Andrew Martin
where else to find them
what they talk about
all 12 in the filters
where they keep going back
- KubeCon + CloudNativeCon Europe4 editions2018–2025
- CloudNativeSecurityCon North America2 editions2023–2024
- KubeCon + CloudNativeCon North America2 editions2021–2022
all 25 in the filters
on a stage with
all 28 in the filters
who talks about the same things
- Rory McCune18 talks
- Matt Jarvis15 talks
- Lewis Denham Parry18 talks
- Ian Coldwater19 talks
- Shane Lawrence13 talks
- Jimmy Mesta7 talks
| title | conference | date |
|---|---|---|
| From Policy to Production: Flux and GitOps as Governance Control... | FluxCon NA 2025 | 2025-11-10 |
Claims that Flux becomes a governance control tower for regulated environments backed by eight years of operational experience, used with major banks and RBC… | ||
| Panel Discussion: Prepare for the CRA: Open Source Governance in the Age of Cyber Resilience | Open Source Summit Europe 2025 | 2025-08-25 |
CRA deadline 2027 and most organisations remain unready; the Act treats companies that ship software as manufacturers and keeps maintainers largely out of… | ||
| Declarative by Default, Secure by Design: GitOps as a Control Plane for Governance | GitOpsCon Europe 2025 | 2025-05-28 |
GitOps becomes a universal control plane: git as single source of truth, Flux and Argo CD continuously reconcile cluster state, and a recently released MCP… | ||
| Mind the Gap: Bridging Supply Chain Policy With Git-less GitOps and GUAC | KubeCon + CloudNativeCon Europe 2025 | 2025-04-01 |
Live demo shows an exploited dependency introduced, an SPDX SBOM generated with Trivy and uploaded into OpenSSF GUAC which indexes dependencies so a single… | ||
| Hacking Kubernetes | KCD Rio de Janeiro 2025 | 2025-03-22 |
Covers concrete attack chains: a malicious npm package using npm preinstall hooks to exfiltrate SSH and kubeconfig, automated CI/CD deployments that create a… | ||
| Keynote: Defending AI on Kubernetes: Red Team Playbook | KubeDay Colombia 2024 | 2024-10-09 |
Claims that large models are easy to backdoor with embedded Python or trigger strings and that training costs range from about $900 for early transformers to… | ||
| Is the Internet on Fire? Strategies for Mitigating Open Source... | CloudNativeSecurityCon North America 2024 | 2024-06-26 |
Open source packages repeatedly carry real-world implants and zero days (Log4Shell, Sunburst, typo‑squatting) that bypass CI and SCA; defenders build an asset… | ||
| Level up Your Security Career with the TAG Security Community | CloudNativeSecurityCon North America 2024 | 2024-06-26 |
TAG Security performs hands‑on security assessments for CNCF projects (Flux, Kubeflow, Flatcar), producing joint assessment reports, threat models and… | ||
| The Road to Zero CVEs: People and Technology | SupplyChainSecurityCon @ Open Source Summit Japan 2023 | 2023-12-05 |
Claims that "zero CVEs" is a destination are false; it’s a continuous journey that combines people, process, and tooling. Practical steps shown include signing… | ||
| Smarter Than Your Average SBOM! | ContainerCon @ OSS EU 2023 | 2023-09-19 |
SBOMs are useful point-in-time snapshots but only if created at build time, cryptographically signed, and validated on consumption; examples use CycloneDX as… | ||
| Smarter Than Your Average SBOM! | Open Source Summit Europe 2023 | 2023-09-19 |
SBOMs are point-in-time structured manifests (JSON/XML) that are most useful when generated at build time in CI/CD and signed so consumers can revalidate… | ||
| The Irresistible Rise of Cloud Native: What the Future Means for YOU | KCD Israel 2023 | 2023-03-23 |
Timeline traces from KVM and Borg to Docker and Kubernetes and then to WebAssembly in Docker, micro VMs and unikernels; claim is that these reduce attack… | ||
| SBOMs, VEX, and Kubernetes | CloudNativeSecurityCon North America 2023 | 2023-02-01 |
Pick one of the SBOM formats (CycloneDX or SPDX) and generate SBOMs at build time as part of CI; treat signing and provenance as phase two work and add VEX… | ||
| Keynote: Learn by Hacking: How to Run a 2,500 Node Kubernetes CTF | CloudNativeSecurityCon North America 2023 | 2023-02-01 |
Run a Kubernetes CTF pipeline that provisions up to 2,500 nodes per day using an open-source breach simulator and knative scaling-to-zero driven by a pub/sub… | ||
| Security Threat Modeling Live from Scratch Session | CloudNativeSecurityCon North America 2023 | 2023-02-01 |
Presents a lightweight, one-hour session threat-modeling script derived from the Mozilla rapid risk assessment and applied to Flux (a GitOps deployer), using a… | ||
| Avoiding IAC Potholes with Policy + Cloud Controllers | CloudNativeSecurityCon North America 2023 | 2023-02-01 |
Shows a concrete pipeline: Crossplane composite resources provision AWS S3/RDS, Kyverno validating admission controllers block noncompliant CRs, and Lula+OSCAL… | ||
| Closing: "And, That's a wrap!" | Cloud Native SecurityCon North America 2022 | 2022-10-24 |
Closing recap lists concrete outcomes: the CTF runs across 50 clusters, 80 flags, 11 hints, 560 total points with 74 flag submissions and tightly fought… | ||
| Opening Remarks + CTF Overview | Cloud Native SecurityCon North America 2022 | 2022-10-24 |
Over 90% of open source packages have fixes available, so supply chain and OSS security are front and center with concrete remediation paths and volunteer… | ||
| Untrusted Execution: Attacking the Cloud Native Supply Chain | KubeCon + CloudNativeCon North America 2022 | 2022-10-24 |
