Kubernetes Security Best Practices You Need to Know - The Guide for Securing Your K8s Cluster
Comprehensive guide to securing Kubernetes clusters, covering image scanning, user permissions, network policies, data encryption, backups, and disaster recovery strategies.
Managing Kubernetes Security Using Kubescape and Lens - Mirantis Labs Tech Talks
Learn to scan and secure Kubernetes configurations using Kubescape and Lens. Explore container vulnerability scanning, RBAC setup, and practical demos for effective cloud environment management.
Security Practices for Kubernetes Cluster Administrators - Redteam Views
Explore K8s cluster security, including real-world attack scenarios, container escape prevention, and multi-tenant protection strategies. Learn to build and safeguard large-scale Kubernetes environments.
What's Really Happening Inside My Containers? - Exploring with Falco
Explorando segurança em containers com Falco: detecte atividades suspeitas, previna ameaças e proteja seus recursos contra acessos não autorizados e malwares.
Post-Exploiting a Compromised ETCD
Explore advanced techniques for exploiting compromised ETCD in Kubernetes clusters, including data tampering, malicious pod injection, and bypassing security controls.
![[ko-KR] Safe Kubernetes Environment with AppArmor](https://img.youtube.com/vi/BFnrd1OJkgk/mqdefault.jpg)
[ko-KR] Safe Kubernetes Environment with AppArmor
AppArmor를 활용하여 Kubernetes 기반 컨테이너 인프라 환경을 안전하게 구축하는 방법 학습. 다양한 예시를 통해 효과적인 애플리케이션 제어 방법 탐구.
Securing CI/CD Pipelines Through Security Gates
Explore CI/CD pipeline security gates, frameworks, and best practices. Learn to embed security seamlessly in DevOps workflows and eliminate issues before production. Includes live demo.
Lightweight Zero-Trust Network Implementation and Transition with Keycloak and NGINX
Explore lightweight zero-trust network implementation using Keycloak and NGINX, covering JWT validation, OAuth MTLS, and security boundary transitions for enhanced API and service protection.
Security Threat Modeling Live from Scratch Session
Hands-on workshop demonstrating lightweight threat modeling for CNCF projects, led by Andrew Martin. Learn practical techniques to identify and mitigate security risks in cloud-native environments.
How to Secure Your Supply Chain at Scale
Learn how Yahoo secures its software supply chain using open-source tools like Grafeas, Sigstore, and Kyverno. Discover strategies for source code scanning, vulnerability management, and protecting Kubernetes deployments at scale.
Attacking and Defending Kubernetes TEE Enclaves in Critical Infrastructure
Explore Kubernetes TEE enclaves for critical infrastructure security. Learn attack and defense strategies, threat modeling, and compliance benefits for various regulations.
CTF Overview and Experience - Preparing for SecurityCon
Prepare for SecurityCon's CTF event with a warm-up session covering container breakouts and Kubernetes misconfigurations. Suitable for all experience levels, learn CTF engagement techniques.
First Steps to Full Lifecycle Security with Open Source Tools
Hands-on workshop demonstrating installation, configuration, and customization of open-source security tools for DevOps, focusing on Trivy for container and infrastructure security and Starboard for continuous security assurance.
Hands-on Introduction to Snyk - Security Scanning for Dependencies, Code, and Containers
Comprehensive introduction to Snyk, covering dependency security, code analysis, container scanning, and Kubernetes YAML scanning. Hands-on demonstration of Snyk's features for identifying and addressing vulnerabilities.
Poking Holes in the Cloud: Auditing AWS Security - 2018
Explore tools and techniques for penetration testing AWS-hosted systems, covering reconnaissance, exploitation, and key insights for enhancing cloud security.
Security TAG Closing - Highlights and Future Work
Wrap-up of Cloud Native Security Con, highlighting Security TAG's work, future plans, and ways to get involved. Covers whitepapers, assessments, audits, and ecosystem insights.
Confidential Containers Explained
Explore cloud native confidential computing with Confidential Containers, enabling secure workload deployment using familiar tools and workflows across various hardware platforms.
Enforce Policy at Ingress Using Open Policy Agent (OPA)
Learn to enforce policies at ingress using Open Policy Agent (OPA). Explore setup, implementation, and demonstration of upper policies for effective cloud-native security.
Introduction to Open Policy Agent (OPA) for Security and Authorization
Explore Open Policy Agent (OPA), a versatile policy engine for fine-grained, context-aware enforcement across the stack. Learn its applications in microservices, Kubernetes, and API authorization.
Bridging Security and Reality with Open Policy Agent
Explore Open Policy Agent's role in bridging security and real-world scenarios, enhancing policy enforcement and decision-making in modern IT environments.
How to Secure Your Services with Kalix Security
Explore Kalix Security features to enhance service protection. Learn implementation strategies for robust security measures in cloud-native environments.