Zero-Trust Supply Chain Security with Sigstore, TektonCD and SPIFFE
Explore cutting-edge tools for enhancing software supply chain security, focusing on Sigstore, TektonCD, and SPIFFE implementations in zero-trust environments.
Road to SLSA3 - Non-falsifiable Provenance in Tekton with SPIFFE/SPIRE
Explore non-falsifiable provenance in Tekton using SPIFFE/SPIRE, enhancing software supply chain security and achieving SLSA3 compliance.
Trust No System: The Unsettling Reality of Zero Trust
Challenging "Zero Trust" in cloud-native security, this talk explores trust as an observer's decision, debunks myths, and offers strategies for managing trust in cloud environments.
Achieving End-to-End Software Supply Chain Security with in-toto
Explore in-toto's advancements in software supply chain security, including artifact tracking, attestation types, and integrations with CNCF projects for cloud-native identity protection.
SPIFFE: In Theory and Practice - Deep Dive and Q&A
Explore SPIFFE's vision, components, and role in cloud-native environments. Learn about the SPIFFE specification, IDs, naming, and trust domains in this informative deep dive with Q&A.
OmniBOR: Bringing the Receipts for Supply Chain Security
Discover OmniBOR, a revolutionary approach to capture artifact dependency graphs in software development, enhancing supply chain security and reducing false positives in vulnerability scanning.
SLSA FRSCA Recipe for Secure Supply Chain
Explore an end-to-end solution for software supply chain security using OpenSSF-FRSCA, integrating tools like Tekton, Sigstore, and Kyverno to meet SLSA Level 3 requirements.
Zero Trust Supply Chains with Project Sigstore and SPIFFE
Explore zero trust supply chains using Sigstore and SPIFFE. Learn how to enhance software security through cryptographic verification, transparency logs, and verifiable identities in build systems.
Growing SPIFFE and SPIRE in 2023 and Beyond - Secure Identity Management Progress
Explore SPIFFE/SPIRE's latest advancements in secure identity management, including Windows support, SIGSTORE integration, and enhanced hardware security, empowering enterprises with robust infrastructure protection.
Real World SPIFFE Scenarios and Outcomes
Explore real-world scenarios and outcomes of deploying SPIFFE across infrastructure, including benefits for security, interoperability, compliance, and audibility in distributed systems.
SPIFFE Ecosystem: MTLS and Identity with Linkerd and Teleport
Explore SPIFFE ecosystem growth, focusing on Linkerd and Teleport's implementation for workload identity verification across Kubernetes clusters and external environments.
Leveraging Cryptographic Lineage for Context and Connected Trust
Explore cryptographic lineage for enhanced security, addressing challenges in AI adoption through attested claims and chain of custody, building on zero trust principles for improved traceability and trust in distributed systems.
Secure Workload Identities with SPIFFE, Cert-Manager, and Trust-Manager
Secure cloud-native workloads using SPIFFE, cert-manager, and trust-manager for robust identity management and authentication in distributed systems.
Look Ma, No Secrets - Establishing Trust Between Workloads with SPIFFE and SPIRE
Explore SPIFFE and SPIRE for establishing trust between workloads in complex cloud environments without pre-shared secrets, enhancing security and productivity.
Multi-cluster Service Mesh Workshop
Hands-on workshop exploring multi-cluster service mesh with Istio and Gloo Mesh. Learn identity federation, cross-cluster communication, failover, and Web Assembly through practical labs and explanatory slides.
Multi-Cloud Workload Identity with SPIFFE
Explore SPIFFE-based workload identity for multi-cloud environments, enhancing security and simplifying API access across different cloud providers without relying on long-lived credentials.
Securing Edge Workloads with Cert-Manager and SPIFFE
Explore securing edge workloads using cert-manager and SPIFFE for efficient certificate management and trust distribution in Kubernetes environments, focusing on ingress and mTLS security.
Untangling Multi-Cloud Identity and Access with SPIFFE Tornjak
Explore secure multi-cloud workload identity management using SPIFFE/SPIRE and Tornjak, shifting from platform-specific to organization-wide approaches for consistent access across cloud providers.
Don't Mind the Gap - Securely Accessing Cloud Resources with SPIFFE/SPIRE
Explore secure cloud resource access using SPIFFE/SPIRE for identity federation. Learn to access AWS and other services without managing API keys, simplifying cross-cloud interactions.
Flavors of Certificates in Service Mesh - The Whys and Hows
Explore various certificate deployment options in Service Mesh security, with demonstrations using Istio for scenarios like external management, SPIFFE integration, and 5G Telco Cloud security.
Securing Identity and Authorization in Microservices
Explore Transaction Tokens (TraTs) for securing microservices, enhancing user identity and context in call chains, and defending against various attacks in distributed architectures.