Day in the Life of a Base Image - The Evolution of Vulnerabilities in Popular Containers
Explore the evolution of vulnerabilities in popular container images, understand security challenges, and learn practical steps to manage and prevent issues in your development process.
A 10-Step Guide for Integrating Security Metrics Into Your Observability Stack
Discover a 10-step approach to enhance your observability stack with security metrics, focusing on integrating Trivy with Prometheus for robust application monitoring and protection.
A Packet Eye View of the Istio Ambient Mesh
Explore Istio's new sidecarless architecture for service meshes, addressing concerns about sidecars while maintaining key functions. Learn through demos and architectural insights.
Securing the IaC Supply Chain
Explore securing Infrastructure as Code supply chains, applying software security principles to IaC pipelines. Learn about Crossplane's integration with Sigstore for enhanced provenance and attestations.
Image Signing and Runtime Verification at Scale - Datadog's Journey
Explore Datadog's innovative approach to image signing and runtime verification, addressing software supply chain security challenges in complex, large-scale environments.
Building Supply Chain Policies with Gatekeeper and Ratify
Learn to enhance Kubernetes security using Gatekeeper and Ratify for supply chain policy enforcement. Explore admission controllers, CRD-based policies, and external data verification for robust cluster protection.
Life of a CVE with Ingress-Nginx - Understanding the Project's Release Cycle
Explore Ingress-Nginx's release cycle, security measures, and ongoing improvements. Learn about efforts to enhance release processes, reduce complexity, and maintain CVE-free status in this critical Kubernetes component.
Container Is the New VM: The Paradigm Change for Cloud Computing
Explore the shift from VMs to containers, addressing challenges in load balancing, firewalls, and autoscaling while ensuring security in cloud environments.
Guardians of the Runtime - Leveraging Behavioral Analysis and Policies for Kubernetes Security
Explore innovative Kubernetes security using behavioral analysis in CI testing and native policies. Learn hands-on practices for implementation and enforcement to protect against latest threats.
Automating Configuration and Permissions Testing for GitOps with OPA Conftest
Learn how The New York Times automates configuration and permissions testing for GitOps using OPA Conftest, enabling secure self-service deployments while maintaining developer autonomy.
Preparing for CVEs with eBPF - Lessons from Log4jshell
Discover how eBPF can detect and prevent critical vulnerabilities like Log4jshell in Kubernetes environments, providing enhanced security and real-time protection for your systems.
Malicious Compliance: Reflections on Trusting Container Scanners
Explore creative ways to bypass container image analysis and admission control detection, revealing limitations of validation tools and improving security policy creation.
Hacking and Defending Kubernetes Clusters - Live Demonstration
Live demonstration of Kubernetes cluster attacks and defenses, exploring vulnerabilities, mitigation strategies, and practical security techniques for effective threat modeling and protection.
Agones and Quilkin: Kubernetes Game Server Orchestration and UDP Service Mesh
Explore Agones and Quilkin for scalable, secure multiplayer game server orchestration on Kubernetes. Learn about UDP service mesh, xDS API implementation, and simplified integration for enhanced game communication.
Securing the Container Supply Chain with Notary
Explore Notary v2's advanced capabilities for securing software supply chains, including core functionalities, enterprise scenarios, and ecosystem integrations.
Hardening Kubeflow Security for Enterprise Environments
Learn about Kubeflow security vulnerabilities, best practices, and improvements for enterprise environments. Gain insights on addressing unauthorized access, user impersonation, and data protection in MLOps platforms.
Istio for Controls Compliance
Explore Istio's role in regulatory compliance beyond mTLS, covering PCI DSS, FedRAMP, and GDPR. Learn how to implement controls and transition to identity-based security models.
Verifiable GitHub Actions with eBPF
Explore eBPF-based solution for securing GitHub Actions pipelines against supply chain attacks, featuring runtime security profiling and build verification techniques.
How to Make Your K8s Cluster Survive Without Internet Access - Airgap Solutions
Strategies for maintaining Kubernetes clusters in air-gapped environments, addressing challenges like limited internet access, firewalls, and proxies. Practical solutions for container runtime, registry, and policy management.
Life Without Sidecars - Is eBPF's Promise Too Good to Be True?
Explore eBPF's potential to revolutionize service mesh technology, examining its promises, limitations, and impact on cloud-native infrastructure security, resilience, and operational complexity.
IDP Security for Platform Engineers Using Backstage and Kubescape
Explore how Backstage and Kubescape integrate to provide comprehensive Kubernetes security coverage, enabling visualization and management of security posture across your pipeline.