Posts by Category

• CloudNativeSecurityCon North America 2023 64
• KubeCon + CloudNativeCon Europe 2023 35
• KubeCon + CloudNativeCon Europe 2024 27
• KubeCon + CloudNative North America 2023 23
• Cloud Native SecurityCon North America 2022 22
• KubeCon + CloudNative North America 2022 22
• KubeCon + CloudNativeCon North America 2024 22
• KubeCon + CloudNativeCon Europe 2018 18
• Cloud Native SecurityCon Europe 2022 18
• KubeCon + CloudNativeCon Europe 2022 18
• KubeCon + CloudNativeCon Europe 2019 17
• KubeCon + CloudNativeCon North America 2019 16
• KubeCon + CloudNativeCon North America 2018 14
• KubeCon + CloudNative North America 2021 14
• Cloud Native Security Day North America 2020 13
• KubeCon + CloudNativeCon North America 2020 Virtual 11
• KubeCon + CloudNativeCon China 2018 10
• Cloud Native Security Conference North America 2021 10
• Cloud Native Security Day 2019 8
• Cloud Native Security Day 2021 8
• KubeCon + CloudNativeCon North America 2017 6
• KubeCon + CloudNativeCon | Open Source Summit China 2019 5
• CloudNativeCon + KubeCon 2016 4
• 2021年中国 KubeCon + CloudNativeCon + Open Source Summit - 线上峰会 2

CloudNativeSecurityCon North America 2023

Zero Trust in the Cloud with WebAssembly and WasmCloud - Kevin Hoffman, Cosmonic

less than 1 minute read

Abstract

When SysAdmins Quit: Protecting Kubernetes Clusters When the Owner of Multiple Admin KUBECONFIGs Quits - Arun Krishnakumar, VMware

1 minute read

Abstract

The Four Golden Signals of Security Observability - Duffie Cooley, Isovalent

less than 1 minute read

Abstract

Taming Attestation for the Cloud Native World with Parsec - Paul Howard, Arm

1 minute read

Abstract

Spicing up Container Image Security with SLSA & GUAC - Ian Lewis, Google

less than 1 minute read

Abstract

Solving Multi-Service Without a Service Mesh - Evan Anderson, VMware

less than 1 minute read

Abstract

Sharing Security Secrets: How to Encourage Security Advocates - Cailyn Edwards, Shopify

1 minute read

Abstract

Self Healing GitOps: Continuous, Secure GitOps Using Argo CD, Helm and OPA - Upkar Lidder , Tenable

less than 1 minute read

Abstract

Security That Enables: Breaking Down Security Silos in the DevOps Ecosystem - Saurabh Wadhwa, Uptycs

less than 1 minute read

Abstract

Security++: Hide Your Secrets via a Distributed Hardware Security Module - Iris Ding & Malini Bhandaru, Intel

less than 1 minute read

Abstract

Securing the Superpowers: Who Loaded That EBPF Program? - John Fastabend & Natalia Reka Ivanko, Isovalent

1 minute read

Abstract

SBOMs, VEX, and Kubernetes - Kiran Kamity, Deepfactor; Jonathan Meadows , Citi; Dr. Allan Friedman, Cybersecurity and Infrastructure Security Agency; Andrew Martin, Control Plane; Rose Judge, VMware

less than 1 minute read

Abstract

Not All That’s Signed Is Secure: Verify the Right Way with TUF and Sigstore - Zachary Newman, Chainguard, Inc. & Marina Moore, New York University

1 minute read

Abstract

Modifying the Immutable: Attaching Artifacts to OCI Images - Brandon Mitchell, BoxBoat, an IBM Company

less than 1 minute read

Abstract

Mapping Motives Tells a Story: Analysis of 2,000 Enterprise Cloud Detections - David Wolf & Joshua Smith, Devo

less than 1 minute read

Abstract

Leveraging SBOMS to Automate Packaging, Transfer, and Reporting of Dependencies Between Secure Environments - Ian Dunbar-Hall & Jerod Heck, Lockheed Martin

less than 1 minute read

Abstract

Learning from Supply Chain Failures and Best Practices in Other Industries - Demian Ginther, Superorbital, LLC

less than 1 minute read

Abstract

Keyless Code Signing Without Fulcio - Nathan Smith, Chainguard

less than 1 minute read

Abstract

Journey to Cloud-Native, K8s and Trying to Secure It. - Graham E. Chukwumaobi, Independent

less than 1 minute read

Abstract

Handling JWTs: Understanding Common Pitfalls - Bruce MacDonald, InfraHQ

less than 1 minute read

Abstract

Good Fences Make Good Neighbors: Making Cross-Namespace References More Secure with ReferenceGrant - Nick Young, Isovalent

less than 1 minute read

Abstract

Do This, Not That – Lessons from 7 Headline Grabbing Security Breaches - Maya Levine, Sysdig

less than 1 minute read

Abstract

Delivering Secure Healthcare Applications with OSS - Robert Wood, Centers for Medicare and Medicaid Services (CMS) & Gedd Johnson, Defense Unicorns

less than 1 minute read

Abstract

Container Patching: Making It Less Gross Than the Seattle Gum Wall - Greg Castle & Weston Panther, Google

less than 1 minute read

Abstract

Container Factory for Aerospace & Defense Enterprises - Sarah Miller & Melissa Robertson, Collins Aerospace

less than 1 minute read

Abstract

CSI Container: Can You DFIR It? - Alberto Pellitteri & Stefano Chierici, Sysdig

less than 1 minute read

Abstract

CNI or Service Mesh? Comparing Security Policies Across Providers - Rob Salmond, SuperOrbital & Christine Kim, Google

less than 1 minute read

Abstract

12 Essential Requirements for Policy Enforcement and Governance with OSCAL - Robert Ficcaglia, SunStone Secure, LLC

less than 1 minute read

Abstract

🦝 TAG Security Cloud Native Security Whitepapers Overview - Shlomo Zalman Heigh, CyberArk

less than 1 minute read

Abstract

🦝 Security Threat Modeling Live from Scratch Session - Andrew Martin, Control Plane

less than 1 minute read

Abstract

🦝 A Sneak Peak Into Security Reviews with the Community - Ragashree MC, Carnegie Mellon University

less than 1 minute read

Abstract

Zero Trust Workload Identity in Kubernetes - Michael Peters, Red Hat

less than 1 minute read

Abstract

Yes, Application Security Leads to Better Business Value. Learn How from Experts. - Larry Carvalho, RobustCloud; Hillary Benson, Gitlab; Kirsten Newcomer, Red Hat; David Zendzian, VMware

less than 1 minute read

Abstract

Who Are You? I Really Want to Know… the Magic Behind OIDC - Eddie Zaneski, Chainguard

less than 1 minute read

Abstract

What’s a Zero-Trust Tunnel? Exploring Security and Simpler Operations with Istio Ambient Mesh - Jim Barton & Marino Wijay, Solo.io

less than 1 minute read

Abstract

Verifiable GitHub Actions with eBPF - Jose Donizetti & Itay Shakury, Aqua Security

less than 1 minute read

Abstract

Unpacking Open Source Security in Public Repos & Registries - Ben Hirschberg, ARMO

1 minute read

Abstract

Standardization and Security - A Perfect Match - Ravi Devineni & Vinny Carpenter, Northwestern Mutual

