Cloud Native
Security Talks
RSS

CloudNativeSecurityCon North America 2022

Panel Discussion: Say Hi to the New Couple in the Town – DockerSlim and Kyverno – Making Your Kubernetes Workloads More Secure!

Mritunjay Sharma, Slim.AI; Shuting Zhao , Nirmata; Ruhika Bulani, D.Y. Patil College of Engineering, Aku

Abstract

Want to minify your container image? Or let’s go ahead; ever thought of automating the creation of your container’s AppArmor and SecComp profiles? Okay, wait, let us surprise you even more; what if you get all the above and a way to administer their control in the K8s cluster! Yes, you heard it right, Unveiling to you the intersection of Kyverno and DockerSlim! This panel by Shuting, Ruhika, and Mritunjay will demonstrate how these two projects are making the lifecycle of the software supply chain more secure. Kyverno’s policies leveraged with DockerSlim’s combo of minified image and the auto-generated Seccomp profile will make your cluster security management just another YAML chore without you being a Linux syscalls expert!

More from CloudNativeSecurityCon North America 2022

Open in the index →
  1. Why Machines Deserve Rights: Rethinking Automated Infrastructure Access with OSS Teleport Machine IDKenneth DuMez, Teleport 2022-10-24
  2. Verifiable eBPF Traces for Supply Chain Artifacts with Witness and TetragonCole Kennedy, TestifySec 2022-10-24
  3. Uncovering the History of Your Software ArtifactsMikhail Swift, TestifySec 2022-10-24
  4. Securing Access to Kubernetes Infrastructure with Kubernetes Zero Trust PrinciplesMohan Atreya, Rafay Systems 2022-10-24
  5. Panel Discussion: Securing the Golden Path: Adding Guardrails for Developers Without Getting in Their Way!Aradhna Chetal, TIAA; Elizabeth Vasquez Alban, Barclays; Kapil Bareja, Saviyant; Jim Bugwadia, Nirmata & Anil Karmel, RegScale 2022-10-24
  6. How’s Your Supply Chain with Your Insecure OSS Ingestion?James Holland, Citi 2022-10-24
  7. Day in the Life of a Base Image: The Evolution of Vulnerabilities in the Most Popular ContainersAyse Kaya, Slim.AI 2022-10-24
  8. Conan.Io – Lessons Learned from Securing 40,000 C++ PackagesDiego Rodriguez-Losada Gonzalez, JFrog 2022-10-24
  9. Cloud Native Security for the Rest of UsTiffany Jernigan, VMware 2022-10-24
  10. Building Images for the Secure Supply ChainAdrian Mouat, Chainguard 2022-10-24
  11. The Eye of Falco: You Can Escape but Not HideStefano Chierici & Lorenzo Susini, Sysdig 2022-10-25
  12. Source Attestations with GitsignBilly Lynch, Chainguard 2022-10-25
  13. See It to Believe It: Bringing Observability to Otherwise Opaque Container BuildsParth Patel, Kusari & Shripad Nadgowda, Intel 2022-10-25
  14. Secure CI/CD Using JSON Web Token (JWT)Dov Hershkovitch, GitLab 2022-10-25
  15. Pwning the CI (with GitHub Action Workflows)Stephen Giguere, Bridgecrew 2022-10-25
  16. Policy-Based Governance for End-to-End Integrity Control of PoliciesYuji Watanabe, IBM Research & Jayashree Ramanathan, Red Hat 2022-10-25
  17. Know Your Dependencies: A Guide to Automating Dependency AssuranceSteve Judd, Jetstack 2022-10-25
  18. Introducing the OWASP Top Ten for KubernetesJimmy Mesta, KSOC Labs, Inc. 2022-10-25
  19. Getting More Confident with Your Security Helper Libraries Thanks to Go FuzzingJeremy Matos, Grafana Labs 2022-10-25
  20. Fileless Attack - Detecting the UndetectableCarolina Valencia, Aqua Security 2022-10-25
  21. Beyond Proof of Concept: Keys to a Successful SPIRE Rollout in ProductionEli Nesterov, N/A 2022-10-25