telco-grade Cloud Native Functions on private Kubernetes clouds, focusing on operational, integration, and performance aspects.
Enforcing Supply Chain Security and Simplifying Compliance Audit for ArgoCD Deployments
Explore techniques for securing supply chains and simplifying compliance audits in ArgoCD deployments using open-source tools like Guac, Sigstore, and in-toto.
Enable Modern Privileged Access Management with HashiCorp Boundary
Discover modern privileged access management with HashiCorp Boundary, enabling identity-driven secure user access across dynamic environments while adopting zero trust security strategies.
When One Line Took Thousands of Websites Offline - Lessons from a Kubernetes Incident
Explore a critical incident where a single configuration change caused widespread website outages, examining the recovery process, lessons learned, and subsequent improvements in Kubernetes infrastructure.
Mender - Current and Future Status of Open Source OTA Updates for Embedded Systems
Explore Mender's open-source project for OTA updates to embedded systems. Learn about challenges, solutions, and future developments in this informative session.
Building a DDoS Testbed with Docker
Learn to build a DDoS testbed using Docker, exploring attack types, research challenges, and practical implementation strategies for cybersecurity professionals and researchers.
Grow Your Own Community - Lessons from Kubernetes Community Days in Europe
Insights and best practices for organizing successful Kubernetes Community Days events in Europe, covering team building, diversity, logistics, sponsorship, and finances.
Making Sense of Security Supply Chain - An Overview for Beginners
Explore supply chain security fundamentals, tools like Fulcio, Rekor, and cosign, and their integration in this beginner-friendly overview of the rapidly evolving landscape.
Identity-based Source Integrity with Gitsign
Explore Gitsign, a Sigstore project for keyless, identity-based Git commit signing. Learn its benefits over traditional methods and how it enhances security in CI/CD and GitOps workflows.
Digital Forensics with Container Checkpointing
Explore container checkpointing for digital forensics in cloud environments. Learn to capture and analyze forensic snapshots of running containers, enhancing security in ephemeral Kubernetes setups.
Growing the Chain: Trusting Build Provenance from Userspace
Explore techniques for establishing trust in CI/CD workflows, focusing on artifact signing, provenance generation, and building a chain of trust using open-source technologies like Sigstore and OIDC.
Greening the AI Cloud - Validating Power Models for Kubernetes Containers
Explore power consumption estimation for ML workloads using Kepler framework. Learn to create and validate power models for optimizing energy usage in data centers and Kubernetes environments.
Sylva Project: Achievements and Future Directions in Telco Cloud Homogenization
Explore Sylva's role in Telco Cloud & Edge homogenization, its key achievements, and future prospects for reducing fragmentation and integrating CloudNative and GitOps into the ecosystem.
DevSecOps Orchestration of Text Analytics with Containers
Explore secure container usage for text analytics in intelligence processing, focusing on Docker and Kubernetes for DevSecOps orchestration.