Kubernetes Authentication and Authorization at Robinhood - Lessons from Reductions, Migrations, and Designing Automation
Explore Robinhood's journey in implementing least privilege for Kubernetes RBAC, including challenges, solutions, and lessons learned in managing authentication and authorization.
Security and Access for Kubernetes - Teleport Webinar
Explore Kubernetes security concepts, attack surfaces, and access control with Teleport in this informative webinar on enhancing cloud-native infrastructure protection.
Webinar - The ABC's of Kubernetes Security
Comprehensive guide to securing Kubernetes: from hardware to applications. Covers key concerns, tools, and best practices for enterprise-level container deployment and management.
Achieving Least Privilege Access in Kubernetes
Learn to implement least-privilege access in Kubernetes using RBAC. Covers roles, subjects, bindings, and advanced topics. Gain practical knowledge for enhancing security and compliance in dynamic environments.
Protecting Sensitive Data in Container Checkpoints
Explore built-in encryption for CRIU images to protect container state, ensuring data confidentiality and integrity across cluster nodes without modifying container infrastructure.
Kubernetes Security 101: Best Practices to Secure Your Cluster
Learn best practices for securing Kubernetes clusters, covering control plane components, worker nodes, CIS Benchmarks, RBAC, audit logs, and network policies to enhance cluster protection.
New Features in Docker Datacenter - Engine 1.13 and Security Scanning
Explore Docker Datacenter's latest enhancements: improved security features, enhanced usability, and streamlined installation process. Learn about secrets management, scanning, and role-based access control.
Kubernetes Cluster Security and Usability: Best Practices and Common Pitfalls
Practical guide to securing Kubernetes clusters, covering common misconfigurations, scalable security approaches, and best practices for different deployment scenarios and threat models.
Kubernetes Security: Attacking and Defending K8s Clusters
Explore Kubernetes security through attack scenarios, defense strategies, and best practices. Learn to protect clusters using RBAC, audit logs, and network policies.
Role Store Implementation and Pull Request Workflow
Implement IRoleStore for role management, add tests, handle user roles, and set up a GitHub workflow for building and testing in .NET and ASP.NET Core.
Policy as Code: A Game-Changer for Stack Security
Explore "Policy as Code" and its impact on stack security. Learn about access control models, policy engines, and how to integrate authorization into your codebase for enhanced application security.
Keeping Kubernetes Safe: The Lowdown on Locked Namespaces
Explore Kubernetes namespace security, its impact on cluster features, and strategies for effective lockdown. Learn best practices for secure multi-tenancy and policy enforcement.
Living off the Land Techniques in Managed Kubernetes Clusters
Explore advanced techniques for exploiting managed Kubernetes clusters, including privilege escalation, lateral movement, and security control bypasses using cluster middleware and components.
Designing a Multitenancy Kubernetes Strategy That Fits Your Organization
Explore strategies for multi-tenant Kubernetes clusters, addressing resource sharing, access control, security, and cost management. Learn to overcome challenges and avoid pitfalls in enterprise deployments.
Stop Leaking Kubernetes Service Information via DNS
Discover how to secure Kubernetes DNS and prevent unauthorized access to service information, exploring the implications and solutions for tightening cluster security.
The Art of Debugging Inside Kubernetes Environments
Mastering Kubernetes debugging: Strategies, tools, and techniques for troubleshooting common errors in deployments, RBACs, NetworkPolicies, and more. Enhance your skills to build robust, easily debuggable applications in K8s environments.
Deep Dive into Open Policy Administration Layer (OPAL) - Authorization in Software
Explore advanced authorization with OPAL, covering the shift from RBAC to ABAC, policy-based systems, and decoupling authorization from code for improved security and efficiency.
Chaos Engineering and Service Ownership at Enterprise Scale
Explore chaos engineering and service ownership challenges at enterprise scale. Learn about AWS footprint, Kubernetes clusters, and recommendations for self-service chaos platforms.
String Solving for Verification - TutorialFest at POPL 2024
Explore string solving techniques for software verification, focusing on theory, implementations, and applications in programming languages and security analysis.
Attack Scenarios Abusing Azure Active Directory
Explore Azure AD security vulnerabilities, privilege escalation techniques, and mitigation strategies. Learn to protect your organization's cloud infrastructure from potential attacks and misconfigurations.
A Wander Through the World of Container Security
Explore container security, from Docker to Kubernetes, covering breakout vulnerabilities, networking challenges, and RBAC. Gain insights into potential threats and future attack vectors in containerized environments.