The Monolith is Dead. Long Live the Monolith!
Descubre cómo aprovechar las aplicaciones monolíticas heredadas con tecnologías nativas de la nube, incluyendo seguridad, observabilidad, pruebas y migración de tráfico sin riesgos en entornos híbridos.
The Least Privilege of Kubernetes
Explore Kubernetes security: least privilege principle, RBAC, and workload restrictions. Learn to implement access controls and security mechanisms for enhanced system protection.
Putting an Invisible Shield on Kubernetes Secrets
Explore TEE-based solutions for enhancing Kubernetes secrets protection, covering implementation, transparency, and practical experiences from Alibaba's deployment.
Brings Federated Learning to Kubeflow With FATE-Operator
Explore Federated Machine Learning implementation in Kubernetes using Kubeflow and FATE-Operator. Learn about data privacy, secure collaboration, and running FML jobs in cloud-native environments.
Harbor - Enterprise Cloud Native Artifact Registry
Explore Harbor, an open-source cloud native registry for secure management of container images and Helm Charts. Learn about RBAC, replication, scanning, and more with real-world use cases and demos.
Understanding, Maintaining and Securing Envoy's Supply Chain
Explore Envoy's software supply chain, focusing on security, dependencies, and maintenance strategies. Learn to minimize risks and increase confidence in third-party components.
Running Machine Learning Workloads on a Service Mesh
Explore integrating JupyterHub with Istio ServiceMesh on Kubernetes to enhance security, resilience, and observability for machine learning workloads, addressing data security challenges.
How the DoD Use Istio for End-to-End Encryption and Authentication
Explore how the DoD leverages Istio for enhanced security, including encryption and SSO authentication. Learn about practical challenges, design considerations, and future developments in service mesh implementation.
A Tale of a Meshi Kafka - Securing Kafka Deployment When Istio Is Used
Explore securing Kafka deployments with Istio, addressing authentication, authorization, and encryption challenges. Learn to implement external authorization and simplify policy management using open-source tools.
Multi-Cluster & Multi-Cloud Service Mesh with CNCF’s Kuma and Envoy
Explore multi-cluster and multi-cloud service mesh deployment using Kuma and Envoy. Learn to secure, route, connect, and observe service connectivity across distributed environments.
Exit Stage Left - Replacing Theater with Chaos
Explore how security theater hinders software delivery and organizational goals. Learn about security chaos engineering as an alternative approach embracing convenience, alignment, and learning from failure.
Designing Secure Applications in the Cloud
Learn essential security patterns for cloud applications to protect against threats, safeguard sensitive data, and control access. Explore gatekeeper, valet key, and federated identity approaches for robust cloud security.
Dynamic Image Scanning Through System Tracing
Explore dynamic scanning for detecting sophisticated malware through system tracing. Learn about behavioral patterns, open-source tools, and comparisons with static scanning and runtime security.
Building Effective Attack Detection in the Cloud
Learn effective cloud attack detection strategies, key data sources, and validation techniques using Leonidas, an open-source framework for automated detection capability testing in cloud environments.
SIG-Honk AMA Panel - Hacking and Hardening in the Cloud Native Garden
Expert panel explores hacking techniques and security hardening strategies for cloud-native infrastructure, offering insights on protecting Kubernetes clusters and distributed systems.
The Production Identity Control Plane - Recommended Practices for SPIFFE-SPIRE at Scale
Explore recommended practices for SPIFFE/SPIRE implementation in complex environments, focusing on identity distribution and attestation for secure service-to-service communication at scale.
No More Moats - Protecting Your Cloud Native Infrastructure with Zero Trust
Explore Zero Trust security for cloud native infrastructure using SPIFFE, SPIRE, and open-source tools. Learn practical architectures and implementation strategies from Fortune 500 examples.
Finding the Issues in Microservices Applications
Discover techniques for identifying and resolving issues in complex microservices architectures using rich observability data, real-time analytics, and advanced monitoring tools.
Detecting Security Policies Violation Using Falco - A Practical Introduction
Practical introduction to Falco for detecting security policy violations. Learn to create custom rules for runtime security in cloud-native environments. Hands-on demo included.
AWS Controllers for Kubernetes - The AWS API Universe Now Kubeified
Explore AWS Controllers for Kubernetes (ACK), bridging AWS service APIs and Kubernetes for seamless resource management using familiar Kubernetes tools and configurations.
Community Integrations and Other Works in Progress
Explore community-driven integrations and initiatives in cloud-native computing, including authentication extensions, user privacy, certificate transparency, and SPIFFE integration with Parsec.