1 minute read

Abstract

So You Want to Run Your Own Sigstore: Recommendations for a Secure Setup - Hayden Blauzvern, Google

less than 1 minute read

Abstract

Security as Code: A DevSecOps Approach - Xavier René-Corail, GitHub

less than 1 minute read

Abstract

Security Does Not Need to Be Fun: Ignoring OWASP to Have a Terrible Time - Dwayne McDaniel, GitGuardian

less than 1 minute read

Abstract

Securing User to Service Access in Kubernetes - Maya Kaczorowski & Maisem Ali, Tailscale

less than 1 minute read

Abstract

Securing Self-Hosted GitHub Actions with Kubernetes and Actions-Runner-Controller - Natalie Somersall, GitHub

less than 1 minute read

Abstract

Securing Diverse Supply Chains Across Interconnected Systems - Wayne Starr, Defense Unicorns & Aaron Creel, SpaceX

less than 1 minute read

Abstract

Package Transparency for WebAssembly Registries - Kyle Brown, SingleStore

less than 1 minute read

Abstract

On Establish a Production Zero Trust Architecture - Frederick Kautz, SPIFFE/SPIRE

less than 1 minute read

Abstract

OmniBOR: Bringing the Receipts for Supply Chain Security - Frederick Kautz, SPIFFE/SPIRE

less than 1 minute read

Abstract

Network Security at Scale: L3 Through L7 at Splunk - Mitch Connors, Aviatrix & Bernard Van De Walle, Splunk

less than 1 minute read

Abstract

More Than Just a Pretty Penny! Why You Need Cybersecurity in Your Culture - Callan Andreacchi & Michaela Flatau, Defense Unicorns

less than 1 minute read

Abstract

Improving Secure Pod-to-Pod Communication Within Kubernetes Using Trust Bundles - Thomas Edward Hahn, TCB Technologies, Inc & Mark Hahn, Qualys

less than 1 minute read

Abstract

Identity Based Segmentation for a ZTA - Zack Butcher, Tetrate & Ramaswamy Chandramouli, National Institute of Standards and Technology

less than 1 minute read

Abstract

How to Secure Your Supply Chain at Scale - Hemil Kadakia & Yonghe Zhao, Yahoo

less than 1 minute read

Abstract

How Do You Trust Your Open Source Software? - Naveen Srinivasan, Endor Labs & Brian Russell, Google

less than 1 minute read

Abstract

Get Your Security Priorities Straight! How to Identify Workloads Under Real Threat with Context - Ben Hirschberg, ARMO & Arie Haenel, Intel

1 minute read

Abstract

From the Cluster to the Cloud: Lateral Movements in Kubernetes - Yossi Weizman & Ram Pliskin, Microsoft

less than 1 minute read

Abstract

From Illuminating to Eliminating Crypto Jacking Techniques in Cloud Native - Mor Weinberger, Aqua Security

less than 1 minute read

Abstract

Finding the Needles in a Haystack: Identifying Suspicious Behaviors with eBPF - Jeremy Cowan & Wasiq Muhammad, Amazon Web Services

less than 1 minute read

Abstract

Demystifying Zero-Trust for Cloud Native Technologies - Kishore Nadendla, TIAA; Mariusz SABATH, IBM Research; Asad Faizi, Eskala.io; Aradhna Chetal, CNCF Security TAG; Philip Griffiths, NetFoundry

less than 1 minute read

Abstract

Cryptographic Agility: Preparing Modern Apps for Quantum Safety and Beyond - Natalie Fisher, VMware

less than 1 minute read

Abstract

Cloud Native Security Landscape: Myths, Dragons, and Real Talk - Edd Wilder-James & Loris Degioanni, Sysdig; Kim Lewandowski, Chainguard; Isaac Hepworth, Google; Randall Degges, Snyk

1 minute read

Abstract

Cloud Native Security 101: Building Blocks, Patterns and Best Practices - Rafik Harabi, Sysdig

less than 1 minute read

Abstract

Beyond Cluster-Admin: Getting Started with Kubernetes Users and Permissions - Tiffany Jernigan, VMware

less than 1 minute read

Abstract

Avoiding IAC Potholes with Policy + Cloud Controllers - Andrew Martin, ControlPlane

less than 1 minute read

Abstract

🦝 Let’s Talk Software Supply Chains with TAG Security - Michael Lieberman, Kusari

less than 1 minute read

Abstract

Back to Top ↑

KubeCon + CloudNativeCon Europe 2023

What Can Go Wrong When You Trust Nobody? Threat Modeling Zero Trust - James Callaghan & Richard Featherstone, ControlPlane

less than 1 minute read

Abstract

The Next Log4jshell?! Preparing for CVEs with eBPF! - Natalia Reka Ivanko & John Fastabend, Isovalent

less than 1 minute read

Abstract

Prevent Embarrassing Cluster Takeovers with This One Simple Trick! - Daniele de Araujo dos Santos & Shane Lawrence, Shopify

less than 1 minute read

Abstract

Practical Challenges with Pod Security Admission - V Körbes & Christian Schlotter, VMware

less than 1 minute read

Abstract

Malicious Compliance: Reflections on Trusting Container Scanners - Ian Coldwater, Independent; Duffie Cooley, Isovalent; Brad Geesaman, Ghost Security; Rory McCune, Datadog

1 minute read

Abstract

Least Privilege Containers: Keeping a Bad Day from Getting Worse - Greg Castle & Vinayak Goyal, Google

less than 1 minute read

Abstract

Can You Keep a Secret? on Secret Management in Kubernetes - Liav Yona & Gal Cohen, Firefly

1 minute read

Abstract

Building SLSA 3 Conforment Attestors for Artifacts Generated on GitHub - Ian Lewis & Asra Ali, Google

1 minute read

Abstract

A Look Under the Hood of CNCF Security Audits - Adam Korczynski & David Korczynski, Ada Logics

less than 1 minute read

Abstract

🦝 The Top 10 List of Istio Security Risks and Mitigation Strategies - José Carlos Chávez, Tetrate

less than 1 minute read

Abstract

🦝 Secure the Build, Secure the Cloud: Using OIDC Tokens in CI/CD Pipelines - Alex Ilgayev & Elad Pticha, Cycode

less than 1 minute read

Abstract

Running Not Root Made Easy - Luboslav Pivarc, Red Hat

less than 1 minute read

Abstract

Rotate Roots Right Round: Using Cert-Manager for Safer Private PKI - Ashley Davis, Jetstack

1 minute read

Abstract

Mind the Gap! Bringing Together Cloud Services and Managed K8s Environments - Christophe Tafani-Dereeper, Datadog & Diego Comas, Sourcegraph

less than 1 minute read

Abstract

Kubernetes Defensive Monitoring with Prometheus - David de Torres Huerta & Mirco De Zorzi, Sysdig

less than 1 minute read

Abstract

Improve Vulnerability Management with OCI Artifacts – It Is That Easy! - Itay Shakury, Aqua Security & Toddy Mladenov , Microsoft

less than 1 minute read

Abstract

Image Signing and Runtime Verification at Scale: Datadog’s Journey - Ethan Lowman, Datadog

less than 1 minute read

Abstract

Cluster Grey Zone: Risks in Managed Cluster Middleware - Shay Berkovich & Barak Sharoni, Wiz

1 minute read

Abstract

Checking the Chains at the Gate: Building Supply Chain Policies with Gatekeeper and Ratify - Jeremy Rickard, Microsoft

1 minute read

Abstract

Back to the Future: Next-Generation Cloud Native Security - Matt Jarvis, Snyk & Andrew Martin, Control Plane

less than 1 minute read

Abstract

Automated Cloud-Native Incident Response with Kubernetes and Service Mesh - Matt Turner, Tetrate & Francesco Beltramini, Control Plane

less than 1 minute read

Abstract

🦝 Minimalism: Key to Cloud Security - Barun Acharya, Accuknox

less than 1 minute read

Abstract

🦝 Interactive Playground to Learn Kubernetes and Cloud Native Security - Madhu Akula

less than 1 minute read

Abstract

🦝 Guardians of the Runtime: Leveraging Behavioral Analysis and Policies - Ben Hirschberg, ARMO

less than 1 minute read

Abstract

Zero Privilege Architectures - Thijs Ebbers & Diana Iordan, ING

1 minute read

Abstract

Using OpenTelemetry for Application Security, with a Real Life Example - Ron Vider, Oxeye

1 minute read

Abstract

The Hacker’s Guide to Kubernetes - Patrycja Wegrzynowicz, Form3

less than 1 minute read

Abstract

From SBOMs to IBOMs - Know What’s Happening in Your Clusters - Ido Neeman, Firefly

1 minute read

Abstract

Confidential Containers Made Easy - Fabiano Fidencio, Intel & Jens Freimann, Red Hat

less than 1 minute read

Abstract

Cert-Manager Can Do SPIFFE? Solving Multi-Cloud Workload Identity Using a De Facto Standard Tool - Thomas Meadows, Jetstack & Joshua Van Leeuwen, Diagrid

