title	conference	date
Detecting Compromised CI With eBPF and Cilium Tetragon	KubeCon + CloudNativeCon Japan 2026	2026-07-29
Shows a concrete GitHub Actions workflow that installs Cilium Tetragon via eBPF kernel hook and runs example policies in monitor and enforce mode. Demos detect… Talk on
A Decade of Cilium Around the World	KubeCon + CloudNativeCon Japan 2026	2026-07-29
Cilium hits a decade with ~1,100 contributors and ~25k GitHub stars and claims >60% CNI adoption; feature work includes gateway API TCP/UDP, egress IPv6… Talk on
Security panel: Can your platform survive AI?	PlatformCon 2026 Live Day London	2026-06-23
Models include data files and unsafe serializers like pickle that enable arbitrary code execution, and public registries (Hugging Face) and tools (Mythos) make… Panel on
Breaking News from the Cilium News Network	CiliumCon North America 2025	2025-11-10
Cilium crosses 1,000 contributors as it nears its 10th anniversary, and the eBPF Summit runs as a hackathon with 400+ participants and early submissions on… Talk on
Workshop: Maintaining Project Quality and Growth With AI-G...	CNCF Maintainer Summit North America 2025	2025-11-09
Maintainers discuss concrete policies and tradeoffs: Fedora requires an assisted-by tag and human final signoff; projects try tooling like CodeRabbit reviewer… Talk on
That’s Just My Cup of Tea: Configuring Cilium for Performance and Scale	CiliumCon Europe 2025	2025-04-01
Cilium defaults favor compatibility but can be tuned for big gains: enabling Cilium EndpointSlices (stable since 1.16+) moves agents to watch slices and yields… Talk on
eBPF: Now Turing Complete!	Cilium + eBPF Day North America 2024	2024-11-12
Implements Conway's Game of Life entirely inside the kernel using eBPF by splitting logic across multiple programs and persisting cells in maps for state… Talk on
Zero-overhead Container Networking with eBPF and Netkit	P99 CONF 2024	2024-10-23
Benchmarks show container TCP throughput rises from ~66% to about 90 Gbit of a 100 Gbit link by replacing veth with a new eBPF-driven device type; the kernel… Talk on
Will eBPF Save Us From the Next Global Outage?	SOSS Community Day Europe 2024	2024-09-19
Argues that eBPF lets vendors run safe, high-performance kernel-level security by verifying loaded programs before they execute, reducing risk of kernel… Talk on
Panel Discussion: eBPF: A New Era in Cloud Infrastructure Tools	CloudOpen at Open Source Summit Europe 2024	2024-09-16
Panelists explain what eBPF actually does (run sandboxed programs in the kernel), show real results and tradeoffs, and name tools you can use: 6 million file… Panel on
Coping with Zero Days with Cilium Tetragon	ContainerCon @ Open Source Summit Europe 2024	2024-09-16
Cilium Tetragon uses eBPF to watch kernel events and generate filtered JSON forensic records so teams can find and respond to zero days without redeploying… Talk on
Panel Discussion: eBPF: A New Era in Cloud Infrastructure Tools	Open Source Summit Europe 2024	2024-09-16
eBPF runs sandboxed programs inside the kernel to instrument and change behavior for observability, networking and security; real examples: Cilium/Tetragon… Panel on
Coping with Zero Days with Cilium Tetragon	Open Source Summit Europe 2024	2024-09-16
Cilium Tetragon uses eBPF to detect and forensically trace zero‑day exploitation by matching kernel events to specific vulnerable artifacts, for example hooks… Talk on
Coping with Zero Days with Cilium Tetragon	ContainerDays Conference 2024	2024-09-03
Demo shows Cilium Tetragon using eBPF to detect and forensically log use of liblzma versions 5.6.0 and 5.6.1 tied to the XZ utils backdoor, emitting rich JSON… Talk on
Isovalent: A Case Study in Open Source Startups	Cloud Native StartupFest 2024	2024-03-19
Cisco is acquiring Isovalent while promising to leave Cilium and its eBPF community work intact; Isovalent traces eBPF to 2014 and Cilium to 2016, gains… Talk on
eBPF Superpowers for SRE	SREcon23 Europe/Middle East/Africa	2023-10-10
eBPF lets operators load verified programs into the Linux kernel to observe or change events at syscall and networking hooks; the verifier prevents typical… Talk on
Cloud Native Superpowers with eBPF	KCD Austria 2023	2023-09-26
