CNCF [Cloud Native Computing Foundation] Courses

Security++ - Hide Your Secrets via Distributed Hardware Security Module

Explore distributed Hardware Security Modules for enhanced cloud security and performance. Learn how this solution balances remote and local HSMs, enabling secure cryptographic operations across cloud, on-premise, and edge environments.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

Taming Attestation for Cloud Native Edge Security with Parsec

Explore how Parsec simplifies hardware-backed security and attestation for edge devices, enabling secure communication with cloud services across diverse ecosystems.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

Mapping Motives: Analysis of 2,000 Enterprise Cloud Detections - Strengthening Multi-Cloud SOC

Analysis of 2,000 cloud detections reveals enterprise control patterns, gaps, and attacker motives. Learn to strengthen multi-cloud security operations with actionable insights and MITRE ATT&CK framework application.

• YouTube
• 41 minutes
• Self-Paced
• Free Video

Securing the Superpowers: Who Loaded That eBPF Program?

Explore eBPF technology's power and security implications. Learn about auditing, monitoring, and enforcing eBPF program loading on Linux systems using Tetragon for enhanced system protection and accountability.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

Lessons from 7 Headline-Grabbing Cloud Security Breaches

Analyze 7 real cloud security breaches, exploring attack methods, defense strategies, and specific takeaways to enhance cloud infrastructure protection and avoid similar vulnerabilities.

• YouTube
• 32 minutes
• Self-Paced
• Free Video

Good Fences Make Good Neighbors - Making Cross-Namespace References More Secure with ReferenceGrant

Explore secure cross-namespace communication in Kubernetes using ReferenceGrant. Learn how this resource ensures mutual agreement for safer interactions between namespaces in Gateway API.

• YouTube
• 38 minutes
• Self-Paced
• Free Video

Modifying the Immutable: Attaching Artifacts to OCI Images

Explore how to attach metadata like attestations, signatures, and SBOMs to OCI images without altering their immutable digest. Learn about standardization, implementation, and potential challenges.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

Protecting Kubernetes Clusters When Administrators Quit - Revoking Access and Best Practices

Explore strategies for revoking access to Kubernetes clusters when administrators or users leave, addressing real-world security challenges and best practices for minimal disruption.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

Security That Enables - Breaking Down Security Silos in the DevOps Ecosystem

Explore strategies to integrate security seamlessly into DevOps, addressing challenges in CI/CD workflows and learning from real-world breaches to enable confident, secure deployments.

• YouTube
• 21 minutes
• Self-Paced
• Free Video

Cloud Native Security Whitepapers Overview

Overview of TAG Security's whitepapers and reference architectures for cloud native security, covering topics like supply chain security, zero knowledge, and security controls mapping.

• YouTube
• 19 minutes
• Self-Paced
• Free Video

Container Patching: Making It Less Gross Than the Seattle Gum Wall

Explore strategies for efficient container patching, including prevention, detection, fixing, and monitoring. Learn about opensource tools and best practices to streamline the process and meet security requirements.

• YouTube
• 42 minutes
• Self-Paced
• Free Video

Delivering Secure Healthcare Applications with Open Source Software

Explore how open-source software enables secure, standardized Kubernetes-based platforms in regulated healthcare environments, focusing on efficiency, compliance, and cultural change.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

Hands-on Hacking Kubernetes and Ways to Prevent It

Hands-on workshop exploring Kubernetes vulnerabilities and prevention strategies. Demonstrates remote code execution exploit and teaches mitigation techniques for enhanced container security.

• YouTube
• 1 hour 13 minutes
• Self-Paced
• Free Video

Digital Forensics and Incident Response in Containerized Environments

Explore Digital Forensics and Incident Response (DFIR) techniques for containerized applications, focusing on Kubernetes. Learn best practices for evidence collection and incident containment in modern cloud environments.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

A Sneak Peek Into Open Source Security Reviews

Explore open source security reviews, their importance, and differences from audits. Learn about TAG contributions to the upcoming Security guide and how to get involved in its development.

• YouTube
• 17 minutes
• Self-Paced
• Free Video