1 minute read

Abstract

Anatomy of a Cloud Security Breach - 7 Deadly Sins - Maya Levine, Sysdig

less than 1 minute read

Abstract

Adopting Network Policies in Highly Secure Environments - Raymond de Jong, Isovalent

less than 1 minute read

Abstract

A Confidential Story of Well-Kept Secrets - Lukonde Mwila, AWS

1 minute read

Abstract

🦝 RBAC to the Future: Untangling Authorization in Kubernetes - Jimmy Mesta, KSOC

less than 1 minute read

Abstract

🦝 Canals and Bridges: Using Amsterdam’s Transit System To Secure K8s Networks - Cailyn Edwards, Shopify

less than 1 minute read

Abstract

Back to Top ↑

KubeCon + CloudNativeCon Europe 2024

You Shall Not Pass! Unless You Are GUAC Verified…. - Parth Patel, Kusari & Dejan Bosanac, Red Hat

less than 1 minute read

Abstract

Living off the Land Techniques in Managed Kubernetes Clusters - Ronen Shustin & Shay Berkovich, Wiz

less than 1 minute read

Abstract

Leveraging OCI 1.1 for Enhanced SBOM Integration and Vulnerability Scanning in Harbor - Anais Urlichs, Aqua Security & Shengwen Yu, VMware

less than 1 minute read

Abstract

Lessons Learned from Generating 100M SBOMs: Google’s Approach to SBOM Compliance - Brandon Lum & Isaac Hepworth, Google

less than 1 minute read

Abstract

Kubernetes Security Blind Spot: Misconfigured System Pods - Shaul Ben Hai, Palo Alto Networks

less than 1 minute read

Abstract

Kubernetes MLSec: Securing AI in Space - Francesco Beltramini & James Callaghan, ControlPlane

less than 1 minute read

Abstract

Keeping Kubernetes Safe: The Lowdown on Locked Namespaces - Marco De Benedictis, ControlPlane

less than 1 minute read

Abstract

It’s Not Just About SBOMs: Perspectives on Cloud Native Supply Chain Security - Michael Lieberman, Kusari; Dana Wang, OpenSSF - The Linux Foundation; Marina Moore, New York University; John Kjell, TestifySec; Arnaud Le Hors, IBM

less than 1 minute read

Abstract

IAM Confused: Analyzing 8 Identity Breach Incidents - Maya Levine, Sysdig

less than 1 minute read

Abstract

Why Barricade the Door if the Window Is Open? Making Sense of Kubernetes Initial Access Vectors - Shay Berkovich, Wiz

less than 1 minute read

Abstract

VEXinating Your Container Images: The European Way - Dina Truxius, Federal Office for Information Security (BSI) & Jose Antonio Carmona Fombella, VMware

less than 1 minute read

Abstract

Stop Leaking Kubernetes Service Information via DNS! - John Belamaric, Google & Yong Tang, Ivanti

less than 1 minute read

Abstract

Navigating the Software Supply Chain Defense Landscape - Marina Moore & Aditya Sirish A Yelgundhalli, New York University

less than 1 minute read

Abstract

Misconfigurations in Helm Charts: How Far Are We from Automated Detection and Mitigation? - Francesco Minna, Vrije Universiteit Amsterdam & Agathe Blaise, Thales SIX

less than 1 minute read

Abstract

Memory Armor for SPIRE: Fortifying SPIRE with Confidential Containers (CoCo) - Matthew Bates, Stealth Security Startup & Suraj Deshmukh, Microsoft

less than 1 minute read

Abstract

Keep Hackers Out of Your Cluster with These 5 Simple Tricks - Christophe Tafani-Dereeper & Frederic Baguelin, Datadog

less than 1 minute read

Abstract

Federated IAM for Kubernetes with OpenFGA - Jonathan Whitaker, Okta

less than 1 minute read

Abstract

Confidential Containers for GPU Compute: Incorporating LLMs in a Lift-and-Shift Strategy for AI - Zvonko Kaiser, NVIDIA

less than 1 minute read

Abstract

Cloud Native Security: Cell-Based Architecture & K8s - Rostyslav Myronenko & Shweta Vohra, Booking.com

less than 1 minute read

Abstract

Bringing SPIFFE to Linkerd for Mesh Expansion - Zahari Dichev, Buoyant

less than 1 minute read

Abstract

Brewing the Kubernetes Storm Center: Open Source Threat Intelligence for the Cloud Native Ecosystem - Constanze Roedig, Technische Universität Wien & James Callaghan, ControlPlane

less than 1 minute read

Abstract

Securing the Supply Chain with Sigstore Artifacts Signatures at Scale - Dmitry Savintsev & Yonghe Zhao, Yahoo

less than 1 minute read

Abstract

Safety or Usability: Why Not Both? Towards Referential Auth in K8s - Rob Scott, Google & Mo Khan, Microsoft

less than 1 minute read

Abstract

SLSA and FRSCA: Beyond Snacks and Soda! - Christopher Hanson, RX-M, llc.

less than 1 minute read

Abstract

Playing Defense: The Reactive Cloud Native Security Battle - Ayse Kaya, Slim.AI

less than 1 minute read

Abstract

OAuth2 Token Exchange for Microservice API Security - Ahmet Soormally & Letz Yaara, Tyk

less than 1 minute read

Abstract

I’ll Let Myself In: Kubernetes Privilege Escalation Tactics - Andrew Martin & Iain Smart, ControlPlane

less than 1 minute read

Abstract

Back to Top ↑

KubeCon + CloudNative North America 2023

Supercharge Your Software Supply Chain Security Strategy with Multi-SBOM Integration - Pallavi Kalapatapu, Cisco

less than 1 minute read

Abstract

Safeguarding Clusters: Exploring the Benefits and Navigating the Dangers of Admission Controllers - Amine Hilaly & Igor Velichkovich, AWS

less than 1 minute read

Abstract

RBACdoors: How Cryptominers Are Exploiting RBAC Misconfigs - Greg Castle & Vinayak Goyal, Google

less than 1 minute read

Abstract

OIDC and Workload Identity in Kubernetes - Ashutosh Kumar, Elastic & Anish Ramasekar, Microsoft

less than 1 minute read

Abstract

K8s Post-Exploitation: Privilege Escalation, Sidecar Container Injection, and Runtime Security - Magno Logan, GoHacking

less than 1 minute read

Abstract

The Next Frontier: Exploring the Confidentiality of Kubernetes Control Planes - Jens Freimann, Red Hat

less than 1 minute read

Abstract

Securing Identity and Authorization in Microservices - Atul Tulshibagwale, SGNL

less than 1 minute read

Abstract

Paint the Picture! - Detecting Suspicious Data Patterns in Encrypted Traffic with eBPF and KTLS - Natalia Reka Ivanko & John Fastabend, Isovalent

less than 1 minute read

Abstract

K8s Auth{N,Z} at Robinhood - Learning from Reductions, Migrations and Designing Automation - Sujith Katakam & Karen Tu, Robinhood Markets, Inc.

less than 1 minute read

Abstract

Identity-Based Segmentation: An Emerging Standard for Zero Trust from NIST - Zack Butcher, Tetrate

less than 1 minute read

Abstract

Grifts Ahoy! Bracing for the AI Tide - Shane Lawrence, Shopify

less than 1 minute read

Abstract

Forget Everything You Know About Image Vulnerability and Prioritization - Ben Hirschberg, ARMO

less than 1 minute read

Abstract

Five Years of Cloud Native Rust - Alex Leong, Buoyant

less than 1 minute read

Abstract

Eraser: Cleaning up Vulnerable Images from Kubernetes Nodes - Peter Engelbert & Ashna Mehrotra, Microsoft

less than 1 minute read

Abstract

Wolfi: Intro to the Linux Undistro Helping Build Small, up-to-Date, CVE Free Cloud Images - James Rawlings, Chainguard

less than 1 minute read

Abstract

The Attacker Perspective - Insights From Hacking Alibaba Cloud’s Managed K8s Environments - Hillai Ben-Sasson & Ronen Shustin, Wiz

less than 1 minute read

Abstract

Securing Kubernetes: Migrating from Long-Lived to Time-Bound Tokens Without Disrupting Existing Apps - Yuan Chen & James Munnelly, Apple Inc.

less than 1 minute read

Abstract

Cloud Native Application Threat Modeling and Adversary Emulation : Techniques and Tools - Rafik Harabi, Sysdig

less than 1 minute read

Abstract

Clean up on Aisle Cloud! - Sara Johnson, Boeing

less than 1 minute read

Abstract

Challenge to Implementing “Scalable” Authorization with Keycloak - Yoshiyuki Tabata, Hitachi, Ltd.