Prepare to be amazed as Liz Rice takes the stage to deliver her captivating keynote, "Cloud Native Superpowers with eBPF," at the KCD Austria conference. In… Talk on
eBPF for Security	Kubernetes Community Days Zürich 2023	2023-06-15
eBPF instruments the kernel to collect Kubernetes-aware security events (openSnoop/Hubble/Cilium) and compare them to policies; Cilium’s Tetragon uses kernel… Talk on
Tutorial: Getting Started with eBPF	Open Source Summit North America 2023: Open Source On-Ramp	2023-05-10
Hands-on labs teach eBPF fundamentals by compiling C to eBPF bytecode (using BCC and clang), loading programs and inspecting them with bpftool, and exchanging… Talk on
Panel Discussion: Open Source Supply Chain Security - Are Containers..	SupplyChainSecurityCon @ OSS NA 2023	2023-05-10
Claims that containers are the biggest blind spot get grounded in numbers and tools: the panel cites scanned 3 million containers and npm scale of 2.3M… Panel on
Welcome + Opening Remarks	CiliumCon Europe 2023	2023-04-18
Housekeeping and agenda details: join the cilium Slack channel and post Q&A there, use #ciliumcon for social, scan the QR for CNCF code of conduct and… Organiser on
Closing Remarks	CiliumCon Europe 2023	2023-04-18
Conference wraps with concrete updates: sponsors Microsoft Azure and Isovalent are thanked, the project crosses 15,000 stars, and an open project meeting asks… Organiser on
Cloud Native Superpowers with eBPF	KCD Ukraine 2023	2023-03-16
eBPF runs programmable code inside the Linux kernel to trace exec, file-open and packet events and to modify packet paths, letting tools like openSnoop… Talk on
Keynote: Picture this! Solving Security Problems Visually with eBPF	CloudNativeSecurityCon North America 2023	2023-02-01
eBPF instruments the kernel to produce rich events that are turned into graphs and dashboards using Cilium Hubble flows, Prometheus policy verdict metrics, and… Talk on
Keynote: Closing Remarks	CloudNativeSecurityCon North America 2023	2023-02-01
Announcement enforces an event code of conduct and says violations go to registration; organizers explicitly enforce inclusion. Conference thanks sponsors for… Talk on
Keynote: Closing Remarks	CloudNativeSecurityCon North America 2023	2023-02-01
Conference wraps with gratitude for an in person program that grew over two days and a concrete set of next steps: a tech security meet up happens during lunch… Talk
Keynote: Opening Remarks	CloudNativeSecurityCon North America 2023	2023-02-01
Warm welcome and brief recap of day one celebrating attendee connections and sponsor booths while promising another fantastic lineup for day two and a schedule… Talk
Keynote: Hello eBPF! Goodbye Sidecars?	KubeDay Japan 2022	2022-12-07
eBPF loads small programs into the kernel on each node so one instrumented host observes and enforces behavior for every pod without modifying pod YAML or… Talk on
How Many Proxies Do You Need?	ServiceMeshCon North America 2022	2022-10-25
Argues that sidecarless ≠ proxyless and demonstrates a hybrid model: push L3/L4, policy and observability into the kernel with eBPF-native L3/L4, then fall… Talk on
Closing Remarks	Cloud Native eBPF Day North America 2022	2022-10-24
Takeaway: the day highlights a concrete push to make eBPF-driven observability and networking actionable not opaque — citing a srv6 + eBPF packet networking… Organiser on
Welcome + Opening Remarks	Cloud Native eBPF Day North America 2022	2022-10-24
Community kickoff highlights eBPF use for observability and for network debugging without iptables with concrete demos and tooling, plus a late-day panel that… Organiser on
Cilium Updates, News And Roadmap	KubeCon + CloudNativeCon North America 2022	2022-10-24
Cilium reports broad cloud adoption with data plane V2 now default on GKE/Autopilot, available in Anthos and announced for AKS, plus modularization work to let… Talk on
eBPF for Runtime Security	ContainerDays 2022	2022-09-05
eBPF loads small programs into the kernel to observe and act on process, file and network events; observability uses maps and userland readers while security… Talk on
eBPF Superpowers for Go programmers	GopherCon UK 2022	2022-08-16
