Cloud Native Supply Chain Security with Tekton and Sigstore
Hands-on overview of creating a secure zero-trust supply chain on Kubernetes using Tekton, Tekton Chains, and sigstore. Learn to protect pipelines, generate provenance, and integrate with In-Toto and SPIRE.
Project Trebuchet - How SolarWinds is Using Open Source to Secure Their Supply Chain in the Wake of the Sunburst Hack
SolarWinds' Project Trebuchet: Rebuilding secure software supply chain using CNCF and CDF projects after Sunburst hack. Insights on new build system, its necessity, and lessons learned from a major security breach.
Getting Started with Supply Chain Security is Easier Than You Think - Perspectives From a Highly Regulated Industry
Aprenda prácticas clave para mejorar la seguridad de la cadena de suministro de software, incluyendo auditoría, verificación y control de admisión, con perspectivas de la industria bancaria altamente regulada.
Whose Sign Is It Anyway?
Explore digital signatures' true meaning, implications of key handling policies, and identity concepts in software supply chain security. Dive deep into cryptographic realities and case studies.
The State of SBOMs
Explore the current landscape of Software Bill of Materials (SBOMs) with industry experts, discussing challenges, best practices, and future trends in software supply chain security.
Supply Chain Security with the Jenkins Templating Engine
Comprehensive introduction to DevSecOps, exploring software security scanning and scaling principles using Jenkins Templating Engine for shared, tool-agnostic pipelines across teams.
State of the Art Supply Chain Security - In-toto, TUF, and SigStore
Explore cutting-edge supply chain security with in-toto, TUF, and SigStore. Learn how these tools create a transparent, hack-proof system to protect software from developer to end-user.
An Overview on SLSA
Explore SLSA methodology for preventing software supply chain tampering, illustrated through gremlin scenarios and demonstrating how SLSA controls raise attack costs and ensure security.
Secure, Efficient API Plane Traversal for Compute Resources on Exascale Super Computers Using SPIRE
Explore SPIRE's role in securing machine-to-machine communication on Cray Shasta exascale supercomputers. Learn about critical communication requirements and why SPIRE is an ideal solution for this high-performance computing environment.
Managing Kubernetes Webhooks with SPIRE
Explore automating certificate management for Kubernetes Webhooks using SPIRE, simplifying operations and integrating with the existing workload trust chain.
Working Out SPIFFE Identity for Cilium CNI
Explore SPIFFE identity integration with Cilium CNI, covering design challenges, extended use cases, and comparisons to other solutions for enhanced network security and policy enforcement.
Providing Identities to Serverless Workloads
Explore secure identity management for serverless workloads using SPIRE's SVIDStore plugin, enabling external storage and consumption of identities in environments where agent installation is not feasible.
Cloud & Cloud Native Identity and Access Management - Challenges & Opportunities
Explore challenges and solutions for identity and access management in hybrid cloud native environments, focusing on achieving continuous identity assurance and zero trust.
Using Envoy as an Egress Proxy for TLS Enabled Traffic
Explore Envoy as an egress proxy for TLS traffic, combining it with SSLproxy for enhanced security and traffic management in modern cloud-native applications accessing external services.
Lessons Learned - Four Years with Emissary-ingress and Envoy
Explore insights from four years of Emissary-ingress development, including challenges, lessons learned, and best practices for leveraging Envoy in Kubernetes environments.
What, Why and How of Federated Machine Learning – Implementation Using FATE, KubeFATE, and FATE-Operator for Kubeflow
Explore federated machine learning's principles, use-cases, and implementation using FATE and KubeFATE. Learn about challenges, opportunities, and integration with Kubeflow for real-world applications.
Security Best Practices for AI on Kubernetes
Explore security concerns and best practices for AI workloads on Kubernetes, covering user privileges, container isolation, package installation, and data access to ensure both security and productivity.
Defending Against Adversarial Model Attacks Using Kubeflow
Explore building robust AI pipelines against adversarial attacks using Kubeflow and LFAI Adversarial Robustness Toolbox. Learn to test ML model robustness in production with Kubeflow Serving and KNative eventing.
Create an Extensible Cloud Native Application with WebAssembly
Explore WebAssembly's potential to create extensible cloud-native applications, enabling developers to customize and extend platforms securely and efficiently using open-source tools.
We Built the Kubernetes SBOM and Now You Can Write Your Own
Explore Kubernetes SBOM creation, its role in software supply chain, and SPDX standard. Learn to build your own SBOM using available tools through a live demo and practical insights.
AuthN and AuthZ at Cruise - Crawl, Walk, Run
Explore Cruise's journey in implementing authentication and authorization within Kubernetes clusters, from basic approaches to advanced solutions for zero trust security at scale.