Why Machines Deserve Rights - Rethinking Automated Infrastructure Access with OSS Teleport Machine ID
Explore identity-based access control for machines in modern infrastructure. Learn about Teleport Machine ID for secure, auditable, and efficient automated access to cloud resources.
Hack Back: Learning Security with Capture-The-Flag Events
Explore state-of-art Kubernetes attack scenarios and defense strategies through Capture-The-Flag exercises. Learn to improve your organization's security using open-source tools like Simulator and Tetragon.
Life of a Sigstore Signature - Understanding Code Signing for Container Images
Explore Sigstore's code signing process for Kubernetes images, including keyless signing, certificate authorities, and transparency logs. Learn to configure admission controllers for cluster security.
Sigstore: Evolution and Future of Software Security Signing
Explore Sigstore's journey in software security signing, its impact on Kubernetes, and future directions. Learn about supply chain security and cutting-edge cryptographic technologies.
Project Calico Network Policies
Explore Project Calico's network policies for Kubernetes, enhancing security and control in cloud-native environments.
SLSA with Cosign and Kyverno - Securing Software Delivery in Cloud Native Environments
Explore SLSA, Cosign, and Kyverno for enhancing software delivery security in cloud-native environments. Learn practical techniques to safeguard your development pipeline.
Keeping Up with CVEs: Finding Needles in Haystacks - Practical Vulnerability Assessment
Discover practical approaches to assess product security beyond raw vulnerability numbers, focusing on risk assessment and understanding scanner limitations in container image analysis.
Data Security and Storage Hardening in Rook and Ceph
Explore security options for Rook with Ceph, including threat modeling, encryption, access controls, and infrastructure hardening for robust data protection in container-based storage systems.
SPIFFE: In Theory and Practice - Deep Dive and Q&A
Explore SPIFFE's vision, components, and role in cloud-native environments. Learn about the SPIFFE specification, IDs, naming, and trust domains in this informative deep dive with Q&A.
Shifting Security Left - Simplifying Security for Kubernetes and OpenShift Environments
Learn to simplify security in Kubernetes and OpenShift, focusing on authentication, secrets management, and bridging the gap between security and DevOps for more efficient cloud-native environments.
Telepresence Case Studies - From First Experience to Fast Feedback at Scale
Explore how Telepresence improves developer experience, accelerates inner dev loops, and reduces costs in microservice-based applications. Learn implementation through case studies and a demo.
Archetypes for Reliable Systems - Designing and Running Cloud-Based Internet Services
Explore a model for designing cloud-based services with varying reliability levels, featuring Kubernetes-based deployment strategies, multi-tenant architecture, and seamless infrastructure updates.
Observability and Monitoring in Cloud Native Telco World - Tying It Together
Explore challenges and solutions for integrating cloud-native 5G Core into existing telecom ecosystems, focusing on observability and monitoring in Deutsche Telekom's journey towards full production launch.
Network Security at Scale: L3 Through L7 at Splunk
Explore Splunk's multi-cloud network security architecture, from VPCs to Istio, addressing scalability, agility, and security challenges across L3 to L7 layers.
From Illuminating to Eliminating Crypto Jacking Techniques in Cloud Native
Explore cryptojacking evolution in cloud environments, from basic attacks to sophisticated techniques targeting containers and Kubernetes. Learn proactive protection strategies using open-source tools for enhanced security.
SLSA FRSCA Recipe for Secure Supply Chain
Explore an end-to-end solution for software supply chain security using OpenSSF-FRSCA, integrating tools like Tekton, Sigstore, and Kyverno to meet SLSA Level 3 requirements.
Security Threat Modeling Live from Scratch Session
Hands-on workshop demonstrating lightweight threat modeling for CNCF projects, led by Andrew Martin. Learn practical techniques to identify and mitigate security risks in cloud-native environments.
Digital Forensics and Incident Response in Containerized Environments
Explore Digital Forensics and Incident Response (DFIR) techniques for containerized applications, focusing on Kubernetes. Learn best practices for evidence collection and incident containment in modern cloud environments.
How to Secure Your Supply Chain at Scale
Learn how Yahoo secures its software supply chain using open-source tools like Grafeas, Sigstore, and Kyverno. Discover strategies for source code scanning, vulnerability management, and protecting Kubernetes deployments at scale.
A Holistic Approach to Managing Cyber Assets and Extending Security Posture
Explore holistic cyber asset management and enhance your security posture in this insightful presentation on modern cybersecurity strategies.
SBOMs, VEX, and Kubernetes - Software Supply Chain Security in Cloud Native Environments
Explore software supply chain security with experts discussing SBOMs, VEX, and their practical applications in Kubernetes environments, from open-source projects to regulated industries.