Explains eBPF as programmable kernel code (attach points like execve kprobe or XDP for NIC offload), shows a C eBPF “hello” attached to execve and a practical… Talk on
Keynote: Cloud Native Superpowers with eBPF	Kubernetes Community Days Chennai 2022	2022-06-03
Claim: extended Berkeley Packet Filter (eBPF) runs safe, verified programs in the kernel to instrument and change behavior without modifying applications. Demo… Talk on
Real Time Security - eBPF for Preventing attacks	Cloud Native SecurityCon Europe 2022	2022-05-16
eBPF already enforces network policy via Cilium uses eBPF to enforce NetworkPolicy and seccomp-bpf limits syscalls, while Falco currently only alerts. The talk… Talk on
Welcome + Why We're Excited About eBPF	Cloud Native eBPF Day Europe 2022	2022-05-16
Morning welcome outlines concrete content: an IKEA case study showing production use, a Rust eBPF toolchain talk with practical examples, an eBPF on Windows… Talk on
A Guided Tour of Cilium Service Mesh	KubeCon + CloudNativeCon Europe 2022	2022-05-16
Cilium extends its eBPF-based CNI into a service mesh that routes L3/L4 in-kernel and calls out to Envoy only for layer 7 visibility, demonstrated by a live… Talk on
Cilium: Welcome, Vision and Updates	KubeCon + CloudNativeCon Europe 2022	2022-05-16
Cilium runs eBPF programs in-kernel to replace iptables/ipvs and provides sidecar-free service mesh and L7 policies, with production adoption: tens of… Talk on
Welcome + Opening: Why Everyone is Excited about eBPF in Cloud Native in 2021	Cloud Native eBPF Day North America 2021	2021-10-11
eBPF is presented as a way to safely run small programs in the kernel to get high‑fidelity visibility and change behavior without modules, enabling single… Talk on
A Beginner's Guide to eBPF Programming for Networking	Cloud Native eBPF Day North America 2021	2021-10-11
Live-coding shows how eBPF programs actually attach and behave: bcc framework compiles C eBPF and attaches a kprobe to tcp_v4_connect for tracing, a socket… Talk on
Cloud Native Superpowers with eBPF	KubeCon + CloudNativeCon North America 2021	2021-10-11
eBPF runs small programs in the kernel and attach to execve or network events, with a verifier that enforces safety so code cannot crash or loop; demos use… Talk on
Keynote Session: Open Source Engineering - What’s in it for my Business?	Open Source Strategy Forum London 2021	2021-10-04
Isovalent is behind the psyllium networking project and the talk catalogs concrete business reasons to invest engineering time in upstream projects: companies… Talk on
An Introduction to eBPF - Superpowers for Networking, Observability & Security	Craft Conference 2021	2021-06-02
eBPF makes the kernel programmable: C code compiles to eBPF bytecode, a Go userland loader attaches a program as a kprobe on execve and prints a trace message… Talk on
Predictions from the Technical Oversight Committee (TOC)	KubeCon + CloudNativeCon Europe 2021	2021-05-04
Predictions from the TOC map to concrete actions: Kubernetes SIGs are renamed SIGs renamed to TAGs to remove confusion, and sandbox counts show real churn — 2… Talk on
A Beginner's Guide to eBPF Programming with Go	GOTOpia February 2021	2021-02-09
Shows practical eBPF workflow: C eBPF programs compiled with clang, user code in Go using libbpfgo, and kernel insertion via the bpf syscall plus… Talk on
Kubernetes-native Security with Starboard	KubeCon + CloudNativeCon North America 2020 Virtual	2020-11-17
Starboard turns multiple security tools into Kubernetes CRDs so you can run scans with kubectl or view results in Octant; a demo runs kube-bench on a four-node… Talk on
Predictions from the Technical Oversight Committee (TOC)	KubeCon + CloudNativeCon North America 2020 Virtual	2020-11-17
CNCF revamps the sandbox process to make early experimentation easier, and predicts some sandbox projects will fail or merge while others consolidate… Talk on
Are you Avoiding --privileged? (Q3)	GOTOpia Europe 2020	2020-09-15
Demo shows --privileged turns on Linux capabilities and mounts all host devices, equivalent to adding every capability so a compromised container can load… Talk on
Are Your Builds Running Separately from Your Production Cluster? (Q1)	GOTOpia Europe 2020	2020-09-15
