CNCF [Cloud Native Computing Foundation] Courses

Application Security for Better Business Value - Expert Insights

Experts discuss how application security practices in cloud-native environments can reduce risks, enhance compliance, and drive innovation, leading to improved business value.

• YouTube
• 44 minutes
• On-Demand
• Free Video

Network Security at Scale: L3 Through L7 at Splunk

Explore Splunk's multi-cloud network security architecture, from VPCs to Istio, addressing scalability, agility, and security challenges across L3 to L7 layers.

• YouTube
• 31 minutes
• On-Demand
• Free Video

More Than Just a Pretty Penny - Why You Need Cybersecurity in Your Culture

Discover strategies to integrate cybersecurity into workplace culture, empowering employees to identify and address potential risks, fostering a safer digital environment for your organization.

• YouTube
• 29 minutes
• On-Demand
• Free Video

Fighting the Next War - Future Threats to OSS and Software Supply Chain Security

Explore future threats to open-source software and supply chain security, discussing emerging attack vectors and strategies for OSS projects to prepare and protect against evolving risks.

• YouTube
• 17 minutes
• On-Demand
• Free Video

Establishing a Production Zero Trust Architecture

Comprehensive guide to implementing Zero Trust Architecture using CNCF technologies, covering workload identities, security policies, DevSecOps, and organizational culture change.

• YouTube
• 39 minutes
• On-Demand
• Free Video

Cryptographic Agility: Preparing Modern Apps for Quantum Safety and Beyond

Explore cryptographic agility for modern apps, focusing on quantum safety. Learn strategies for seamless transitions between cryptography standards and preparing for future cryptographic migrations.

• YouTube
• 26 minutes
• On-Demand
• Free Video

Identity Based Segmentation for Zero Trust Architecture

Explore Zero Trust Architecture implementation using identity-based segmentation, focusing on cloud-to-premises communication through DMZs with identity-aware proxies and service mesh.

• YouTube
• 38 minutes
• On-Demand
• Free Video

Zero-Trust Tunnel: Exploring Security and Simpler Operations with Istio Ambient Mesh

Exploring Istio Ambient Mesh's sidecar-less architecture for enhanced security and simplified operations in service mesh adoption, featuring zero-trust tunnels and waypoint proxies.

• YouTube
• 37 minutes
• On-Demand
• Free Video

Package Transparency for WebAssembly Registries

Explore WebAssembly package distribution with warg, a new registry protocol offering enhanced supply chain security through Package Transparency, verifiable data structures, and easy detection of operator compromise.

• YouTube
• 34 minutes
• On-Demand
• Free Video

Get Your Security Priorities Straight - Identifying Workloads Under Real Threat with Context

Discover a security prioritization system for Kubernetes workloads based on the MITRE framework, helping differentiate real threats from potential ones in various contexts.

• YouTube
• 27 minutes
• On-Demand
• Free Video

OmniBOR: Bringing the Receipts for Supply Chain Security

Discover OmniBOR, a revolutionary approach to capture artifact dependency graphs in software development, enhancing supply chain security and reducing false positives in vulnerability scanning.

• YouTube
• 31 minutes
• On-Demand
• Free Video

From the Cluster to the Cloud: Lateral Movements in Kubernetes

Explore techniques for lateral movement from Kubernetes containers to cloud resources, covering RBAC misconfigurations, authentication methods, and real-world incidents. Learn prevention and detection strategies.

• YouTube
• 36 minutes
• On-Demand
• Free Video

Beyond Cluster-Admin - Getting Started with Kubernetes Users and Permissions

Learn to implement users and permissions in Kubernetes clusters, covering user provisioning methods, RBAC for fine-grained access control, and strategies for both managed and self-hosted environments.

• YouTube
• 33 minutes
• On-Demand
• Free Video

Demystifying Zero-Trust for Cloud Native Technologies

Explore zero-trust principles for cloud-native environments, covering identity, policy, continuous assessment, and security. Learn implementation guidelines for protecting users, devices, networks, applications, and data.

• YouTube
• 35 minutes
• On-Demand
• Free Video

Cloud Native Security Landscape - Myths, Dragons, and Real Talk

Explore cloud-native security across the software lifecycle, from open-source creation to runtime threat detection. Learn about key projects, developer-security team collaboration, and separating real risks from myths.

• YouTube
• 39 minutes
• On-Demand
• Free Video