less than 1 minute read

Abstract

Arbitrary Code & File Execution in R/O FS – Am I Write? - Golan Myers, WithSecure

less than 1 minute read

Abstract

All Cloud-Native Services Are Vulnerable — Block Exploits with Security Behavior Analytics - David Hadas, IBM Research & Roland Huß, Red Hat

less than 1 minute read

Abstract

A Wind of Change for Threat Detection - Melissa Kilby, Apple

less than 1 minute read

Abstract

Back to Top ↑

Cloud Native SecurityCon North America 2022

The Eye of Falco: You Can Escape but Not Hide - Stefano Chierici & Lorenzo Susini, Sysdig

less than 1 minute read

Abstract

Source Attestations with Gitsign - Billy Lynch, Chainguard

less than 1 minute read

Abstract

See It to Believe It: Bringing Observability to Otherwise Opaque Container Builds - Parth Patel, Kusari & Shripad Nadgowda, Intel

less than 1 minute read

Abstract

Secure CI/CD Using JSON Web Token (JWT) - Dov Hershkovitch, GitLab

less than 1 minute read

Abstract

Pwning the CI (with GitHub Action Workflows) - Stephen Giguere, Bridgecrew

less than 1 minute read

Abstract

Policy-Based Governance for End-to-End Integrity Control of Policies - Yuji Watanabe, IBM Research & Jayashree Ramanathan, Red Hat

less than 1 minute read

Abstract

Panel Discussion: Say Hi to the New Couple in the Town – DockerSlim and Kyverno – Making Your Kubernetes Workloads More Secure! - Moderated by Mritunjay Sharma, Slim.AI; Shuting Zhao , Nirmata; Ruhika Bulani, D.Y. Patil College of Engineering, Aku

less than 1 minute read

Abstract

Know Your Dependencies: A Guide to Automating Dependency Assurance - Steve Judd, Jetstack

less than 1 minute read

Abstract

Introducing the OWASP Top Ten for Kubernetes - Jimmy Mesta, KSOC Labs, Inc.

less than 1 minute read

Abstract

Getting More Confident with Your Security Helper Libraries Thanks to Go Fuzzing - Jeremy Matos, Grafana Labs

less than 1 minute read

Abstract

Fileless Attack - Detecting the Undetectable - Carolina Valencia, Aqua Security

less than 1 minute read

Abstract

Beyond Proof of Concept: Keys to a Successful SPIRE Rollout in Production - Eli Nesterov, N/A

less than 1 minute read

Abstract

Why Machines Deserve Rights: Rethinking Automated Infrastructure Access with OSS Teleport Machine ID - Kenneth DuMez, Teleport

less than 1 minute read

Abstract

Verifiable eBPF Traces for Supply Chain Artifacts with Witness and Tetragon - Cole Kennedy, TestifySec

less than 1 minute read

Abstract

Uncovering the History of Your Software Artifacts - Mikhail Swift, TestifySec

less than 1 minute read

Abstract

Securing Access to Kubernetes Infrastructure with Kubernetes Zero Trust Principles - Mohan Atreya, Rafay Systems

less than 1 minute read

Abstract

Panel Discussion: Securing the Golden Path: Adding Guardrails for Developers Without Getting in Their Way! - Moderated by Aradhna Chetal, TIAA; Elizabeth Vasquez Alban, Barclays; Kapil Bareja, Saviyant; Jim Bugwadia, Nirmata & Anil Karmel, RegScale

less than 1 minute read

Abstract

How’s Your Supply Chain with Your Insecure OSS Ingestion? - James Holland, Citi

less than 1 minute read

Abstract

Day in the Life of a Base Image: The Evolution of Vulnerabilities in the Most Popular Containers - Ayse Kaya, Slim.AI

less than 1 minute read

Abstract

Conan.Io – Lessons Learned from Securing 40,000 C++ Packages - Diego Rodriguez-Losada Gonzalez, JFrog

less than 1 minute read

Abstract

Cloud Native Security for the Rest of Us - Tiffany Jernigan, VMware

less than 1 minute read

Abstract

Building Images for the Secure Supply Chain - Adrian Mouat, Chainguard

less than 1 minute read

Abstract

Back to Top ↑

KubeCon + CloudNative North America 2022

You Like It Or Not; You Need It! - PKI And Certificate Management - Shweta Vohra, IBM

less than 1 minute read

Abstract

What Data Tells Us About Software Supply Chain Security & What To Do About It - Josh Bressers, Anchore; Tracy Miranda, Chainguard; John Yeoh, Cloud Security Alliance; Eric Tice, Wipro

less than 1 minute read

Abstract

Tutorial: Reducing the Sticker Price Of Kubernetes Security - Pushkar Joglekar, VMware

1 minute read

Abstract

The Insider Threat: Third-Party Applications In Your Cluster - Dagan Henderson, Raft, LLC & Will Kline, Dark Wolf Solutions

less than 1 minute read

Abstract

So, SBOMs Matter…Now What? - Sophie Wigmore & Frankie Gallina-Jones, VMware

less than 1 minute read

Abstract

Putting Hackers Breaching Your Cluster In Automatic Quarantine - Ziv Nevo, IBM

less than 1 minute read

Abstract

Fuzzing Session: Finding Bugs and Vulnerabilities Automatically - David Korczynski & Adam Korczynski, Ada Logics

less than 1 minute read

Abstract

B’Envoy-age to Pre-Quantum Encryption - Daniel Rouhana, Independent; Emma Dickenson, Washington State University; Doron Podoleanu, F5

less than 1 minute read

Abstract

Securing Edge Workloads With Cert-Manager And SPIFFE - Sitaram IYER & Riaz Mohamed, Jetstack Ltd

less than 1 minute read

Abstract

Run As “Root”, Not Root: User Namespaces In K8s - Marga Manterola, Isovalent & Rodrigo Campos Catelin, Microsoft

less than 1 minute read

Abstract

Path To Production: Sustainable Compliance In Strict Environments - Chip Zoller, Nirmata & Brandt Keller, Defense Unicorns

less than 1 minute read

Abstract

Migrating From PodSecurityPolicy - Tim Allclair & Sam Stoelinga, Google

less than 1 minute read

Abstract

It’s Dangerous To SLSA Alone Out There! Take This Artifact Knowledge Graph! - Mihai Maruseac, Google & Michael Lieberman, Independent

less than 1 minute read

Abstract

How the Argo Project Transitioned From Security Aware To Security First - Henrik Blixt & Michael Crenshaw, Intuit

less than 1 minute read

Abstract

Hack Back; Let’s Learn Security With CTFs! - Lewis Denham-Parry, Chainguard & Natalia Reka Ivanko, Isovalent

less than 1 minute read

Abstract

Using the EBPF Superpowers To Generate Kubernetes Security Policies - Mauricio Vásquez Bernal & Alban Crequy, Microsoft

less than 1 minute read

Abstract

Untrusted Execution: Attacking the Cloud Native Supply Chain - Andrew Martin, ControlPlane

less than 1 minute read

Abstract

Securing the IaC Supply Chain - Jesse Sanford, Autodesk & Jason Hall, Chainguard

less than 1 minute read

Abstract

SLSA FRSCA Recipe For Secure Supply Chain - Parth Patel & Michael Lieberman, Kusari

less than 1 minute read

Abstract

SBOM X-Ray Superpowers: Making Better SBOMs, Using SBOMs - Brandon Lum, Google & Chris Phillips, Anchore

less than 1 minute read

Abstract

Kubernetes to Cloud Attack Vectors: Demos Inside - Danny Hershko Shemesh & Alon Schindel, Wiz

less than 1 minute read

Abstract

Armoring Cloud Native Workloads With LSM Superpowers - Barun Acharya, Accuknox

less than 1 minute read

Abstract

Back to Top ↑

KubeCon + CloudNativeCon North America 2024

Why Perfect Compliance Is the Enemy of Good Kubernetes Security - Michele Chubirka, Google

less than 1 minute read

Abstract

The Policy Engines Showdown - Gabriel L. Manor, Permit.io; Andres Aguiar, Okta; Omri Gazitt, Aserto; Pauline Jamin, Agicap; Tyler Schade, Geico; Joy Scharmen, StrongDM

less than 1 minute read

Abstract

Seccomp and eBPF; What’s the Difference? Why Do I Need to Know? - Natalia Reka Ivanko & Duffie Cooley, Isovalent @ Cisco

less than 1 minute read

Abstract

SPIFFE the Easy Way: Universal X509 and JWT Identities Using cert-manager - Tim Ramlot & Ashley Davis, Venafi

