CNCF [Cloud Native Computing Foundation] Courses

Leveraging SBOMs to Automate Packaging, Transfer, and Reporting of Dependencies Between Secure Environments

Explore innovative uses of Software Bill of Materials (SBOMs) for secure asset transfer, dependency management, and cloud-native infrastructure deployments using CycloneDX and open-source tools.

• YouTube
• 26 minutes
• On-Demand
• Free Video

Security Threat Modeling Live from Scratch Session

Hands-on workshop demonstrating lightweight threat modeling for CNCF projects, led by Andrew Martin. Learn practical techniques to identify and mitigate security risks in cloud-native environments.

• YouTube
• 42 minutes
• On-Demand
• Free Video

CNI or Service Mesh? Comparing Security Policies Across Cloud Native Networking Solutions

Explore recent changes in cloud native networking solutions, comparing CNI and service mesh implementations for security policies, and understanding trade-offs between different approaches.

• YouTube
• 33 minutes
• On-Demand
• Free Video

Security++ - Hide Your Secrets via Distributed Hardware Security Module

Explore distributed Hardware Security Modules for enhanced cloud security and performance. Learn how this solution balances remote and local HSMs, enabling secure cryptographic operations across cloud, on-premise, and edge environments.

• YouTube
• 27 minutes
• On-Demand
• Free Video

Taming Attestation for Cloud Native Edge Security with Parsec

Explore how Parsec simplifies hardware-backed security and attestation for edge devices, enabling secure communication with cloud services across diverse ecosystems.

• YouTube
• 30 minutes
• On-Demand
• Free Video

Mapping Motives: Analysis of 2,000 Enterprise Cloud Detections - Strengthening Multi-Cloud SOC

Analysis of 2,000 cloud detections reveals enterprise control patterns, gaps, and attacker motives. Learn to strengthen multi-cloud security operations with actionable insights and MITRE ATT&CK framework application.

• YouTube
• 41 minutes
• On-Demand
• Free Video

Securing the Superpowers: Who Loaded That eBPF Program?

Explore eBPF technology's power and security implications. Learn about auditing, monitoring, and enforcing eBPF program loading on Linux systems using Tetragon for enhanced system protection and accountability.

• YouTube
• 36 minutes
• On-Demand
• Free Video

Lessons from 7 Headline-Grabbing Cloud Security Breaches

Analyze 7 real cloud security breaches, exploring attack methods, defense strategies, and specific takeaways to enhance cloud infrastructure protection and avoid similar vulnerabilities.

• YouTube
• 32 minutes
• On-Demand
• Free Video

Good Fences Make Good Neighbors - Making Cross-Namespace References More Secure with ReferenceGrant

Explore secure cross-namespace communication in Kubernetes using ReferenceGrant. Learn how this resource ensures mutual agreement for safer interactions between namespaces in Gateway API.

• YouTube
• 38 minutes
• On-Demand
• Free Video

Modifying the Immutable: Attaching Artifacts to OCI Images

Explore how to attach metadata like attestations, signatures, and SBOMs to OCI images without altering their immutable digest. Learn about standardization, implementation, and potential challenges.

• YouTube
• 36 minutes
• On-Demand
• Free Video

Protecting Kubernetes Clusters When Administrators Quit - Revoking Access and Best Practices

Explore strategies for revoking access to Kubernetes clusters when administrators or users leave, addressing real-world security challenges and best practices for minimal disruption.

• YouTube
• 27 minutes
• On-Demand
• Free Video

Security That Enables - Breaking Down Security Silos in the DevOps Ecosystem

Explore strategies to integrate security seamlessly into DevOps, addressing challenges in CI/CD workflows and learning from real-world breaches to enable confident, secure deployments.

• YouTube
• 21 minutes
• On-Demand
• Free Video

Cloud Native Security Whitepapers Overview

Overview of TAG Security's whitepapers and reference architectures for cloud native security, covering topics like supply chain security, zero knowledge, and security controls mapping.

• YouTube
• 19 minutes
• On-Demand
• Free Video

Container Patching: Making It Less Gross Than the Seattle Gum Wall

Explore strategies for efficient container patching, including prevention, detection, fixing, and monitoring. Learn about opensource tools and best practices to streamline the process and meet security requirements.

• YouTube
• 42 minutes
• On-Demand
• Free Video

Delivering Secure Healthcare Applications with Open Source Software

Explore how open-source software enables secure, standardized Kubernetes-based platforms in regulated healthcare environments, focusing on efficiency, compliance, and cultural change.

• YouTube
• 39 minutes
• On-Demand
• Free Video