CNCF SIG-Security Deep Dive
Talkat KubeCon + CloudNativeCon North America 2019 · on Wednesday, 2019-11-20· at 17:20· Pacific Ballroom, Salon 25-26 - Marriott Marquis San Diego Marina Hotel·
summary
SIG-Security outlines an active policy stack: a partly implemented formal verification engine that encodes a policy spec, checks execution correctness and flags conflicting rules (tested on some financial use cases); a SPIFFE identity approach to carry workload identity across layers; a Falco policy interface (runtime events/attributes standard) proposal to let tools interoperate; and Cloud Custodian compliance checker plus in-toto provenance and Notary for supply-chain assurance. A policy white paper and ongoing security assessment stream coordinate gaps and practical integrations.
AI-written summary · about
chapters (17)
- 0:00Intro
- 1:50Motivation
- 3:12Formal Verification
- 6:31Work Location
- 6:49Policy Whitepaper
- 7:39Sample Projects
- 8:37Overlay Engine
- 9:24Cloud Custodian
- 9:54Policy Interface
- 11:56Join the Conversation
- 12:08Policy Evaluation
- 12:53Participation
- 17:35Policy
- 21:02Bottom Up Approach
- 22:37Validation
- 23:46Security Whitepaper
- 27:01Security Assessment Team
related talks
40mDeep Dive: CNCF Security SIG – Justin Cappos, New York University & Zhipeng Huang, Huawei
22mIntro: CNCF Security SIG
22mIntro: CNCF Security SIG
34mIntro: CNCF Security SIG – Sarah Allen & Jeyappragash Jeyakeerthi
26mAn Introduction to Cloud Native Security
15mA Special Interest in Cloud Native Security
28mIntro: SAFE (A Cloud Native Security Working Group)
33mEvent Wrap Up