In-Toto: Attestations and More for Software Supply Chain Security
35 min

In-Toto: Attestations and More for Software Supply Chain Security

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Aditya Sirish A Yelgundhalli
software-supply-chain-security in-toto attestation sbom slsa kubernetes ci-cd container-security policy-enforcement digital-signatures provenance
Deliver Applications Efficiently with Cloud-Native Platforms
36 min

Deliver Applications Efficiently with Cloud-Native Platforms

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Thomas Schuetz Josh Gavant Jennifer Strejevitch
cloud-native kubernetes developer-platforms platform-engineering application-definition gitops operators observability identity-management data-stores ci-cd
TAG Contributor Strategy: What We Get Out of It (and You Could Too!)
36 min

TAG Contributor Strategy: What We Get Out of It (and You Could Too!)

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Catherine Paganini Dawn Foster Nate Waddington Dave Sudia Josh Berkus
cncf open-source-projects contributor-growth project-governance mentoring community-building developer-advocacy linux-foundation maintainer-resources kubernetes cloud-native vmware ambassador-labs red-hat
The State of Green Software + Cloud Native
37 min

The State of Green Software + Cloud Native

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Leonard Vincent Simon Pahlke Cara Delia
cloud-native cncf kubernetes observability data-centers api cloud-providers open-source
InSPIREing Progress: How We're Growing SPIFFE and SPIRE in 2023 and Beyond
55 min

InSPIREing Progress: How We're Growing SPIFFE and SPIRE in 2023 and Beyond

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Daniel Feldman Andrés Vega
spiffe spire workload-identity zero-trust cncf kubernetes security cloud-native authentication tpm istio
Life of a CVE with Ingress-Nginx; Understanding the Project's Release Cycle
32 min

Life of a CVE with Ingress-Nginx; Understanding the Project's Release Cycle

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
James Strong Dylen Turnbull
cve ingress-nginx release-cycle kubernetes nginx security vulnerability-management software-supply-chain open-source cloud-native
Guardians of the Runtime: Leveraging Behavioral Analysis and Policies
33 min

Guardians of the Runtime: Leveraging Behavioral Analysis and Policies

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Ben Hirschberg
kubernetes security runtime-security behavioral-analysis policy-management ci-cd ebpf linux-kernel system-calls network-policies vulnerability-management container-security
Interactive Playground to Learn Kubernetes and Cloud Native Security
37 min

Interactive Playground to Learn Kubernetes and Cloud Native Security

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Madhu Akula
kubernetes cloud-native-security kubernetes-security container-security vulnerability-assessment attack-vectors security-testing devops-security cyber-kill-chain threat-modeling container-escape
Image Signing and Runtime Verification at Scale: Datadog's Journey
34 min

Image Signing and Runtime Verification at Scale: Datadog's Journey

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Ethan Lowman
container-security image-signing runtime-verification kubernetes datadog supply-chain-security oci containerd grpc public-key-cryptography sigstore ci-cd
Automated Cloud-Native Incident Response with Kubernetes and Service Mesh
37 min

Automated Cloud-Native Incident Response with Kubernetes and Service Mesh

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Matt Turner Francesco Beltramini
kubernetes service-mesh incident-response cloud-native istio automation security gitops ci-cd observability container-security
Back to the Future: Next-Generation Cloud Native Security
30 min

Back to the Future: Next-Generation Cloud Native Security

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Matt Jarvis Andrew Martin
cloud-native-security kubernetes containers webassembly rust ebpf confidential-computing post-quantum-cryptography ai-security supply-chain-security vulnerability-management hardware-security
Security Controls for Safe Chaos Experimentation
37 min

Security Controls for Safe Chaos Experimentation

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Raj Babu Das Umasankar Mukkara
chaos-engineering security kubernetes litmuschaos chaos-experimentation platform-security security-controls resilience-testing observability policy-engine gitops ci-cd