Skip the Anxiety Attack - Build Secure Apps with Docker and Kubernetes
Learn to build secure applications using Docker and Kubernetes, reducing anxiety and enhancing your development process with industry-leading containerization and orchestration technologies.
Cyber Engineering with Containers - Government Software Deployment Challenges
Explore how containers address cybersecurity and compliance challenges in government software deployment, ensuring successful project lifecycle from launch to sunset.
Automating the DoD Container Hardening Pipeline
Explore DoD's automated container hardening pipeline, reducing vulnerabilities by up to 95% while maintaining functionality. Learn methodologies for instrumenting, testing, and optimizing containers to meet strict security standards.
Verifiable End-to-End Secure OCI Native Machines
Explore a secure toolchain for verifiable workloads using signed OCI images, ensuring tamper-proof boot processes and authenticated communication with hosts.
A Checklist for Security from Container to Kubernetes - An End-to-End Overview
Comprehensive overview of container and Kubernetes security, covering lifecycle, supply chain, infrastructure, features, and potential attacks. Practical insights for robust cloud-native security implementation.
Enforcing a Secure Supply Chain on Kubernetes
Explore implementing and enforcing a secure supply chain in Kubernetes using open-source projects, including Sigstore keyless workflow and signature verification policies.
Docker Security Insights - Vulnerabilities and Best Practices
Explore Docker security vulnerabilities, countermeasures, and best practices for production environments. Learn about container risks, secrets management, content trust verification, and open-source library considerations.
Software Defined Security Governance - Key Challenges and Modern Life Cycle
Explore software-defined security governance, digital transformation, and evolving security practices in modern development lifecycles with industry expert John Steven.
Containers: Attack and Defense Strategies
Explore container security vulnerabilities and defense strategies with experts Rohit Pitke and Emmanuel Law in this OWASP Foundation presentation.
Knative Security Pipelines
Explore Knative security pipelines with expert insights on enhancing cloud-native application security, deployment strategies, and best practices for robust containerized environments.
Can Kubernetes Keep a Secret? - Secure Secret Management in Kubernetes
Explore secure secret management in Kubernetes, including native secrets' limitations and alternative solutions like Kamus for encrypting sensitive data accessible only by your app at runtime.
Deploying and Supporting Kubernetes Applications at Scale on the Edge
Explore deploying Kubernetes apps at scale on edge environments across clouds, focusing on industry patterns, enablers, and lessons learned for efficient cloud-native solutions.
Hack My Mis-Configured Kubernetes
Explore common Kubernetes misconfigurations and learn practical hacking techniques to identify and exploit vulnerabilities, enhancing your understanding of container security.
Kubernetes Risk Assessment - Going One Level Deeper
Explore Kubernetes security risks, dynamic components, and assessment methodologies using MITRE ATT&CK framework to enhance cluster protection and mitigate vulnerabilities.
Live Hack: Exploiting and Securing Mis-Configured Kubernetes Clusters
Explore key Kubernetes security vulnerabilities through live hacking, understanding their implications, potential attack vectors, and remediation strategies for robust cluster protection.
Docker Secure Substrate for Container Apps
Explore Docker's secure substrate for container apps, featuring insights from solutions architect and security engineering experts on enterprise and government applications.
Best Container Security Workflow for Your Organization
Discover strategies for integrating security into your software supply chain, focusing on container security workflows that benefit both developers and DevSecOps teams.
My Container Image Has 500 Vulnerabilities - Now What?
Learn strategies to address and mitigate vulnerabilities in container images, enhancing security practices for Docker deployments.
Top Dockerfile Security Best Practices
Learn essential Dockerfile security practices to enhance container safety and protect your applications from vulnerabilities and potential attacks.
Reducing Alert Fatigue with Container Scans: Correlate, Prioritize and Filter Based on Usage
Strategies to manage container vulnerabilities: correlate with runtime data, prioritize based on usage, and filter false positives for efficient security in multi-container applications.
Docker Scout - Securing the Complete Software Supply Chain
Explore Docker Scout's real-time vulnerability detection, remediation suggestions, and policy evaluation for enhanced software supply chain security across the entire development lifecycle.