Road to SLSA3 - Non-falsifiable Provenance in Tekton with SPIFFE/SPIRE
Explore non-falsifiable provenance in Tekton using SPIFFE/SPIRE, enhancing software supply chain security and achieving SLSA3 compliance.
Filling the Gaps in Kubernetes Flavored SLSA with Threat Modeling
Explore threat modeling for Kubernetes CI/CD security using SLSA standards. Learn to identify and mitigate vulnerabilities in supply chain processes, with practical insights from Tekton's implementation.
Trust No System: The Unsettling Reality of Zero Trust
Challenging "Zero Trust" in cloud-native security, this talk explores trust as an observer's decision, debunks myths, and offers strategies for managing trust in cloud environments.
What Can Go Wrong When You Trust Nobody? Threat Modeling Zero Trust
Explore Zero Trust principles and threat modeling for cloud-native systems. Learn to implement secure architectures using Istio, Kubernetes, SPIRE, and OPA for robust, distributed workload protection.
OmniBOR: Bringing the Receipts for Supply Chain Security
Discover OmniBOR, a revolutionary approach to capture artifact dependency graphs in software development, enhancing supply chain security and reducing false positives in vulnerability scanning.
SLSA FRSCA Recipe for Secure Supply Chain
Explore an end-to-end solution for software supply chain security using OpenSSF-FRSCA, integrating tools like Tekton, Sigstore, and Kyverno to meet SLSA Level 3 requirements.
Zero Trust Supply Chains with Project Sigstore and SPIFFE
Explore zero trust supply chains using Sigstore and SPIFFE. Learn how to enhance software security through cryptographic verification, transparency logs, and verifiable identities in build systems.
Growing SPIFFE and SPIRE in 2023 and Beyond - Secure Identity Management Progress
Explore SPIFFE/SPIRE's latest advancements in secure identity management, including Windows support, SIGSTORE integration, and enhanced hardware security, empowering enterprises with robust infrastructure protection.
Putting the Supply Chain Pieces Together: A Deep Dive into the Secure Software Factory
Explore a deep dive into supply chain security, focusing on implementing CNCF's Secure Software Factory architecture using cloud-native tools to enhance software provenance and artifact trustworthiness.
Driving the Need for Identity, Authentication, and Encryption in Containerized Environments
Explore encryption, identity verification, and workload attestation in multi-service environments. Learn to implement TLS with Istio and cert-manager for robust identity management and secure communication.
Look Ma, No Secrets - Establishing Trust Between Workloads with SPIFFE and SPIRE
Explore SPIFFE and SPIRE for establishing trust between workloads in complex cloud environments without pre-shared secrets, enhancing security and productivity.
Untangling Multi-Cloud Identity and Access with SPIFFE Tornjak
Explore secure multi-cloud workload identity management using SPIFFE/SPIRE and Tornjak, shifting from platform-specific to organization-wide approaches for consistent access across cloud providers.
Taming Attestation for Cloud Native Edge Security with Parsec
Explore how Parsec simplifies hardware-backed security and attestation for edge devices, enabling secure communication with cloud services across diverse ecosystems.
Don't Mind the Gap - Securely Accessing Cloud Resources with SPIFFE/SPIRE
Explore secure cloud resource access using SPIFFE/SPIRE for identity federation. Learn to access AWS and other services without managing API keys, simplifying cross-cloud interactions.
Bringing SPIFFE to Linkerd for Mesh Expansion
Explore how Linkerd integrates SPIFFE/SPIRE to extend service mesh identity beyond Kubernetes, enabling seamless workload integration and mesh expansion.
A Platform-Agnostic Approach to Securing Workloads
Explore a standardized approach to securing diverse workloads using SPIRE and Envoy, creating a zero-trust foundation with mutual authentication between microservices.
SPIRE: Introduction and Deep Dive Into Windows Support
Explore SPIRE's secure software identification system and its new Windows support. Learn implementation details, platform differences, and user/developer experiences for workload identity management at scale.
Beyond Proof of Concept - Keys to a Successful SPIRE Rollout in Production
Explore SPIRE deployment in production: architecture, security, performance, and best practices for successful implementation beyond proof of concept.
Zero Trust Workload Identity in Kubernetes
Explore Zero Trust principles in Kubernetes using SIFFE and Spire for workload identity-based authorization, eliminating the need for secrets and enhancing security across service meshes.
Production Workload Identity with SPIRE
Explore SPIRE for secure workload authentication in cloud-native architectures. Learn its core design, implementation in production environments, and upcoming features for enhanced identity management.
Kubernetes Supply Chain Security - Building a Secure Software Factory
Explore Kubernetes supply chain security, software factory approaches, and defense strategies against attacks. Learn about signing, verification, and lessons from SUNBURST to enhance cloud-native security.