Zero Trust at Shopify Scale: Automating MTLS Across Thousands of Services - Dani Santos & Michelle Mali, Shopify
Abstract
Conferences
- CloudNativeCon + KubeCon 2016 (4)
- KubeCon + CloudNativeCon North America 2017 (6)
- KubeCon + CloudNativeCon Europe 2018 (18)
- KubeCon + CloudNativeCon China 2018 (10)
- KubeCon + CloudNativeCon North America 2018 (14)
- KubeCon + CloudNativeCon Europe 2019 (17)
- KubeCon + CloudNativeCon | Open Source Summit China 2019 (5)
- Cloud Native Security Day 2019 (8)
- KubeCon + CloudNativeCon North America 2019 (16)
- Cloud Native Security Day North America 2020 (13)
- KubeCon + CloudNativeCon North America 2020 Virtual (11)
- Cloud Native Security Day 2021 (8)
- Cloud Native Security Conference North America 2021 (10)
- KubeCon + CloudNative North America 2021 (14)
- 2021年中国 KubeCon + CloudNativeCon + Open Source Summit - 线上峰会 (2)
- Cloud Native SecurityCon Europe 2022 (18)
- KubeCon + CloudNativeCon Europe 2022 (18)
- Cloud Native SecurityCon North America 2022 (22)
- KubeCon + CloudNative North America 2022 (22)
- CloudNativeSecurityCon North America 2023 (64)
- KubeCon + CloudNativeCon Europe 2023 (35)
- KubeCon + CloudNative North America 2023 (23)
- KubeCon + CloudNativeCon Europe 2024 (27)
- KubeCon + CloudNativeCon North America 2024 (22)
- KubeCon + CloudNativeCon Europe 2025 (19)
Posts by Year
2025
2024
SPIFFE Deployments in Non-Kubernetes Environments - Nadin El-Yabroudi & Eli Nesterov, SPIRL
Abstract
From Standards to Practice: The Journey to Container Maturity - Carmen Chow & Thomas Robinson, Yelp
Abstract
You Shall Not Pass! Unless You Are GUAC Verified…. - Parth Patel, Kusari & Dejan Bosanac, Red Hat
Abstract
Living off the Land Techniques in Managed Kubernetes Clusters - Ronen Shustin & Shay Berkovich, Wiz
Abstract
Kubernetes Security Blind Spot: Misconfigured System Pods - Shaul Ben Hai, Palo Alto Networks
Abstract
Kubernetes MLSec: Securing AI in Space - Francesco Beltramini & James Callaghan, ControlPlane
Abstract
Keeping Kubernetes Safe: The Lowdown on Locked Namespaces - Marco De Benedictis, ControlPlane
Abstract
2023
RBACdoors: How Cryptominers Are Exploiting RBAC Misconfigs - Greg Castle & Vinayak Goyal, Google
Abstract
OIDC and Workload Identity in Kubernetes - Ashutosh Kumar, Elastic & Anish Ramasekar, Microsoft
Abstract
Identity-Based Segmentation: An Emerging Standard for Zero Trust from NIST - Zack Butcher, Tetrate
Abstract
Forget Everything You Know About Image Vulnerability and Prioritization - Ben Hirschberg, ARMO
Abstract
Challenge to Implementing “Scalable” Authorization with Keycloak - Yoshiyuki Tabata, Hitachi, Ltd.
