Telepresence Case Studies - From First Experience to Fast Feedback at Scale
Explore how Telepresence improves developer experience, accelerates inner dev loops, and reduces costs in microservice-based applications. Learn implementation through case studies and a demo.
Archetypes for Reliable Systems - Designing and Running Cloud-Based Internet Services
Explore a model for designing cloud-based services with varying reliability levels, featuring Kubernetes-based deployment strategies, multi-tenant architecture, and seamless infrastructure updates.
Looking Ahead to the Future with Project Sylva - Energy Efficiency and Telco Cloud Platforms
Exploring Project Sylva's impact on telco cloud platforms, focusing on energy efficiency, sustainability, and cloud-native innovations in the European telecommunications industry.
Application Security for Better Business Value - Expert Insights
Experts discuss how application security practices in cloud-native environments can reduce risks, enhance compliance, and drive innovation, leading to improved business value.
Network Security at Scale: L3 Through L7 at Splunk
Explore Splunk's multi-cloud network security architecture, from VPCs to Istio, addressing scalability, agility, and security challenges across L3 to L7 layers.
Fighting the Next War - Future Threats to OSS and Software Supply Chain Security
Explore future threats to open-source software and supply chain security, discussing emerging attack vectors and strategies for OSS projects to prepare and protect against evolving risks.
Identity Based Segmentation for Zero Trust Architecture
Explore Zero Trust Architecture implementation using identity-based segmentation, focusing on cloud-to-premises communication through DMZs with identity-aware proxies and service mesh.
OmniBOR: Bringing the Receipts for Supply Chain Security
Discover OmniBOR, a revolutionary approach to capture artifact dependency graphs in software development, enhancing supply chain security and reducing false positives in vulnerability scanning.
Demystifying Zero-Trust for Cloud Native Technologies
Explore zero-trust principles for cloud-native environments, covering identity, policy, continuous assessment, and security. Learn implementation guidelines for protecting users, devices, networks, applications, and data.
Security as Code - A DevSecOps Approach
Explore DevSecOps and Security as Code with CodeQL. Learn to implement security checks, detect vulnerabilities, and foster collaboration between development and security teams for a robust security culture.
Software Supply Chain Security with TAG Security
Explore software supply chain security with insights on guidance, resources, and recent developments. Learn about the whitepaper, compromise catalog, and reference architecture for secure supply chains.
From Illuminating to Eliminating Crypto Jacking Techniques in Cloud Native
Explore cryptojacking evolution in cloud environments, from basic attacks to sophisticated techniques targeting containers and Kubernetes. Learn proactive protection strategies using open-source tools for enhanced security.
Securing Diverse Supply Chains Across Interconnected Systems
Explore how SpaceX integrates SBOM and vulnerability discovery tools to enhance security across diverse software systems, reducing response time and improving prioritization for developers.
Untrusted Execution - Attacking the Cloud Native Supply Chain
Explore cloud native supply chain vulnerabilities, threat modeling, and security controls. Learn about trusted execution environments and end-to-end security solutions for protecting complex systems.
Sharing Security Secrets: How to Encourage Security Advocates
Discover strategies for fostering a company-wide security culture, educating non-security teams, and implementing a successful security advocates program to enhance organizational data protection and service availability.
Learning from Supply Chain Failures and Best Practices in Other Industries
Explore supply chain best practices and failures across industries to enhance software supply chain security. Gain insights from physical world processes and apply lessons to critical infrastructure protection.
Leveraging SBOMs to Automate Packaging, Transfer, and Reporting of Dependencies Between Secure Environments
Explore innovative uses of Software Bill of Materials (SBOMs) for secure asset transfer, dependency management, and cloud-native infrastructure deployments using CycloneDX and open-source tools.
Security Threat Modeling Live from Scratch Session
Hands-on workshop demonstrating lightweight threat modeling for CNCF projects, led by Andrew Martin. Learn practical techniques to identify and mitigate security risks in cloud-native environments.
How to Trust Your Open Source Software Using Scorecards
Explore OSSF Scorecards to assess open source software health, automate risk evaluation, and build dependency policies for informed decision-making in software development.
How to Secure Your Supply Chain at Scale
Learn how Yahoo secures its software supply chain using open-source tools like Grafeas, Sigstore, and Kyverno. Discover strategies for source code scanning, vulnerability management, and protecting Kubernetes deployments at scale.
Cloud Native - Designing and Operating Reliable Cloud Services
Explore strategies for designing and operating reliable cloud services, including failure analysis, design recommendations, and best practices for managing cloud environments.