less than 1 minute read

Abstract

SPIFFE Deployments in Non-Kubernetes Environments - Nadin El-Yabroudi & Eli Nesterov, SPIRL

less than 1 minute read

Abstract

Rogue No More: Securing Kubernetes with Node-Specific Restrictions - Anish Ramasekar, Microsoft & James Munnelly, Apple

less than 1 minute read

Abstract

Practical Supply Chain Security: Implementing SLSA Compliance from Build to Runtime - Enguerrand Allamel, Ledger

less than 1 minute read

Abstract

Powering Automatic Authorization in Envoy Through Live Traffic Inspection - Dom Del Nano, Pixie core maintainer

less than 1 minute read

Abstract

What Agent to Trust with Your K8s: Falco, Tetragon or KubeArmor? - Henrik Rexed, Dynatrace

less than 1 minute read

Abstract

Multi-Tier Security in WasmCloud: From Developer Constraints to Platform Extensibility - Brooks Townsend, Cosmonic

less than 1 minute read

Abstract

Mish-Mesh: Abusing the Service Mesh to Compromise Kubernetes Environments - Hillai Ben-Sasson & Nir Ohfeld, Wiz

less than 1 minute read

Abstract

It’s Dangerous to Build It Alone, Take This. - Jeremy Rickard & Ashna Mehrotra, Microsoft

less than 1 minute read

Abstract

From Standards to Practice: The Journey to Container Maturity - Carmen Chow & Thomas Robinson, Yelp

less than 1 minute read

Abstract

From Silicon to Service: Ensuring Confidentiality in Serverless GPU Cloud Functions - Zvonko Kaiser, NVIDIA

less than 1 minute read

Abstract

Workload Identity Federation – Stop Using Long-Lived Credentials - Benjamin Dronen, Ford Motor Company & Anjali Telang, Red Hat

less than 1 minute read

Abstract

GitOops… I Did It Again! Protecting Your GitOps System from Being Used for Privilege Escalation - Oreen Livni & Elad Pticha, Cycode

less than 1 minute read

Abstract

From Observability to Enforcement: Lessons Learned Implementing eBPF Runtime Security - Anna Kapuścińska & Kornilios Kourtis, Isovalent

less than 1 minute read

Abstract

Expanding the Capabilities of Kubernetes Access Control - Jimmy Zelinskie, authzed & Lucas Käldström, Upbound

less than 1 minute read

Abstract

CEL-Ebrating Simplicity: Mastering Kubernetes Policy Enforcement - Kevin Conner, Getup Cloud & Anish Ramasekar, Microsoft

less than 1 minute read

Abstract

Bridging Clouds: TikTok’s Blueprint for Unified OIDC Access on Multi-Cloud Kubernetes - Naveen Mogulla, TikTok

less than 1 minute read

Abstract

Breaking Free from Vulnerability Scanning Noise: Automated VEX Aggregation for Accuracy - Teppei Fukuda, Aqua Security Software Ltd.

less than 1 minute read

Abstract

AuthZEN: The “OpenID Connect” for Authorization - Omri Gazitt, Aserto

less than 1 minute read

Abstract

Back to Top ↑

KubeCon + CloudNativeCon Europe 2018

TL;DR NIST Container Security Standards - Elsie Phillips, CoreOS (Beginner Skill Level) (Slides Attached)

less than 1 minute read

Abstract

Secure Pods - Tim Allclair, Google (Advanced Skill Level) (Slides Attached)

less than 1 minute read

Abstract

Multi-Tenancy in Kubernetes: Best Practices Today, and Future Directions - David Oppenheimer, Google (Intermediate Skill Level) (Slides Attached)

less than 1 minute read

Abstract

Kubernetes Runtime Security: What Happens if a Container Goes Bad? - Jen Tong & Maya Kaczorowski, Google (Intermediate Skill Level) (Slides Attached)

less than 1 minute read

Abstract

From Kubelet to Istio: Kubernetes Network Security Demystified - Andrew Martin, ControlPlane (Intermediate Skill Level) (Slides Attached)

less than 1 minute read

Abstract

A Hacker’s Guide to Kubernetes and the Cloud - Rory McCune, NCC Group PLC (Intermediate Skill Level) (Slides Attached)

less than 1 minute read

Abstract

OPA: The Cloud Native Policy Engine - Torin Sandall, Styra (Intermediate Skill Level) (Slides Attached)

less than 1 minute read

Abstract

Good Enough for the Finance Industry: Achieving High Security at Scale with Microservices in Kubernetes - Zachary Arnold & Austin Adams, Ygrene Energy Fund (Any Skill Level) (Slides Attached)

less than 1 minute read

Abstract

Entitlements: Understandable Container Security Controls - Justin Cormack & Nassim Eddequiouaq, Docker (Intermediate Skill Level) (Slides Attached)

less than 1 minute read

Abstract

Container Isolation at Scale (Introducing gVisor) - Dawn Chen & Zhengyu He, Google (Intermediate Skill Level) (Slides Attached)

less than 1 minute read

Abstract

Case Study: How Containers Makes Security and Compliance Instantly Easier - John Morello, Twistlock (Intermediate Skill Level)

less than 1 minute read

Abstract

Applying Least Privileges through Kubernetes Admission Controllers - Benjy Portnoy, Aqua Security (Intermediate Skill Level)

less than 1 minute read

Abstract

The Route To Rootless Containers - Ed King, Pivotal & Julz Friedman, IBM (Any Skill Level) (Slides Attached)

less than 1 minute read

Abstract

Securing your Kubernetes Delivery Pipelines with Notary and TUF - Liam White & Michael Hough, IBM (Intermediate Skill Level) (Slides Attached)

less than 1 minute read

Abstract

Improving your Kubernetes Workload Security with Hardware Virtualization - Fabian Deutsch, Red Hat & Samuel Ortiz, Intel (Intermediate Skill Level) (Slides Attached)

less than 1 minute read

Abstract

Establishing Image Provenance and Security in Kubernetes - Adrian Mouat, Container Solutions (Any Skill Level) (Slides Attached)

less than 1 minute read

Abstract

Completely Securing the Software Supply Chain using Grafeas + in-toto - Lukas Puehringer, NYU & Wendy Dembowski, Google (Any Skill Level) (Slides Attached)

less than 1 minute read

Abstract

Cloud Native Identity Management - Andreas Zitzelsberger, QAware GmbH & Andrew Jessup, Scytale Inc. (Intermediate Skill Level) (Slides Attached)

less than 1 minute read

Abstract

Back to Top ↑

Cloud Native SecurityCon Europe 2022

Vanquishing Vulnerabilities in Valencia - Alba Ferri Fitó, Sysdig & Eric Smalling, Synk

less than 1 minute read

Abstract

Towards the Hardened Cloud-Native Cornerstone: Container Runtime Protection from Security to Privacy - Kailun Qin, Intel

less than 1 minute read

Abstract

Top 5 Reasons (and 5 Myths Debunked) to Invest in Securing the Software Supply Chain - Hector Linares, Microsoft

less than 1 minute read

Abstract

Shrinking Software Attack Surface with WebAssembly & CNCF Wasmcloud - Liam Randall, Cosmonic

less than 1 minute read

Abstract

Securing the Supply Chain with Witness - Cole Kennedy, TestifySec

less than 1 minute read

Abstract

Real Time Security - eBPF for Preventing attacks - Liz Rice, Isovalent

1 minute read

Abstract

Putting the Supply Chain Pieces together: A Deep Dive into the Secure software Factory - Michael Lieberman, Citi

less than 1 minute read

Abstract

Purple Teaming Like Sky’s the Limit – Adversary Emulation in the Cloud with Stratus Red Team - Christophe Tafani-Dereeper, Datadog

less than 1 minute read

Abstract

Deep Dive: Serverless Security (STAG Presentation) - Moderated by Andrew J Krug, Datadog; Ragashree M C, Nokia; Ashish Rajan, CISO & Ariel Shuper, Cisco

less than 1 minute read

Abstract

VEX! or… How to Reduce CVE Noise With One Simple Trick! - Frederick Kautz

less than 1 minute read

Abstract

Using CNCF Best Practices for Software Supply Chain to Guide and Enhance Your Security Posture - Ryan Gibbons, 3m & Conor Rogers, Stelligent

