Cloud Native Security Day Europe 2020
2020-08-17
-- online --
[Cloud Native Security Day Europe 2020, Cloud Native Security Day Europe 2021]
as the organisers put it
VIEW THE VIRTUAL SCHEDULE That’s a wrap on Cloud Native Security Day at KubeCon + CloudNativeCon EU 2020! We welcomed over 4100 attendees, from 109 countries – thank you to all the attendees…
| title | author | length |
|---|---|---|
| Image Provenance and Security in Kubernetes | Adrian Mouat | 31m |
Kubernetes clusters often lack provable provenance: 4,000 apps were tainted by XcodeGhost, S3-hosted Twilio SDK was replaced, and SKS keyservers are… | ||
| How Secure Is Your Build/Server? | Patrick Debois | 30m |
Starts from laptop trust (OS, CA roots, OpenSSL ciphers) and walks the build chain through npm/docker installs, checksum verification, postinstall scripts and… | ||
| Defenders Think in Lists. Attackers Think in Graphs. | Reuven Harrison | 05m |
Claim: defenders rely on long checklists of findings while attackers follow exploitable paths through infrastructure, so remediation misses context. Example… | ||
| Cloud native or cloud agnostic? The questions you need to ask | Sriram Rajan | 05m |
Argues you don’t have to be fully agnostic to get cloud native benefits and gives five concrete questions: where to draw the layer boundary from hardware to… | ||
| Closing Remarks | Brandon Lum | 08m |
Find repos and issues at github.com/cncf/security and join the Slack channel for action items. Ongoing security assessments run about three weeks with four to… | ||
| Collection is not Detection - Sec Ops in a Cloud Native Environment | Sarah Young | 31m |
Claim: collection is not detection — collecting all logs without detections or hunts wastes effort. Recommend collecting across the whole stack (orchestrator… | ||
| Kubernetes Attack and Defense: Inception-Style | Jay Beale | 32m |
Demo shows a compromise starting from a typo-squatted Python package that adds a reverse-interpreter to container images, which phones home via a Metasploit… | ||
| New Paradigms for the Next Era of Security | Sounil Yu | 28m |
Argues that ransomware and irreversible attacks force a shift from CIA to a DIE model where impact—not likelihood—is the focus, and proposes distributed… | ||
| Opening Remarks | Emily Fox | 05m |
Welcome and logistics for a virtual Cloud Native Security Day plus a short manifesto of SIG Security: a community that grows to over 50 members, runs weekly… | ||
| PARSEC: A New Platform Abstraction for Security | Hugues de Valon, Ionut Mihalcea | 24m |
PARSEC is an open source platform abstraction (donated to the CNCF) that exposes the PSA crypto API as a microservice: a Rust service speaking protobuf over a… | ||
| Pod Security as an Afterthought | Alban Crequy | 30m |
Three open source tools automate pod-hardening by observing live behavior and emitting policies: kube-psp-advisor parses manifests and cluster API to generate… | ||
| nothing matches | ||