Cloud Native Security Day 2019
2019-11-18
San Diego, United States
as the organisers put it
The goal of the day is to bring together the broader Cloud Native security community in a community oriented space to discuss and share current challenges (and solutions) in Cloud Native security.
| title | author | length |
|---|---|---|
| Opening | Michael Ducey | 11m |
Morning opens with logistics: 90-minute sessions, a 30-minute break, lunch outside and snacks, plus a short happy hour before CNCF-hosted lightning talks… | ||
| Protecting Kubernetes Workloads from Attacks | Chris Rosen | 06m |
Shows a working IBM Cloud Kubernetes demo that creates a cluster automated via CLI (or UI) and likely reproducible with Terraform, then deploys a sample app… | ||
| The Path Less Traveled: Abusing Kubernetes Defaults | Duffie Cooley, Ian Coldwater | 28m |
Default kubeadm clusters expose real, actionable attack paths: deploy a pod that mounts hostPath & /var/run/docker.sock to control the host Docker daemon; pull… | ||
| Trusted Software Supply Chain with JTE | Steven Terrana | 29m |
Enterprise pipeline approach that stitches dependency scanning, SCA, SAST, container/image scanning, DAST and continuous compliance into automated CI/CD using… | ||
| Sysdig Sponsored Session | Rosie Jonny | 08m |
Open source Falco performs runtime threat detection for Kubernetes by capturing system calls with an agent using eBPF, ingesting Kubernetes audit events and… | ||
| Continuous Assurance and Continuous Compliance via Data, Graph, Query and Code | Erkang Zheng | 29m |
LifeOmic describes a working system that turns frameworks into JSON, policies into markdown, and cloud signals from AWS GCP Okta GitHub into one graph, queried… | ||
| Slowing Our Role: Moving Towards Policy at Plex | John Reese | 26m |
Plex moves from hundreds of brittle roles to codified checks that allow resource creation and repo changes without human signoff, cutting multi-day waits (one… | ||
| MLGuard -- Detecting Malicious Web Requests using a Serverless-based Machine Learning System | Abhinav Srivastava | 28m |
MLGuard is a serverless pipeline that flags malicious IPs by training an Isolation Forest on per-IP frequency distributions of HTTP response codes derived from… | ||
| How to Choose Which Cloud Native Technologies... | John Morello | 02m |
Describes a practical continuum from bare metal and VMs through LXD, containers, AWS Fargate to serverless and maps isolation, compatibility and control… | ||
| The Devil in the Details: Kubernetes’ First Security Assessment | Jay Beale, Aaron Small | 36m |
Kubernetes undergoes a yearlong third‑party audit that produces 241 pages of reports, an attackers guide, an operator white paper, and a threat model covering… | ||
| Open Spaces Closing Wrap-up | 05m | |
Open Spaces runs as attendees propose topics, vote, then break into 4-5 small groups with a scribe and 25-minute rotations; outcomes are concrete: people… | ||
| nothing matches | ||