less than 1 minute read

Abstract

The Unexpected Demise of Open Source Libraries - Liran Tal, Synk

less than 1 minute read

Abstract

TUF Maintainer Panel Discussion - Moderated by Andrew Krug, Datadog; Asra Ali, Google; Marina Moore, NYU; Trishank Karthik Kuppusamy, Datadog; & Jussi Kukkonen, VMware

less than 1 minute read

Abstract

Security Champions: The What, Why, and How - Ann Marie Fred, Red Hat

less than 1 minute read

Abstract

Protect the Pipe! A Policy-based Approach for Securing CI/CD Pipelines - Shripad Nadgowda, IBM Research & Jim Bugwadia, Nirmata

less than 1 minute read

Abstract

Fuzzing the CNCF Landscape - Adam Korczynski & David Korczynski, Ada Logics

less than 1 minute read

Abstract

Dissecting the Discovery of the 0-Day Supply Chain Vulnerability in Argo CD - Moshe Zioni, Apiiro

less than 1 minute read

Abstract

CTF Overview and Experience - Lewis Denham-Parry, Control Plane

less than 1 minute read

Abstract

Back to Top ↑

KubeCon + CloudNativeCon Europe 2022

Too Much to Choose – Making Sense of a Smorgasbord of Security Standards - Anais Urlichs & Rory McCune, Aqua Security

less than 1 minute read

Abstract

Throw Away Your Passwords: Trusting Workload Identity - Ric Featherstone, ControlPlane

less than 1 minute read

Abstract

Three Surprising K8s Networking “Features” and How to Defend Against Them - James Cleverley-Prance, ControlPlane

less than 1 minute read

Abstract

Multi-Cloud Workload Identity With SPIFFE - Jake Sanders & Charlie Egan, Jetstack

less than 1 minute read

Abstract

Full Mesh Encryption in Kubernetes with WireGuard and Calico - Peter Kelly, Tigera

less than 1 minute read

Abstract

Attacking & Defending Kubernetes TEE Enclaves in Critical Infrastructure - Robert Ficcaglia, SunStone Secure, LLC

less than 1 minute read

Abstract

Threat Modelling Kubernetes: A Lightspeed Introduction - Lewis Denham-Parry, Control Plane

less than 1 minute read

Abstract

Securing Your Container Native Supply Chain with SLSA, Github and Tekton - Laurent Simon, Google & Priya Wadhwa, Chainguard

less than 1 minute read

Abstract

Make the Secure Kubernetes Supply Chain Work for You - Adolfo García Veytia, Chainguard

less than 1 minute read

Abstract

Fun with Continuous Compliance - Ann Wallace, Shopify & Zeal Somani, Google

less than 1 minute read

Abstract

Distributing Supply Chain Artifacts with OCI & ORAS Artifacts - Steve Lasker, Microsoft

less than 1 minute read

Abstract

Trampoline Pods: Node to Admin PrivEsc Built Into Popular K8s Platforms - Yuval Avrahami & Shaul Ben Hai, Palo Alto Networks

less than 1 minute read

Abstract

The Hitchhiker’s Guide to Pod Security - Lachlan Evenson, Microsoft

less than 1 minute read

Abstract

Securing Kubernetes Applications by Crafting Custom Seccomp Profiles - Sascha Grunert, Red Hat

less than 1 minute read

Abstract

K8s and Active Directory Can Be Friends! How to Use Dex to Bridge the Gap - Onkar Bhat, Kasten by Veeam

less than 1 minute read

Abstract

How Attackers Use Exposed Prometheus Server to Exploit Kubernetes Clusters - David de Torres Huerta & Miguel Hernández, Sysdig

less than 1 minute read

Abstract

Bypassing Falco: How to Compromise a Cluster without Tripping the SOC - Shay Berkovich, BlackBerry

less than 1 minute read

Abstract

Lightning Talk: Secure Multi User HPC Jobs in Kubernetes with Kyverno - Trey Dockendorf, Ohio Supercomputer Center

less than 1 minute read

Abstract

Back to Top ↑

KubeCon + CloudNativeCon Europe 2019

Uber x Security: Why and How We Built Our Workload Identity Platform - Tyler Julian, Uber & Daniel Feldman, Scytale

less than 1 minute read

Abstract

Securing Multi-Cloud Cross-Cluster Communication with SPIFFE and SPIRE - Evan Gilman, Scytale, Inc.

less than 1 minute read

Abstract

Securing Kubernetes with Trusted Platform Module (TPM) - Alex Tcherniakhovski & Andrew Lytvynov, Google

less than 1 minute read

Abstract

Secrets Store CSI Driver-Bring Your Own Enterprise Secrets Store to K8s - Rita Zhang, Microsoft & Anubhav Mishra, HashiCorp

less than 1 minute read

Abstract

Protecting the Data Lake - Ash Narkar, Styra, Inc

less than 1 minute read

Abstract

DIY Pen-Testing for Your Kubernetes Cluster - Liz Rice, Aqua Security

less than 1 minute read

Abstract

Zero Trust Service Mesh with Calico, SPIRE, and Envoy - Shaun Crampton, Tigera & Evan Gilman, Scytale

less than 1 minute read

Abstract

Smarter Kubernetes Access Control: A Simpler Approach to Auth - Rob Scott, ReactiveOps

less than 1 minute read

Abstract

Inside the CNCF Project Security Reviews - Justin Cormack, Docker

less than 1 minute read

Abstract

Crafty Requests: Deep Dive Into Kubernetes CVE-2018-1002105 - Ian Coldwater, Heroku

less than 1 minute read

Abstract

Container Forensics: What to Do When Your Cluster is a Cluster - Maya Kaczorowski & Ann Wallace, Google

less than 1 minute read

Abstract

Caller ID in Kubernetes - Michael Danese, Google

less than 1 minute read

Abstract

Using eBPF to Bring Kubernetes-Aware Security to the Linux Kernel - Dan Wendlandt, Isovalent

less than 1 minute read

Abstract

Portable, Universal Single Sign-On for Your Clusters - Miguel Martinez, Bitnami

less than 1 minute read

Abstract

Kubernetes + Encrypted Memory = Security * Privacy - Harshal Patil & Pradipta Banerjee, IBM

less than 1 minute read

Abstract

Fine-Grained Permissions in Kubernetes: What’s Missing, and How to Fix That - Vallery Lancey, Lyft & Seth McCombs, Triller

less than 1 minute read

Abstract

Envoy SDS: Fortifying Istio Security - Yonggang Liu & Quanjie Lin, Google

less than 1 minute read

Abstract

Back to Top ↑

KubeCon + CloudNativeCon North America 2019

Securing Communication Between Meshes and Beyond with SPIFFE Federation - Evan Gilman, Scytale & Oliver Liu, Google

less than 1 minute read

Abstract

Prepare to Be Boarded! A Tale of Kubernetes, Plunder, and Cryptobooty - James Condon, Lacework

less than 1 minute read

Abstract

Kubernetes Policy Enforcement Using OPA At Goldman Sachs - Miguel Uzcategui, Goldman Sachs & Tim Hinrichs, Styra

less than 1 minute read

Abstract

Identity Bootstrapping in Multi-tenant Multi-cluster Kubernetes - Manish Mehta, Volterra & Derek Suzuki, The Voleon Group

less than 1 minute read

Abstract

How Yelp Moved Security From the App to the Mesh with Envoy and OPA - Daniel Popescu, Yelp & Ben Plotnick, Cruise

less than 1 minute read

Abstract

How Kubernetes Components Communicate Securely in Your Cluster - Maya Kaczorowski, Google

less than 1 minute read

Abstract

Redesigning Notary in a Multi-registry World - Justin Cormack, Docker

less than 1 minute read

Abstract

Piloting Around the Rocks: Avoiding Threats in Kubernetes - Robert Tonic & Stefan Edwards, Trail of Bits

less than 1 minute read

Abstract

On the Security of Copying To and From Live Containers - Ariel Zelivansky & Yuval Avrahami, Palo Alto Networks

less than 1 minute read

Abstract

Knative - The Security Platypus? - Ariel Shuper, Aqua Security

less than 1 minute read

Abstract

Binary Authorization in Kubernetes - Aysylu Greenberg, Google & Liron Levin, Palo Alto Networks

less than 1 minute read

Abstract

Walls Within Walls: What if Your Attacker Knows Parkour? - Tim Allclair & Greg Castle, Google

