Cloud Native Security 101 - Introduction, Workflows and Best practices
summary
Overview of concrete controls and tradeoffs for securing Kubernetes and container pipelines: explains CWPP/CSPM/KSPM/CDR/CNAP differences, shows Falco/Cystic lineage, and demonstrates container in-use vuln prioritization that filters 2,000 image packages to ~200 used packages and surfaces only ~15% of reported CVEs for remediation. Gives a real example where switching to a slim base cuts critical vulns from 153 to 1, describes image signing with public/private keys, admission-controller gating, Jenkins/CICD and registry scans, and an optional slim agent to limit resource use.
AI-written summary · about
chapters (22)
- 0:00Cloud Native Security intro
- 1:07Security acronyms
- 3:13Cloud Native app anatomy
- 5:39Workload protection & CWPP
- 7:26Security posture management
- 8:07Infrastructure entitlement mgmt
- 9:10Detection and response
- 10:13CNAPP & unified tools
- 11:15Attack vectors in Cloud Native
- 13:03Kubernetes security risks
- 14:48Registry vulnerabilities
- 16:34Container attack vectors
- 18:02Cloud Native Application Lifecycle
- 19:50Shift left for security
- 21:15Runtime vulnerability prioritization
- 24:45Image signing & admission
- 26:32Minimal base image best practices
- 27:57Layer analysis for security
- 28:40Compliance in CI/CD
- 30:06Security personas
- 31:52DevSecOps workflow & scanning
- 35:26Key takeaways & Q&A
related talks
34mCloud Native Security 101: Building Blocks, Patterns and Best Practices
35mCloud Native Security for the Rest of Us
40mCloud Native Security: A New Paradigm for a New World
56mNavigating the Cloud Native Security Landscape
34mCloud Native Security: A New Paradigm for a New World
40mCloud Security Novice to Native in 10 Steps: A CNAPP Approach
41mCloud Native Security For The Rest Of Us
23mCloud Native Security for the Rest of Us