Argues that supply chain compromise happens at source, CI, build host and runtime and that real defenses are provenance and tamper detection not slogans… | ||
| Staring Into the Abyss With the Security Technical Advisory Group | KubeCon + CloudNativeCon North America 2022 | 2022-10-24 |
Security TAG explains its charter, runs biweekly meetings with work tracked on GitHub, and performs security assessments and joint reviews to help projects… | ||
| VEXing Open Source Security: Vulnerability Data for Everything | SupplyChainSecurityCon at Open Source Summit Europe 2022 | 2022-09-13 |
VEX is a machine-readable Vulnerability Exploitability eXchange that maps specific CVEs to specific package versions and runtime context, includes metadata… | ||
| Hacking the Cloud Native Renaissance: Lowering Risk of Kubernetes Adoption | Open Source in Finance Forum London 2022 | 2022-07-13 |
Nine years of container consulting yields concrete attack stories and mitigations: a dirty pipe container breakout that writes to root memory and spawns a… | ||
| Throw Away Your Passwords: Trusting Workload Identity | CloudOpen @ Open Source Summit North America 2022 | 2022-06-21 |
Argues that workloads should use short‑lived cryptographic identities instead of passwords and shows concrete tooling: Kubernetes projected bound service… | ||
| A Treasure Map of Hacking (and Defending) Kubernetes | KubeCon + CloudNativeCon Europe 2022 | 2022-05-16 |
Shows concrete exploits and mitigations: an npm preinstall backdoor executes as the installer and reads SSH/GPG/cloud tokens; a malicious container image with… | ||
| Kubernetes Supply Chain Security: The Software Factory | KubeCon + CloudNativeCon North America 2021 | 2021-10-11 |
Claims that a Kubernetes Software Factory can greatly reduce supply chain risk while not eliminating it, and that signing is easy, verification is hard. Shows… | ||
| Lightning Talk: Capture The Flag Overview | Cloud Native Security Day Europe 2021 | 2021-05-04 |
Six deliberately misconfigured cubesim clusters are handed out by taskmasters via CNCF Slack as a tar of credentials, and players SSH into containers, then… | ||
| Capture The Flag Summary + Wrap UpVirtual | Cloud Native Security Day Europe 2021 | 2021-05-04 |
CTF recap walks through three live exploits: a secret buried inside a deployed image pulled from a private registry is extracted by spawning one‑shot pods… | ||
| Capture the Flag Wrap Up & Summary | Cloud Native Security Day North America 2020 | 2020-11-17 |
Six hands-on CTF scenarios reproduce real failures: a privileged container mounts host disks and exposes a node secret; a host PID namespace lets /proc reveal… | ||
| Event Wrap Up | Cloud Native Security Day North America 2020 | 2020-11-17 |
Cloud Native Security SIG reports five completed security assessments, each scoped to about security assessments (2–4 weeks) with roughly two weeks of active… | ||
| How to Train your Red Team (for Cloud Native) | Virtual Rejekts 2020 | 2020-04-01 |
Describes a practical method: build threat models, encode exploits as attack trees, map concrete controls to prune branches, then validate by running automated… | ||
| The 'S' in IoT stands for Security | Open Source Summit Europe + Embedded Linux Conference Europe 2019 | 2019-10-28 |
IoT devices ship with default passwords, unpatchable firmwares and exposed services and attackers already exploit cameras, routers and even cars and pacemakers… | ||
| Ignites | DevOpsDays Tampa Bay 2019 | 2019-06-21 |
Nine short talks cover concrete claims and tools: Kubeflow on Kubernetes for experiment tracking, Jupyter notebooks and portable ML pipelines; a Sprint Zero… | ||
| Rootless, Reproducible, and Hermetic: Secure Container Build Showdown | KubeCon + CloudNativeCon Europe 2019 | 2019-05-20 |
Argues that rootless builds are now practical but each tool trades safety for usability, compares BuildKit, img, buildah, Kaniko, Makisu and others, and shows… | ||
| The State of Your Supply Chain | KubeCon + CloudNativeCon China 2018 | 2018-11-13 |
Describes treating containers as immutable artifacts and proving provenance from base image to deployment, showing how to rebuild and redeploy a vulnerable… | ||
| Continuous Kubernetes Security | OWASP AppSec Europe 2018 | 2018-07-02 |
Explains concrete failures and fixes: require mutual TLS across the control plane (use TLS bootstrap so keys are not baked into images), lock down etcd and… | ||
| From Kubelet to Istio: Kubernetes Network Security Demystified | KubeCon + CloudNativeCon Europe 2018 | 2018-05-02 |
Covers how Kubernetes implements TLS and x.509 chains for API server and etcd, demonstrates one-hour certificate rotation for short lived leaf certs, and shows… | ||
| Insecure Containers? Continuous Defense Against Open Source Exploits | CloudNativeCon + KubeCon Europe 2017 | 2017-03-29 |
Walks through concrete exploits—Heartbleed (25–50% of major sites), DROWN (~33% of sites), Shellshock and Dirty COW—and shows which are protocol flaws versus… | ||
| All Things Continuous | ffconf 2016 | 2016-11-10 |
Argues that small teams and one-person shops can run continuous deployment end to end using free or self‑hosted tools, with concrete steps: run tests on every… | ||
| Avoiding release paralysis | NodeConf London 2016 | 2016-05-11 |
Argues that real fixes are concrete: use Docker Compose to run production-like stacks locally, freeze deps with mpm shrink wrap, push through GitLab with its… | ||
| nothing matches | ||