Cloud Native Security Day Europe 2021
2021-05-04
-- online --
[Cloud Native Security Day Europe 2020, Cloud Native Security Day Europe 2021]
as the organisers put it
An event designed to bring together the Cloud Native security community in a community oriented space to discuss and share current challenges and solutions in Cloud Native Security
| title | author | length |
|---|---|---|
| Welcome + Opening | Andres Vega, Itay Shakury | 04m |
Opening frames Cloud Native Security Day as a co-located KubeCon event that complements Kubernetes-focused sessions with practical, community-driven work on… | ||
| Keynote: Modern Least Privilege with DevSecOps | James Watters | 17m |
Describes a platform-first security model built on Kubernetes that cuts patching from six months to about three days at one bank by automated rolling updates… | ||
| Keynote: Securing Open Source | David A. Wheeler | 11m |
Shows evidence that open source supply chains are actively exploited: SolarWinds Orion subversion, npm’s event-stream compromise and a survey of 174 attacks… | ||
| Lightning Talk: Capture The Flag Overview | Andrew Martin, Lewis Denham Parry | 10m |
Six deliberately misconfigured cubesim clusters are handed out by taskmasters via CNCF Slack as a tar of credentials, and players SSH into containers, then… | ||
| Lightning Talk: Computing Confidentially in the Clouds | Aeva Black | 11m |
Confidential computing aims to protect data in use by running code inside trusted execution environments; the Confidential Computing Consortium defines TEEs… | ||
| Lightning Talk: It’s pronounced ‘DevOps.’ The ‘Sec’ is silent. | Dormain Drewitz | 05m |
Argues that the number of reported CVEs rises 3–4x over the last decade, so manual end‑of‑pipeline fixes don’t scale and automation is essential. Uses… | ||
| Secure Code Development and Lessons Learned from etcd Security Audit | Sahdev P. Zala, Hitoshi Mitake | 29m |
A CNCF‑sponsored Trail of Bits audit of etcd (Go) finds multiple real bugs, not just design warnings: static analyzers (go vet, staticcheck) plus fuzzing and… | ||
| Securing the Software Supply Chain with the in-toto & SPIRE projects | Cole Kennedy, Mikhail Swift | 20m |
Shows an implemented pipeline that combines in-toto and SPIRE to move from signature-only trust to evidence-based trust: SPIRE issues workload X.509 identities… | ||
| Top 5 Concerns Every InfoSec Team Has And How To Overcome Them With eBPF | Natalia Reka Ivanko | 11m |
Don’t miss out! Join us at our upcoming event: KubeCon + CloudNativeCon North America 2021 in Los Angeles, CA from October 12-15. Learn more at… | ||
| Making Dynamic Admission Control Even More Dynamic Using... | Flavio Castelli, Rafael Fernández López | 20m |
Don’t miss out! Join us at our upcoming event: KubeCon + CloudNativeCon North America 2021 in Los Angeles, CA from October 12-15. Learn more at… | ||
| Keynote: Supply Chain: The New Threat Vector in Cloud Native Security | Ali Golshan | 09m |
Cloud native attack surface shifts from runtime exploits to tampering with dependencies and developer tooling, exemplified by SolarWinds and rising typo… | ||
| Lightning Talk: Namespaces-as-a-Service with HNC & Kyverno! | Jim Bugwadia, Adrian Ludwin | 09m |
Claim: HNC plus Kyverno deliver namespaces-as-a-service by automating creation, policy propagation and default configuration. HNC anchors create subnamespaces… | ||
| Lightning Talk: Securing CI/CD Infrastructure for Tinkerbell | David McKay | 10m |
Tinkerbell’s CI/CD runners for bare‑metal provisioning are fully automated and secured using Pulumi Cloud for stack and secret storage, SaltStack pillars to… | ||
| Lightning Talk: Challenges in Cloud Native Forensics | Andrew J Krug | 10m |
Cloud native forensics struggles because evidence vanishes fast, systems run at large scale, and platform security actively hinders analysis: serverless ~4… | ||
| Beyond signatures: Using TUF and Notary to Secure Software Distribution | Marina Moore | 18m |
Adapts The Update Framework into a registry-focused implementation and a Notary v2 adaptation that aims to survive server and some key compromises; implements… | ||
| Security Nutrition Labels for Cloud Native Projects | John Kinsella | 20m |
Proposal that standardizes a security nutrition label for cloud native projects, published as YAML and intended for CNCF SIG-Security. Labels list concrete… | ||
| Integrating Security in the Build Pipeline | Anirban Saha | 22m |
Cloud native CI/CD pipeline wired to block vulnerable images: source on GitHub, build with Tekton, deploy with Argo CD, store and scan images in Harbor using… | ||
| Keynote: CloudNativeDevSecOps | Hillel Solow | 10m |
Developers must own application security end-to-end, not hand it off to a separate team, because cloud-native shifts control of VPCs, IAM, networking and… | ||
| Lightning Talk: Kubernetes Risk Assessment: Time to go one level deeper | Ariel Shuper | 10m |
Common CIS benchmarks cover 100+ CIS checks on control plane and 30+ worker checks for configuration but leave gaps: vulnerable images, crafted containers and… | ||
| A First Look at the Security of Serverless Applications | Eduard Marin | 18m |
Serverless platforms increase attack surface by mixing short-lived functions with shared, opaque infrastructure and practical tradeoffs that favor performance… | ||
| Lightning Talk: Weaviate Vector Search Engine - Enhancing Cybersecurity | Bob van Luijt | 11m |
Weaviate is a vector search engine that stores ML vector embeddings and a graph schema and demonstrates semantic threat analysis on the MITRE ATT&CK dataset… | ||
| Capture The Flag Summary + Wrap UpVirtual | Andrew Martin, Lewis Denham Parry | 23m |
CTF recap walks through three live exploits: a secret buried inside a deployed image pulled from a private registry is extracted by spawning one‑shot pods… | ||
| nothing matches | ||