Claim: never run CI builds on the same Kubernetes production cluster because a compromised Dockerfile can execute arbitrary commands during image builds. Demo… Talk on
Can You Prevent Container Drift? (Q6)	GOTOpia Europe 2020	2020-09-15
Demo shows runtime enforcement stopping added executables: an nginx container has a one‑line shell script injected to simulate drift, an Aqua proprietary drift… Talk on
Is All Executable Code Added to a Container Image at Build Time? (Q2)	GOTOpia Europe 2020	2020-09-15
Claim: all code must land in the image at build time so scanners catch it. Demonstration builds a Docker image, runs a runtime script that installs packages… Talk on
Are You Keeping Hosts Up to Date with the Latest Security Releases? (Q4)	GOTOpia Europe 2020	2020-09-15
kube-bench is used to run CIS Kubernetes checks and the team stops supporting versions outside the three most recent releases, so customers asking why cube… Talk on
Are Your Secrets Encrypted at Rest and in Transit? (Q5)	GOTOpia Europe 2020	2020-09-15
Kubernetes secrets are only base64-encoded by default so base64 is not encryption and anyone with RBAC or host root can decode them. The etcd datastore stores… Talk on
Liz Rice, Aqua Security \| KubeCon + CloudNativeCon Europe 2020 - Virtual	KubeCon + CloudNativeCon Europe 2020	2020-08-17
TOC updates simplify sandbox admission so projects move faster and the form now asks only cloud‑native fit and governance; CNCF lists 30+ sandbox projects. A… Talk on
Keynote: Security and the OODA Loop - Liz Rice, Technology Evangelist, Aqua Security	Kubernetes Forum Sydney 2019	2019-12-12
Applies the OODA loop to Kubernetes with a live demo: a controller reconciles three nginx pods, a tracer (Tracy) shows running executables, a malicious YAML… Talk on
Keynote: Closing Remarks - Liz Rice, Technology Evangelist, Aqua Security	Kubernetes Forum Sydney 2019	2019-12-12
Round of applause for this morning’s keynotes and for sponsors who make the event possible; attendees are directed to the sponsor showcase now and to coffee… Talk
Keynote: Opening Remarks - Liz Rice, Technology Evangelist, Aqua Security	Kubernetes Forum Sydney 2019	2019-12-12
Brief energetic welcome to the conference, checks the room mood and hands the program to the next session, explicitly announcing New Relic will present… Talk
Keynote: Closing Remarks - Liz Rice, Technology Evangelist, Aqua Security	Kubernetes Forum Sydney 2019	2019-12-12
Closing remarks list concrete dates, locations, and logistics for next events: Bengaluru Feb 17–18 and Delhi Feb 20–21 with schedule announced this week… Talk
Closing Remarks	Kubernetes Forum Seoul 2019	2019-12-09
Sponsors receive explicit thanks with Microsoft (platinum sponsor) named and attendees directed to the sponsor showcase for demos. Attendees are told to… Organiser
Keynote: Security and the OODA Loop	Kubernetes Forum Seoul 2019	2019-12-09
Maps the military OODA loop onto Kubernetes reconciliation and shows a tracer that lists executables inside pods, confirming nginx versus a downloaded "bad"… Talk on
Keynote: Opening Remarks	Kubernetes Forum Seoul 2019	2019-12-09
Overview of Helm 3 release and what actually changed: removal of server-side Tiller so charts run with a client-only security model, first-class OCI registry… Talk on
Keynote: Closing Remarks	Kubernetes Forum Seoul 2019	2019-12-09
There are no co-located events tomorrow and the forum announces concrete next dates and places: Bengaluru Feb 17–18 and Delhi Feb 20–21, QCon + CloudNativeCon… Talk
CAP_NET_RAW And ARP Spoofing in Your Cluster: It's Going Downhill From Here	KubeCon + CloudNativeCon North America 2019	2019-11-18
A demonstration shows a compromised pod using CAP_NET_RAW to open raw sockets and perform ARP spoofing on the node’s bridge to hijack CoreDNS lookups… Talk on
Public Technical Oversight Committee (TOC) Meeting	KubeCon + CloudNativeCon North America 2019	2019-11-18
CNCF TOC describes a governance shift: nine-member TOC expands to two more TOC members with elections in February, and SIGs now act as project filters and… Talk on
DIY Pen-Testing for Your Kubernetes Cluster	KubeCon + CloudNativeCon Europe 2019	2019-05-20
