Canals and Bridges: Using Amsterdam's Transit System to Secure Kubernetes Networks
Explore Kubernetes network security through Amsterdam's canal system analogy. Learn threat modeling, monitoring tools, and NetworkPolicies to implement robust security strategies for complex K8s environments.
Establishing Trust in Linux Keyrings - Built-in, Imputed, or Transitive Trust
Explore Linux keyrings, trust models, and key management in firmware, kernel, and user space. Learn about trust domains, scope, usage constraints, and security implications for different systems.
Smack Reference Policy: Creating a Rule Set for Linux Distributions
Explore Smack Linux security module, its unique features, and a new effort to create a reference rule set for major Linux distributions. Learn about threat protection and implementation challenges.
Kubernetes Exposed - Seven Hidden Secrets That Will Give You Pause
Descubre secretos ocultos de Kubernetes, desde pods en espacios de nombres inexistentes hasta trucos de seguridad inesperados. Aprende a fortalecer tus sistemas y evitar sorpresas en la gestión de contenedores.
Protect Containerized Applications with System Call Profiling
Explore system call profiling for containerized application security. Learn to develop accurate profiles, monitor runtime behavior, and detect anomalies with low performance overhead and false positives.
SecDevOps: A View from the Trenches
Explore SecDevOps implementation strategies and real-world challenges with insights from industry experience, focusing on practical approaches to integrate security into DevOps workflows.
Attack Tree Vignettes for Containers as a Service Applications - AppSecEU 2016
Explore attack tree vignettes for Containers as a Service applications, enhancing your understanding of security vulnerabilities and mitigation strategies in cloud environments.
Kubernetes Security: Attacking and Defending K8s Clusters
Explore Kubernetes security through attack scenarios, defense strategies, and best practices. Learn to protect clusters using RBAC, audit logs, and network policies.
IoT Developer's Guide to Building Secure IoT Devices
Learn essential strategies and best practices for developing secure IoT devices, focusing on key vulnerabilities and effective mitigation techniques.
Securing ML Workloads with Kubeflow and MLOps - Pwned By Statistics
Learn to secure machine learning workloads using Kubeflow and MLOps. Explore techniques like model extraction, hidden data attacks, and leakage detection to protect your ML pipelines and models.
The Dark Playground of CI/CD - Attack Delivery by GitHub Actions
Explore potential attack vectors in GitHub Actions, including novel techniques like Malicious Custom Action and GitHub Actions C2. Learn about CI/CD security threats and their implications.
Avengers Assemble: Threat Modeling Kubernetes Clusters at Massive Scale
Explore threat modeling for Kubernetes clusters at scale, identifying potential security risks and countermeasures in microservices architectures to enhance protection against unauthorized access and resource misuse.
Security-Focused Chaos Engineering - The Lasso for AI Security Threats
Explore proactive AI security testing using Secops-Chaos, an open-source framework for encoding threat tactics as chaos experiments in Kubernetes environments.
Threat Modelling: How to Improve Your Kubernetes Security Posture
Learn to enhance Kubernetes security through innovative threat modeling techniques, focusing on identifying risks in complex environments and improving overall security posture for development and SRE teams.
Thinking Like a Threat Actor in Kubernetes Environments
Explore threat actor mindsets to enhance Kubernetes security. Learn proactive defense strategies and vulnerability assessment techniques for robust cloud-native environments.
Securing Secrets in Kubernetes Environments
Explore holistic threat models for secrets management in Kubernetes, including attack vectors, potential leakages, and hardening techniques. Learn real-world security insights for protecting sensitive data.
Kubernetes MLSec - Securing AI in Space
Explore the security challenges in AI and MLOps, including data breaches and model poisoning. Learn cloud-native solutions to protect sensitive information in Kubernetes environments.
TL;DR: Applying AI to Security - Condensed Overview of AI Applications in Cybersecurity
Explore AI's impact on security: AppSec, red/blue team tactics, threat modeling. Condenses extensive research into practical applications for rapid understanding of AI in cybersecurity.
Brewing the Kubernetes Storm Center - Open Source Threat Intelligence for Cloud Native Ecosystems
Explore open-source threat intelligence for cloud-native ecosystems. Learn to validate threat models, quantify risks, and make informed defensive decisions using Kubernetes-based environments and real-world data.
The Lost Art of Software Design
Rediscover effective software design techniques. Learn to balance upfront planning with evolutionary approaches using diagrams, decomposition, and the C4 model for agile architecture.
Can A Fuzzer Match A Human
Exploring advanced fuzzing techniques for Solidity compiler testing, focusing on optimizers and code generators to uncover security vulnerabilities in smart contract compilation.