In-Toto: Attestations and Software Supply Chain Security
Explore in-toto framework's advancements in software supply chain security, including attestation verification, type mapping, and integrations with CNCF projects and industry tools.
Real World SPIFFE Scenarios and Outcomes
Explore real-world scenarios and outcomes of deploying SPIFFE across infrastructure, including benefits for security, interoperability, compliance, and audibility in distributed systems.
Attacking and Defending Kubernetes TEE Enclaves in Critical Infrastructure
Explore Kubernetes TEE enclaves for critical infrastructure security. Learn attack and defense strategies, threat modeling, and compliance benefits for various regulations.
Updates from The Update Framework
Explore The Update Framework's role in secure content delivery, its protection against supply chain attacks, and its evolving ecosystem with insights from TUF maintainers.
Fun with Continuous Compliance
Explore continuous compliance strategies, including OSCAL for automated assessments and OSS tools like Falco and Voucher for scalable implementation, to streamline and modernize your DevSecOps compliance approach.
Secure Kubernetes Supply Chain: Lessons and Tools for Project Releases
Explore Kubernetes' enhanced security features for software supply chain, including SBOMs, provenance attestations, and digital signatures. Learn to implement these tools in your projects.
Enhancing Data Protection Workflows with Kanister and Argo Workflows
Explore advanced data protection strategies using Kanister and Argo workflows for enhanced cloud-native security and efficient backup processes.
Secure Your Software Supply Chain Using Observability
Explore techniques for enhancing software supply chain security through observability, focusing on key benefits and practical implementation strategies.
Using Argo Project to Secure Elastic - InfoSec Team's Journey
Discover how Elastic's InfoSec team leverages Argo Project tools for efficient K8s cluster management, GitOps-driven workflows, and seamless deployment of security use-cases in cloud environments.
How to Protect Your Cloud-Native Data - A Beginner's Guide
Learn essential strategies for safeguarding cloud-native data, exploring Kubernetes volumes, CSI drivers, and advanced capabilities to ensure robust protection in modern environments.
Air Gap: A Short Introduction and Why It Isn't Complicated
Discover the simplicity of Air Gap technology in this concise introduction, demystifying its concepts and applications for easy understanding.
The Update Framework (TUF) Maintainer Panel: Integrations, Enhancements, and Supply Chain Security
Panel discussion on The Update Framework: insights on integrations, supply chain security, and open-source project maintenance from TUF maintainers across various implementations and organizations.
CTF Overview and Experience - Preparing for SecurityCon
Prepare for SecurityCon's CTF event with a warm-up session covering container breakouts and Kubernetes misconfigurations. Suitable for all experience levels, learn CTF engagement techniques.
Top 5 Reasons and 5 Myths Debunked to Invest in Securing the Software Supply Chain
Discover key reasons and debunked myths for investing in software supply chain security, with insights on SCIM, SBOM, and SCITT to enhance your SDLC and meet compliance requirements.
Vanquishing Vulnerabilities - Preparing for Critical CVEs
Prepare for critical vulnerabilities with tools and practices for container image scanning, policy enforcement, network control, runtime configurations, and behavior monitoring.
First Steps to Full Lifecycle Security with Open Source Tools
Hands-on workshop demonstrating installation, configuration, and customization of open-source security tools for DevOps, focusing on Trivy for container and infrastructure security and Starboard for continuous security assurance.
How to Reduce CVE Noise with VEX - Vulnerability-Exploitability eXchange
Explore VEX, a tool to enhance vulnerability management by providing context to CVEs, improving risk assessment, and streamlining communication between vendors and consumers.
Cloud Native - Protecting Software Supply Chains Using Kyverno
Explore Kyverno's role in safeguarding software supply chains, enhancing security practices, and ensuring compliance in cloud-native environments.
Putting the Supply Chain Pieces Together: A Deep Dive into the Secure Software Factory
Explore a deep dive into supply chain security, focusing on implementing CNCF's Secure Software Factory architecture using cloud-native tools to enhance software provenance and artifact trustworthiness.
Securing the Supply Chain with Witness - A Framework for Supply Chain Security
Explore Witness, an open-source framework for supply chain security, its trust model, and implementation in CI pipelines. Learn about attestation collections, policy enforcement, and integration with cloud-native tools.
Using CNCF Best Practices to Enhance Software Supply Chain Security
Enhance software supply chain security using CNCF best practices. Learn from 3M's journey to improve code security, respond to vulnerabilities, and implement standards-based SBOM.