Serving Millions of Customers with Cloud Native and DevSecOps
Learn how a leading financial organization modernized its infrastructure using cloud-native technologies and DevSecOps practices to serve millions of customers efficiently and securely.
Case Study for Resource Control in Embedded Linux Container Integration
Explore resource control in embedded Linux containers for automotive applications, focusing on display sharing and container management advancements by AGL's Instrument Cluster Expert Group.
Nephio Release 1 - Simplifying Cloud-Native Automation for Telecom
Explore Nephio R1, an open-source solution for cloud-native automation in telecom. Learn about its intent-based approach, configuration management capabilities, and community impact.
Fetching, Configuring and Building Your Bitbake Project with Just One Command
Streamline Yocto/OpenEmbedded projects with kas: Simplify setup, configuration, and building. Learn advanced features for efficient project management and distribution in embedded Linux development.
Setting up Yocto Layers and Builds with Official Tools - 2023 Edition
Explore official tools for setting up and replicating Yocto layers and build configurations reproducibly. Learn about recent developments, available features, and future directions in layer management.
Fixing Security Flaws in Spring Boot Applications with IntelliJ IDEA and Snyk
Learn to identify and resolve security vulnerabilities in Spring Boot applications using IntelliJ IDEA and Snyk. Discover techniques to maintain secure code and manage open-source library risks effectively.
Automating Architectural Risk Analysis with Open Threat Model Format
Explore automating architectural risk analysis using Open Threat Model format. Learn to create OTM files, integrate threat modeling into DevSecOps, and address challenges in software development security.
OWASP API Security: Sufficient Logging and Monitoring for API Protection
Explore real-world examples and best practices for implementing sufficient API logging and monitoring to enhance security, observability, and incident response capabilities.
OWASP ZAP and DeepFactor - Continuous AppSec Observability for DevSecOps
Explore how DeepFactor's observability enhances OWASP ZAP for comprehensive DevSecOps, detecting security risks in modern cloud-native applications through advanced event monitoring.
SecDevOps - Integrating Security into Development and Operations
Explore SecDevOps: integrating security into CI/CD pipelines, securing development environments, and implementing security as code for robust cybersecurity from the start.
Ten DevSecOps Culture Failures
Explore common pitfalls in implementing DevSecOps culture and learn strategies to overcome them for more effective security integration in software development.
Advanced API Security with Kong - Developer Day 2021 Labs
Learn to secure APIs using Kong Gateway and Okta. Configure OIDC authentication for Kong Developer Portal and Manager, and explore various security plugins and features.
Shifting Security from Right to Left
Discover how to integrate security into your development workflow using Snyk's tools in IntelliJ IDEA, enabling early detection and remediation of vulnerabilities in project dependencies.
Use Seafile Sync and Drive Self Hosted, Open Source Options Instead of Google and Dropbox
Explore Seafile: A self-hosted, open-source alternative to cloud storage services. Learn to set up, manage, and sync files securely on your own hardware for enhanced privacy and control.
Making Permissions Accessible to Anyone With Permit.io
Explore challenges and best practices in permissions and access control with Or Weis from Permit.io, discussing solutions for making authorization accessible and efficient for developers.
Introduction to Teleport - Secure Access Management for Linux and Kubernetes
Explore Teleport for secure infrastructure access management, covering installation, user creation, SSH auditing, CLI usage, and Kubernetes integration.
Hands-on Introduction to Sigstore - Securing the Software Supply Chain
Comprehensive introduction to sigstore, covering container image signing, keyless mode, transparency logs, and image policy enforcement with Kyverno for enhanced software supply chain security.
Hands-on Introduction to Snyk - Security Scanning for Dependencies, Code, and Containers
Comprehensive introduction to Snyk, covering dependency security, code analysis, container scanning, and Kubernetes YAML scanning. Hands-on demonstration of Snyk's features for identifying and addressing vulnerabilities.
Hands-on Introduction to Telepresence for Kubernetes Development
Hands-on guide to Telepresence for local Kubernetes development. Learn installation, networking, and intercepts to streamline microservices workflow and boost productivity.
Stop Trivializing Cybersecurity - Level Up and Treat Yourself Like a Professional
Elevate your cybersecurity approach: Treat it as a professional discipline, emphasizing continuous learning and skill development to effectively combat evolving threats.
Build More Secure Apps with OWASP SKF and ASVS on Kubernetes
Enhance app security using OWASP SKF & ASVS on Kubernetes. Learn integration, manage ASVS requirements, and explore SKF Labs. Includes demo and GitHub repo for easy deployment on EC2 or AWS.