less than 1 minute read

Abstract

The Devil in the Details: Kubernetes’ First Security Assessment - Aaron Small, Google & Jay Beale, InGuardians

less than 1 minute read

Abstract

Panel: Control Plane vs Data Plane: Untangling the Tenets of Multitenancy - Tasha Drew, VMware; Sanjeev Rampal, Cisco; Ryan Bezdicek, Cray Inc.; Adrian Ludwin, Google; & Fei Guo, Alibaba

less than 1 minute read

Abstract

Enforcing Automatic mTLS with Linkerd and OPA Gatekeeper - Ivan Sim, Buoyant & Rita Zhang, Microsoft

less than 1 minute read

Abstract

CAP_NET_RAW and ARP Spoofing in Your Cluster: It’s Going Downhill From Here - Liz Rice, Aqua Security

less than 1 minute read

Abstract

Back to Top ↑

KubeCon + CloudNativeCon North America 2018

Single Sign-On for Kubernetes - Joel Speed, Pusher

less than 1 minute read

Abstract

Shopify’s $25k Bug Report, and the Cluster Takeover That Didn’t Happen - Greg Castle, Google & Shane Lawrence, Shopify

less than 1 minute read

Abstract

Using Application Identity to Correlate Metrics: A Look at SPIFFE and SPIRE - Priyanka Sharma, GitLab

less than 1 minute read

Abstract

So You Want to Run Vault in Kubernetes? - Seth Vargo, Google

less than 1 minute read

Abstract

Scrutinizing SPIRE to Sensibly Strengthen SPIFFE Security - Matt Moyer, Heptio & Evan Gilman, Scytale

less than 1 minute read

Abstract

Navigating Workload Identity in Kubernetes - Michael Danese, Google & Spike Curtis, Tigera

less than 1 minute read

Abstract

How We Survived Our First PCI/HIPAA Compliant Check with Kubernetes - Travis Jeppson, Nav

less than 1 minute read

Abstract

Friends Don’t Let Friends Leave Their Kubernetes Data Unprotected - Rita Zhang, Microsoft

less than 1 minute read

Abstract

This Year, It’s About Security - Maya Kaczorowski & Brandon Baker, Google

less than 1 minute read

Abstract

Securing Kubernetes With Admission Controllers - Dave Strebel, Microsoft

less than 1 minute read

Abstract

Recent Advancements in Container Isolation - Tim Allclair & Adin Scannell, Google

less than 1 minute read

Abstract

How Symlinks Pwned Kubernetes (And How We Fixed It) - Michelle Au, Google & Jan Šafránek, Red Hat

less than 1 minute read

Abstract

Hardening Kubernetes Setups: War Stories from the Trenches of Production - Puja Abbassi, Giant Swarm

less than 1 minute read

Abstract

Athenz with Istio: Single Access Control Model in Cloud Infrastructures - Tatsuya Yano, Yahoo Japan Corporation

less than 1 minute read

Abstract

Back to Top ↑

KubeCon + CloudNative North America 2021

We Built the Kubernetes SBOM and Now You Can Write Your Own! - Adolfo García Veytia, uServers

less than 1 minute read

Abstract

The Hitchhiker’s Guide to Kubernetes Vulnerabilities - Robert Clark & Micah Hausler, Amazon

less than 1 minute read

Abstract

Everything Wrong with K8s Authentication and How We Worked Around It - Mo Khan & Margo Crawford, VMware

less than 1 minute read

Abstract

Bridging the Great Divide: SPIFFE/SPIRE for Cross-Cluster Authentication - Andrew Harding, VMware

less than 1 minute read

Abstract

Untangling the Multi-Cloud Identity and Access Problem With SPIFFE Tornjak - Brandon Lum & Mariusz Sabath, IBM

less than 1 minute read

Abstract

Know Your Enemy: Mapping Security Risks Using Threat Matrix for Kubernetes - Yossi Weizman & Ram Pliskin, Microsoft

less than 1 minute read

Abstract

Keeping Up with the CVEs: How to Find a Needle in a Haystack? - Pushkar Joglekar, VMware

less than 1 minute read

Abstract

Insights into Unsecured Kubernetes in the Wild - Jay Chen & Aviv Sasson, Palo Alto Networks

less than 1 minute read

Abstract

Fine-Grained User Authorization for Kubernetes with OPA and LDAP - Cagri Cetin & Quentin Long, Yelp Inc.

less than 1 minute read

Abstract

sigstore: How We Started, Where We Are, Where We are Headed - Bob Callaway, Red Hat & Dan Lorenc, Google

less than 1 minute read

Abstract

My Container Image has 500 Vulnerabilities, Now What? - Matt Jarvis, Snyk

less than 1 minute read

Abstract

Kubernetes Supply Chain Security: The Software Factory - Andrew Martin, Control Plane

less than 1 minute read

Abstract

Kubernetes Exposed! Seven of Nine Hidden Secrets That Will Give You Pause - Ian Coldwater, Twilio & Brad Geesaman, Aqua Security

less than 1 minute read

Abstract

Exploiting a Slightly Peculiar Volume Configuration with SIG-Honk - Ian Coldwater, Twilio; Brad Geesaman & Rory McCune, Aqua Security; Duffie Cooley, Isovalent

less than 1 minute read

Abstract

Back to Top ↑

Cloud Native Security Day North America 2020

Why OpenID Connect is More Secure then Certificates - Marc Boorshtein, Tremolo Security, Inc.

less than 1 minute read

Abstract

Welcome and Introductions - Emily Fox, National Security Agency

less than 1 minute read

Abstract

Hardware Backed Security For Multitenancy at the Edge with SPIFFE & PARSEC - Paul Howard, Arm & Andres Vega, VMware

less than 1 minute read

Abstract

Exit Stage Left: Replacing Theater with Chaos - Kelly Shortridge, Capsule8

less than 1 minute read

Abstract

Event Closing Talk

less than 1 minute read

Abstract

Enabling Autonomous Teams With Policy Enforcement at Yubico - James Alseth & John Reese, Yubico

less than 1 minute read

Abstract

Dynamic Image Scanning Through System Tracing - Itay Shakury, Aqua Security

less than 1 minute read

Abstract

Designing Secure Applications in the Cloud - Adora Nwodo, Microsoft

less than 1 minute read

Abstract

Cloud Security and how to leverage the shared responsibility model to your advantage - Eshrak Assaf & David Lebutsch, IBM

less than 1 minute read

Abstract

Cartography: using graphs to improve and scale security decision-making - Alex Chantavy, Lyft & Marco Lancini, Thought Machine

less than 1 minute read

Abstract

Capture the Flag Wrap Up & Summary, Andrew Martin, Control Plane & Magno Logan, Trend Micro

less than 1 minute read

Abstract

Building Effective Attack Detection in the Cloud - Alfie Champion & Nick Jones, F-Security Consulting

less than 1 minute read

Abstract

A Tale of a Meshi Kafka: Securing Kafka Deployment When Istio Is Used - Ariel Shuper, Portshift & Nikolas Mousouros, Marlow Navigation

less than 1 minute read

Abstract

Back to Top ↑

KubeCon + CloudNativeCon North America 2020 Virtual

Using Open Policy Agent to Meet Evolving Policy Requirements - Jeremy Rickard, VMware

less than 1 minute read

Abstract

Seccomp: What Can It Do For You? - Justin Cormack, Docker

less than 1 minute read

Abstract

Customizing OPA for a Perfect Fit Authorization Sidecar - Patrick East, Styra

less than 1 minute read

Abstract

Bypass Falco - Leonardo Di Donato, Sysdig

less than 1 minute read

Abstract

Secure Policy Distribution With OPA - Ash Narkar, Styra

less than 1 minute read

Abstract

Lives On the Line. Learning Disaster Response From the Coronavirus Pandemic - Kris Nova & Dr. Rachel Beda, Wisepatient

less than 1 minute read

Abstract

Kubernetes-native Security with Starboard - Liz Rice & Daniel Pacak, Aqua Security

less than 1 minute read

Abstract

DevOps All the Things: Creating a Pipeline to Validate Your OPA Policies - Goran Osim & Karpagam Balan, Booz Allen Hamilton

less than 1 minute read

Abstract

Static Analysis of Kubernetes Manifests - Barak Schoster, Bridgecrew

less than 1 minute read

Abstract

Security Kill Chain Stages in a 100k+ Daily Container Environment with Falco - Natch Ruengsakulrach & Eric Hollis, MathWorks

