Security in Cloud-Native
summary
Cloud-native security focuses on three concrete practices: repair, repave, rotate — patch fast, rebuild from known-good images, and rotate keys. Examples and tools named include container scanners like Clair, Twistlock, Snyk, Scout2 and automation from Netflix (Aardvark + Repokid). Shows real failures: 10+ billion breached records, Uber credentials in GitHub, public S3 buckets, compromised third‑party JS that ran crypto miners, and how cloud providers mitigate issues by moving workloads.
AI-written summary · about
chapters (25)
- 0:00Intro
- 2:00Why Security
- 6:05Data protection
- 9:55Cloudnative
- 13:29Pivotal
- 17:30Poll Results
- 18:26Trustworthy Infrastructure
- 20:09Data Analysis
- 21:24Meltdown
- 22:28Shared Responsibility
- 23:44Configuration Options
- 25:32Cloud Firewalls
- 26:31Vulnerable Software
- 29:17Passwords
- 30:32Containers
- 31:56Supply chain issues
- 34:41Leaked credentials
- 36:30Functions
- 38:21Environment Variables
- 39:31Cloud Leak
- 43:26Login Secrets
- 44:47Time
- 46:14Tools
- 47:49dependable
- 48:29summary
related talks
17mThe Future of Cloud-Native Security
40mCloud Native Security: A New Paradigm for a New World
05mWhy cloud-native enterprise security matters
41mCloud Native Security For The Rest Of Us
34mCloud Native Security: A New Paradigm for a New World
23mCloud Native Security for the Rest of Us
22mKeynote: Cloud Native Security: Rotate, Repair, Repave
48mSecurity for Cloud Native Applications