kube-hunter is an open source scanner that simulates attacker behavior against Kubernetes clusters, issuing REST calls to default ports (e.g. 8080, 6443… Talk on
Getting Permission or Asking Forgiveness?	Kubernetes Day India 2019	2019-03-23
Kubernetes permissions map to roles and rolebindings tied to resources, not to file-like owners, so access requires traversing roles → bindings → subjects… Talk on
Closing Remarks	Kubernetes Day India 2019	2019-03-23
Event closes with acknowledgments of sponsors and dining sponsors and a final raffle ticket 844479 that wins a trip to KubeCon but must be claimed in person… Organiser
Keynote: Welcome Messages	KubeCon + CloudNativeCon China 2018	2018-11-13
Announces that CNCF funds 49 diversity scholarship recipients with 14 travel-funded attendees, thanking the program and calling for applause, then ushers in a… Talk
Keynote: Kubernetes and Other CNCF Projects Overview	KubeCon + CloudNativeCon China 2018	2018-11-13
Kubernetes is described as mainstream with certified conformance for portability and two axes of extensibility: infrastructure plugins and API extensions… Talk on
Keynote: Closing Remarks	KubeCon + CloudNativeCon China 2018	2018-11-13
Keynotes resume tomorrow at 9:50 while tonight features a sponsor showcase downstairs starting at 8:00, a Tai Chi class on the third floor at 7:30, and a lucky… Talk
Intro: SAFE (A Cloud Native Security Working Group)	KubeCon + CloudNativeCon China 2018	2018-11-13
Working group forms a practical bridge between CNCF projects and operators, already pulling together around 20 organizations and running twice-weekly calls… Talk on
Keynote: Closing Remarks	KubeCon + CloudNativeCon China 2018	2018-11-13
Notes on logistics and highlights: lots of AI on Kubernetes is happening in China and is called out as a theme, and next KubeCon + CloudNativeCon China is June… Talk
Keynote: CNCF Project Update - Liz Rice, Colin Sullivan, Andrew Jessup, Sugu Sougoumarane	KubeCon + CloudNativeCon Europe 2018	2018-05-02
Quick project-by-project status: sandbox projects like Rook, Open Policy Agent and SPIFFE/Spire add identity and storage primitives; incubation projects report… Talk on
Keynote: Closing Remarks	KubeCon + CloudNativeCon Europe 2018	2018-05-02
Thanks and logistics dominate the closing: organizers stress that no sponsors no AC no water, thank AWS the scene CF Google Cloud helm hep tio and VMware for… Talk
Keynote: Running with Scissors	KubeCon + CloudNativeCon Europe 2018	2018-05-02
Demonstrates a live single-node Kubernetes VM running a vanilla Nginx image from Docker Hub, showing that container root maps to host root, that 86% of images… Talk on
Keynote: Closing Remarks - Liz Rice, Technology Evangelist, Aqua Security	KubeCon + CloudNativeCon Europe 2018	2018-05-02
Conference schedule updates and logistics: next regional events list Seattle Dec 11–13, 2018 and Shanghai Nov 14–15, 2018, with 2019 Europe set for Barcelona… Talk on
Kubernetes, Metadata and You [I]	KubeCon + CloudNativeCon North America 2017	2017-12-06
Explains how Kubernetes labels, annotations, ConfigMaps and the Downward API are used alongside image labels/OCI annotations to carry actionable metadata… Talk on
Debuggers from scratch	dotGo 2017	2017-11-06
Builds a working debugger in a few lines of Go that maps Go source lines to machine addresses, uses ptrace and the syscall poke to overwrite the first… Talk on
The Beginner's Guide to Linux Syscalls	Golang UK 2017	2017-08-16
Shows how a Go println funnels down to the Linux write syscall by following code to the libc/syscall layer and reading the AX register which holds the syscall… Talk on
What is a Container? Let’s build one from scratch!	DevOps Pro Moscow 2016	2016-11-15
DevOps Pro Moscow 2016 - Conference for Developers and IT Professionals. November 15, 2016 \| www.devopspro.ru Containers are a hot topic in DevOps! But what… Talk on
What is a container, really? Let's write one in Go from scratch	Golang UK 2016	2016-08-18
Claims a real container is just a process with isolated views of the system and builds one live in ~100 lines of Go. Code runs on Linux, uses clone flags to… Talk on
nothing matches

-- 82 of 82 talks indexed --