DevSecOps Best Practices in Cloud Native Computing - CMCC Case Study
探索中国移动通信公司的DevSecOps最佳实践，了解如何将安全无缝集成到云原生开发和运维流程中，提高效率和安全性。
Why Machines Deserve Rights - Rethinking Automated Infrastructure Access with OSS Teleport Machine ID
Explore identity-based access control for machines in modern infrastructure. Learn about Teleport Machine ID for secure, auditable, and efficient automated access to cloud resources.
Learning from Supply Chain Failures and Best Practices in Other Industries
Explore supply chain best practices and failures across industries to enhance software supply chain security. Gain insights from physical world processes and apply lessons to critical infrastructure protection.
Growing SPIFFE and SPIRE in 2023 and Beyond - Secure Identity Management Progress
Explore SPIFFE/SPIRE's latest advancements in secure identity management, including Windows support, SIGSTORE integration, and enhanced hardware security, empowering enterprises with robust infrastructure protection.
Real World SPIFFE Scenarios and Outcomes
Explore real-world scenarios and outcomes of deploying SPIFFE across infrastructure, including benefits for security, interoperability, compliance, and audibility in distributed systems.
Building a Resilient International Cyber Ecosystem - Fireside Chat with CISA Director
Fireside chat exploring international cyber resilience and hacker involvement in solutions, featuring CISA Director Jen Easterly and cybersecurity expert Keren Elazari.
SRE for Cybersecurity - Lessons from Google's Infrastructure Security
Lessons learned from leading Google's SRE teams for infrastructure security, Cloud Security products, and global resilience, with insights for enterprise CISOs and Boards of Directors.
Introduction to Teleport - Secure Access Management for Linux and Kubernetes
Explore Teleport for secure infrastructure access management, covering installation, user creation, SSH auditing, CLI usage, and Kubernetes integration.
When Infrastructure Gets Hacked
Explore digital security vulnerabilities in critical infrastructure systems and their potential impacts on daily life, emphasizing the importance of robust cybersecurity measures.
The Internet is Broken: Breaking Down the Software Supply Chain
Explore modern software vulnerabilities, recent supply chain attacks, and actionable steps to build secure applications in an insecure internet environment.
MacGyverOps: Secure Your Development Environment with the Tools Around You
Leverage existing tools to create focused security feedback, minimizing distractions while enhancing development velocity and security in DevOps environments.
Storage Security Update for Developers 2022
Explore key storage security developments from 2022, including cyber threats, regulatory changes, and emerging standards, with practical insights for developers and architects implementing data protection measures.
Securing the Cloud and Training Your Dragons - Trends and Tactics for Enterprise Cloud Security
Explore enterprise multi-cloud security challenges and solutions with Comcast's VP of Security. Learn strategies for "training your dragons" to secure infrastructure in complex cloud environments.
Top 10 Security Best Practices for Securing Microservices
Comprehensive guide to securing microservices, covering TLS, authentication, authorization, DDoS protection, monitoring, encryption, and more. Essential for developers and architects building scalable, secure APIs.
Building a Valid Threat Library for Cloud-Based Applications
Leveraging cloud monitoring and logging to create dynamic threat libraries for Azure and AWS, enhancing application threat models in critical infrastructure sectors like energy and transportation.
Defending Cloud Infrastructures with Cloud Security Suite
Comprehensive tool for auditing AWS/GCP/Azure security, combining open-source capabilities with custom checks to enhance cloud infrastructure protection and address human error risks.
Automating IMDS Protection at Scale in AWS - Metabadger Tool Overview
Automate AWS IMDS protection with Metabadger: Learn to upgrade EC2 instances to IMDSv2, prevent SSRF attacks, and secure AWS credentials across multiple accounts without downtime.
AWS Misconfiguration from an Attacker's Perspective
Explore AWS misconfigurations from an attacker's perspective with security analyst Kavisha Sheth. Learn to identify and mitigate vulnerabilities in cloud environments for enhanced cybersecurity.
Attacking Microservice Systems: Methods and Practical Tips
Discover methods and practical tips for attacking microservice systems, exploring new security architecture patterns and vulnerabilities specific to this increasingly popular design approach.
The Negatives of Per-Host Service Mesh - Sidecar Model as an Ideal Solution for Robust Security
Explore the security implications of per-host service mesh vs. sidecar model in Kubernetes, focusing on proxy footprint, blast radius, and security boundaries for robust and scalable services.
A Tale of Three Service Meshes
Explore the evolution and comparison of three prominent service mesh technologies, highlighting their unique features and use cases in cloud-native environments.