less than 1 minute read

Abstract

PKI the Wrong Way: Simple TLS Mistakes and Surprising Consequences - Tabitha Sable, Datadog

less than 1 minute read

Abstract

Back to Top ↑

KubeCon + CloudNativeCon China 2018

The State of Your Supply Chain - Andrew Martin, ControlPlane & Maya Kaczorowski, Google

less than 1 minute read

Abstract

Nabla Containers: A New Approach to Container Isolation - Brandon Lum & Ricardo Koller, IBM

less than 1 minute read

Abstract

Layers of Isolation in Kubernetes - Tim Allclair, Google

less than 1 minute read

Abstract

Istio Certificate Management Through Vault - Lei Tang & Yonggang Liu, Google

less than 1 minute read

Abstract

Implementing Authorization - Torin Sandall, Styra

less than 1 minute read

Abstract

Hardening Multi-Cloud Kubernetes Clusters as a Service – Dirk Marwinski, SAP SE & Alban Crequy, Kinvolk GmBH

less than 1 minute read

Abstract

Turtles All the Way Down: Securely Managing Kubernetes Secrets With Secrets - Maya Kaczorowski & Alexandr Tcherniakhovski, Google

less than 1 minute read

Abstract

Three Years of Lessons Running Potentially Malicious Code Inside Containers - Ben Hall, Katacoda

less than 1 minute read

Abstract

Securing the Deploy Pipeline - Felix Glaser, Shopify

less than 1 minute read

Abstract

Access Policies for Hybrid Cloud Environments - Ruiyi Wang, Google

less than 1 minute read

Abstract

Back to Top ↑

Cloud Native Security Conference North America 2021

The State of Vulnerability in Cloud Native Security- Magno Logan, Trend Micro

less than 1 minute read

Abstract

The Long and Windy Road that leads to Cloud Native Security- Frederick Kautz, Sharecare

less than 1 minute read

Abstract

Security Chaos Engineering for Fun and Profit- Kennedy Torkura, Firebolt Analytics

less than 1 minute read

Abstract

Replacing PSPs? Keep Bad Pods out of your cluster using Kyverno!- Shuting Zhao, Nirmata

1 minute read

Abstract

Protecting the Omniverse: How NVIDIA is Securing Containers- Adam Wallis, NVIDIA

less than 1 minute read

Abstract

Data Security and Storage Hardening in Rook and Ceph- Federico Lucifredi, Red Hat

less than 1 minute read

Abstract

Data Security: Theoretical and Real World Approaches to Compartmentalization- Ana McTaggart & Michael Hackett, Red Hat; Sean Anderson, Portland State University

less than 1 minute read

Abstract

Cryptographic Signatures: A Building Block Not A Panacea- Marina Moore, NYU

less than 1 minute read

Abstract

Cloud Native Security Lexicon- Ragashree M C, Nokia

less than 1 minute read

Abstract

Change is Hard - Securing the Future Today- Andrew Clay Shafer, Red Hat

less than 1 minute read

Abstract

Back to Top ↑

Cloud Native Security Day 2019

Trusted Software Supply Chain with JTE - Steven Terrana, Booz Allen Hamilton

less than 1 minute read

Abstract

The Path Less Traveled: Abusing Kubernetes Defaults - Duffie Cooley, VMware & Ian Coldwater, Heroku

less than 1 minute read

Abstract

The Devil in the Details: Kubernetes’ First Security Assessment - Jay Beale, InGuardians & Aaron Small, Google

less than 1 minute read

Abstract

Slowing Our Role: Moving Towards Policy at Plex - John Reese, Plex Systems

less than 1 minute read

Abstract

Palo Alto Networks Sponsored Session - How to Choose Which Cloud Native Technologies Work Best for Specific Workloads - John Morello, Palo Alto Networks

1 minute read

Abstract

MLGuard – Detecting Malicious Web Requests using a Serverless-based Machine Learning System - Abhinav Srivastava, Frame.io

less than 1 minute read

Abstract

IBM Sponsored Session - Protecting Kubernetes Workloads from Attacks - Chris Rosen, IBM

less than 1 minute read

Abstract

Continuous Assurance and Continuous Compliance via Data, Graph, Query and Code - Erkang Zheng, LifeOmic

less than 1 minute read

Abstract

Back to Top ↑

Cloud Native Security Day 2021

Top 5 Concerns Every InfoSec Team Has And How To Overcome Them With eBPF - Natalia Reka Ivanko, Isovalent

less than 1 minute read

Abstract

Security Nutrition Labels for Cloud Native Projects - John Kinsella, Accurics

less than 1 minute read

Abstract

Securing the Software Supply Chain with the in-toto and SPIRE projects - Cole Kennedy & Mikhail Swift BoxBoat Technologies

less than 1 minute read

Abstract

Secure Code Development and Lessons Learned from etcd Security Audit - Sahdev Zala, IBM & Hitoshi Mitake, Indeed

less than 1 minute read

Abstract

Making Dynamic Admission Control Even More Dynamic Using WebAssembly - Flavio Castelli & Rafael Fernández López, SUSE

less than 1 minute read

Abstract

Integrating Security in the Build Pipeline - Anirban Saha, Allianz Direct

less than 1 minute read

Abstract

Beyond signatures: Using TUF and Notary to Secure Software Distribution - Marina Moore, New York University

less than 1 minute read

Abstract

A First Look at the Security of Serverless Applications - Eduard Marin, Telefonica Research

less than 1 minute read

Abstract

Back to Top ↑

KubeCon + CloudNativeCon North America 2017

When the Going Gets Tough, Get TUF Going! [I] - David Lawrence & Ashwini Oruganti, Docker

less than 1 minute read

Abstract

The Power of Application Intent Analysis for Container Security [I] - John Morello, Twistlock

2 minute read

Abstract

Introducing SPIFFE: An Open Standard for Identity in Cloud Native Environments [I] - Evan Gilman, Scytale

1 minute read

Abstract

IAM on Hybrid Cloud: Next Generation Security Model to Create an Interoperable Cloud [I] - Jeyappragash JJ & Kamil Pawlowski, padme.io

1 minute read

Abstract

How Netflix Is Solving Authorization Across Their Cloud [I] - Manish Mehta & Torin Sandall, Netflix

1 minute read

Abstract

Building a Secure, Multi-Protocol and Multi-Tenant Cluster for Internet-Facing Services [A] - Bich Le, Platform9

1 minute read

Abstract

Back to Top ↑

KubeCon + CloudNativeCon | Open Source Summit China 2019

Secure Container with SGX: Protecting Secret in Cloud Environment - Isaku Yamahata, Intel & Xiaoning Li, Alibaba

less than 1 minute read

Abstract

Upgrade Images by Digging Out and Automatically Fixing the Vulnerabilities - Lin Ru, DaoCloud & Yan Wang, VMware

less than 1 minute read

Abstract

Protecting Sensitive Code with Encrypted Container Images on Kubernetes - Brandon Lum & Harshal Patil, IBM

less than 1 minute read

Abstract

How SPIFFE Helps Istio in Service Mesh Federation - Yonggang Liu & Wencheng Lu, Google

less than 1 minute read

Abstract

Gatekeeper: Flexible, Shareable Policy for Kubernetes - Craig Peters, Mircosoft

less than 1 minute read

Abstract

Back to Top ↑

CloudNativeCon + KubeCon 2016

Technical View: Comparison of Container Orchestration and Management Systems - Lei Zhang, HyperHQ

less than 1 minute read

Abstract

Sentinel: A Platform for Fine-grained Application Security - Sudheendra Murthy, eBay, Inc.

1 minute read

Abstract

Plumbing the Cloud for Containers - Michael Friis, Docker

less than 1 minute read

Abstract

A Security State of Mind: Compliance and Vulnerability Audits for Containers - Chris Van Tuin, Red Hat

less than 1 minute read

Abstract

Back to Top ↑

2021年中国 KubeCon + CloudNativeCon + Open Source Summit - 线上峰会

Redteam 观点：K8s 集群管理员的安全实践

Redteam Views: Security Practice of K8s Cluster Administrator - Zebin Zhou, Tencent

less than 1 minute read

Abstract

代理开放政策深潜

Open Policy Agent Deep Dive - Anders Eknert, Styra

less than 1 minute read

Abstract

Back to Top ↑