~/talks

Ariel Shuper

what they talk about

all 4 in the filters

where they keep going back

no series more than once — all 6 in the filters

on a stage with

all 4 in the filters

who talks about the same things

titleconferencedate
Kubernetes Risk Assessment: Time to Go One Level DeeperSupplyChainSecurityCon at Open Source Summit North America 20222022-06-21
Argues that the CIS Benchmark is a solid, automatable baseline but insufficient alone, and that the MITRE ATT&CK for Containers adds more than 40 validated…
Talk on
Secure Containers Deployments: Time for RefreshContainerCon @ Open Source Summit North America 20222022-06-21
PSP is deprecated and replaced by three Pod Security Standards (privileged, baseline, restricted), enforced via admission controllers; use the restricted…
Talk on
Deep Dive: Serverless Security (STAG Presentation)Cloud Native SecurityCon Europe 20222022-05-16
Updated CNCF STAG whitepaper documents concrete risks and defenses: examples include bypass API Gateway HTTP endpoints that sidestep built‑in auth, excessive…
Talk on
Lightning Talk: Knowing Your Serverless Functions: Signing and Verifying Serverless...Cloud Native SecurityCon Europe 20222022-05-16
Cosign and Sigstore integrate into CI/CD to sign serverless code and deployment artifacts, signatures and certs get stored in AWS KMS or secret storage, and a…
Lightning on
Lightning Talk: Kubernetes Risk Assessment: Time to go one level deeperCloud Native Security Day Europe 20212021-05-04
Common CIS benchmarks cover 100+ CIS checks on control plane and 30+ worker checks for configuration but leave gaps: vulnerable images, crafted containers and…
Lightning on
A Tale of a Meshi Kafka: Securing Kafka Deployment When Istio Is UsedCloud Native Security Day North America 20202020-11-17
Explains that running Kafka on Kubernetes with Istio needs two fixes to be practical: sidecar as first-class so Envoy is ready before brokers and Zookeeper…
Talk on
Knative - The Security Platypus?KubeCon + CloudNativeCon North America 20192019-11-18
Knative extends Kubernetes to run event-driven containers but inherits a different threat model than Lambda: a live demo uses the OWASP serverless vuln on AWS…
Talk on
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.