Abstract
A Look Under the Hood of CNCF Security Audits - Adam Korczynski & David Korczynski, Ada Logics
Abstract
🦝 The Top 10 List of Istio Security Risks and Mitigation Strategies - José Carlos Chávez, Tetrate
Abstract
Rotate Roots Right Round: Using Cert-Manager for Safer Private PKI - Ashley Davis, Jetstack
Abstract
Kubernetes Defensive Monitoring with Prometheus - David de Torres Huerta & Mirco De Zorzi, Sysdig
Abstract
Cluster Grey Zone: Risks in Managed Cluster Middleware - Shay Berkovich & Barak Sharoni, Wiz
Abstract
🦝 Guardians of the Runtime: Leveraging Behavioral Analysis and Policies - Ben Hirschberg, ARMO
Abstract
Self Healing GitOps: Continuous, Secure GitOps Using Argo CD, Helm and OPA - Upkar Lidder , Tenable
Abstract
Security That Enables: Breaking Down Security Silos in the DevOps Ecosystem - Saurabh Wadhwa, Uptycs
Abstract
Do This, Not That – Lessons from 7 Headline Grabbing Security Breaches - Maya Levine, Sysdig
Abstract
🦝 A Sneak Peak Into Security Reviews with the Community - Ragashree MC, Carnegie Mellon University
Abstract
So You Want to Run Your Own Sigstore: Recommendations for a Secure Setup - Hayden Blauzvern, Google
Abstract
How Do You Trust Your Open Source Software? - Naveen Srinivasan, Endor Labs & Brian Russell, Google
Abstract
Cryptographic Agility: Preparing Modern Apps for Quantum Safety and Beyond - Natalie Fisher, VMware
Abstract
2022
Securing Edge Workloads With Cert-Manager And SPIFFE - Sitaram IYER & Riaz Mohamed, Jetstack Ltd
Abstract
Kubernetes to Cloud Attack Vectors: Demos Inside - Danny Hershko Shemesh & Alon Schindel, Wiz
Abstract
Beyond Proof of Concept: Keys to a Successful SPIRE Rollout in Production - Eli Nesterov, N/A
Abstract
Securing Kubernetes Applications by Crafting Custom Seccomp Profiles - Sascha Grunert, Red Hat
Abstract
Bypassing Falco: How to Compromise a Cluster without Tripping the SOC - Shay Berkovich, BlackBerry
Abstract
Shrinking Software Attack Surface with WebAssembly & CNCF Wasmcloud - Liam Randall, Cosmonic
Abstract
2021
| Redteam 观点：K8s 集群管理员的安全实践 | Redteam Views: Security Practice of K8s Cluster Administrator - Zebin Zhou, Tencent |
Abstract
We Built the Kubernetes SBOM and Now You Can Write Your Own! - Adolfo García Veytia, uServers
Abstract
The Hitchhiker’s Guide to Kubernetes Vulnerabilities - Robert Clark & Micah Hausler, Amazon
Abstract
Bridging the Great Divide: SPIFFE/SPIRE for Cross-Cluster Authentication - Andrew Harding, VMware
Abstract
2020
PKI the Wrong Way: Simple TLS Mistakes and Surprising Consequences - Tabitha Sable, Datadog
Abstract
Why OpenID Connect is More Secure then Certificates - Marc Boorshtein, Tremolo Security, Inc.
Abstract
Event Closing Talk
Abstract
Enabling Autonomous Teams With Policy Enforcement at Yubico - James Alseth & John Reese, Yubico
Abstract
2019
Prepare to Be Boarded! A Tale of Kubernetes, Plunder, and Cryptobooty - James Condon, Lacework
Abstract
Binary Authorization in Kubernetes - Aysylu Greenberg, Google & Liron Levin, Palo Alto Networks
Abstract
Walls Within Walls: What if Your Attacker Knows Parkour? - Tim Allclair & Greg Castle, Google
Abstract
Enforcing Automatic mTLS with Linkerd and OPA Gatekeeper - Ivan Sim, Buoyant & Rita Zhang, Microsoft
Abstract
The Path Less Traveled: Abusing Kubernetes Defaults - Duffie Cooley, VMware & Ian Coldwater, Heroku
Abstract
Securing Multi-Cloud Cross-Cluster Communication with SPIFFE and SPIRE - Evan Gilman, Scytale, Inc.
Abstract
Using eBPF to Bring Kubernetes-Aware Security to the Linux Kernel - Dan Wendlandt, Isovalent
Abstract
2018
How Symlinks Pwned Kubernetes (And How We Fixed It) - Michelle Au, Google & Jan Šafránek, Red Hat
Abstract
Hardening Kubernetes Setups: War Stories from the Trenches of Production - Puja Abbassi, Giant Swarm
Abstract
Nabla Containers: A New Approach to Container Isolation - Brandon Lum & Ricardo Koller, IBM
Abstract
2017
The Power of Application Intent Analysis for Container Security [I] - John Morello, Twistlock
Abstract