Ingress-Nginx and 2024 Plans - Roadmap and Future Developments
Explore ingress-nginx's 2024 roadmap, including modsecurity, potential LUA replacements, and challenges in decoupling control and data planes. Gain insights into future developments and strategies.
The Top 10 List of Istio Security Risks and Mitigation Strategies
Explore CNCF's Top 10 Istio security risks and learn effective mitigation strategies to protect cloud-native applications from threats, data breaches, and security incidents.
Cilium ClusterMesh - Strengthening Security Across Distributed Kubernetes Clusters
Explore Cilium ClusterMesh implementation for securing distributed Kubernetes clusters, featuring Sicredi's evaluation process, comparison with other service meshes, and practical application of security policies.
Cert-Manager's Stamped Certificates - From Concept to KubeCon Swag
Explore cert-manager's journey, from KubeCon swag to securing global infrastructure. Learn about X.509 certificates, local Kubernetes clusters, and the technology behind cryptographic signatures.
Securing 900 Kubernetes Clusters - Journey to ValidatingAdmissionPolicies
Explore Mercedes-Benz's journey in securing 900+ Kubernetes clusters, transitioning from Pod Security Policies to ValidatingAdmissionPolicies, and learn about challenges and advantages of native solutions.
Kubernetes Data Protection Working Group Deep Dive
Explore the current state and future of data protection in Kubernetes, including missing functionalities and collaborative efforts to enhance support across multiple SIGs.
Kubernetes Initial Access Vectors: Security Risks and Mitigations
Explore Kubernetes cluster security, focusing on initial access vectors. Learn about authentication methods, potential vulnerabilities, and real-world attack scenarios. Gain insights on detection strategies using cloud and audit logs.
VEXinating Container Images: The European Approach to Software Supply Chain Security
Explore VEX implementation for container image security, addressing European legislation and enhancing software supply chain resilience through machine-readable vulnerability management.
Brewing the Kubernetes Storm Center - Open Source Threat Intelligence for Cloud Native Ecosystems
Explore open-source threat intelligence for cloud-native ecosystems. Learn to validate threat models, quantify risks, and make informed defensive decisions using Kubernetes-based environments and real-world data.
Sandboxing in Linux with Zero Lines of Code
Explore Linux seccomp for process sandboxing without coding. Learn fine-grained controls, performance benefits, and approaches to easily secure applications in any programming language.
Asymmetric Encryption - A Deep Dive
Explore the mathematical foundations, evolution, and future of asymmetric encryption algorithms like RSA and ECDSA, including their strengths, vulnerabilities, and post-quantum implications.
Secret Store CSI Driver Tutorial for Kubernetes and AWS Secrets Manager
Comprehensive guide to Secret Store CSI Driver for Kubernetes security. Learn its importance, comparison with alternatives, and setup process. Includes demos on AWS Secret Manager integration and practical implementation.
Ask Me Anything About Istio Service Mesh
Experts discuss Istio service mesh, including ambient mesh, future developments, and technical challenges. Interactive Q&A session addresses production readiness, GAMMA's impact, and CNI compatibility.
What Is Going on Within My Network? A Subtle Introduction to Cilium Hubble
Explore Cilium Hubble for enhanced cloud-native network observability. Learn its eBPF-powered features, real-time monitoring capabilities, and how to implement it for improved visibility and security in your systems.
Near Real-Time Logging Solution Using Fluent Bit and OpenSearch for Kubernetes
Explore a near real-time logging solution for Kubernetes using Fluent Bit and OpenSearch. Learn about architecture, implementation challenges, and ensuring data privacy in multi-node clusters.
Automating the Search for Cryptanalytic Attacks
Explore automated cryptanalysis techniques with Maria Eichlseder as she discusses innovative approaches to searching for vulnerabilities in cryptographic systems.
Istio and DNS - Secure Integration and Modern Challenges
Explore Istio's complex relationship with DNS, focusing on security, interception, and integration options for modern DNS features in cloud-native environments.
Securing a Managed Jupyter Notebook Platform Using Istio and OPA
Learn how to secure a managed Jupyter notebook platform using Istio and OPA. Discover techniques for user isolation, traffic segmentation, and access authorization in multi-tenant ML environments.
A Not-so-Scary Way to Add Istio to Your Platform, Step by Step
Step-by-step guide to implementing Istio service mesh, from basic ingress control to advanced features like mutual TLS and policy-driven authentication, with practical insights for a smooth adoption process.
(Almost) Secure by Default - Next Steps for Hardening Istio in Production Environments
Explore advanced security measures for Istio in production, including mTLS, certificate management, and integration with network policies and cloud security services for a robust zero-trust architecture.
Cilium Beyond Linux: Extending eBPF to Windows Infrastructure
Explore Cilium eBPF's extension to Windows, covering current capabilities, future roadmap, and challenges in adapting Linux-based features for enhanced network performance and security on Windows infrastructure.