CNCF [Cloud Native Computing Foundation] Courses

Threat Modeling for AI Apps with Attacks as Code

Explore automated threat modeling for AI apps using Secops-Chaos framework. Learn to encode TTPs as security experiments and map MITRE ATLAS TTPs to AI apps in Kubernetes environments.

• YouTube
• 25 minutes
• Self-Paced
• Free Video

Implementing AI Risk Management Framework with Policy-as-Code Automation

Explore AI risk assessment, compliance, and red teaming for Kubernetes-deployed AI models. Learn to implement LinuxFoundation Trusted AI Principles using policy-as-code templates and CNCF open source tools.

• YouTube
• 35 minutes
• Self-Paced
• Free Video

Decoding 8 Real-World Cloud Identity Breaches

Dissection of 8 real cloud breaches exploiting insecure identities, revealing insights and mitigation strategies for common IAM vulnerabilities in cloud environments.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

Sailing the Security Seas with Tetragon Tutorial

Explore Tetragon for runtime security: learn to filter and examine events, strengthen defenses against intrusions, and gain hands-on experience using the tetra CLI in this interactive tutorial.

• YouTube
• 1 hour 12 minutes
• Self-Paced
• Free Video

Scan, Patch, VEX - Using Open Source Tools to Manage Vulnerabilities in Containers

Learn to manage vulnerabilities in cloud-native environments using open-source tools like Trivy and Copacetic, and standards like VEX. Improve security across development, testing, and production.

• YouTube
• 42 minutes
• Self-Paced
• Free Video

From Risks to Resilience: Leveraging CNCF Projects Against Kubernetes' OWASP Top 10

Explore strategies to mitigate OWASP Kubernetes Top Ten security risks using CNCF projects. Learn actionable insights to enhance the security of your Kubernetes deployments.

• YouTube
• 38 minutes
• Self-Paced
• Free Video

Bridging Mesh Enclaves - Securing and Maintaining Mesh Heterogeneity

Explore secure workload connections across service mesh technologies using SPIFFE and SPIRE. Learn to maintain technical heterogeneity while implementing universal workload security in complex software architectures.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

Level Up Your Security Career with the TAG Security Community

Discover how to advance your security career through CNCF's TAG Security community. Learn about project security, whitepapers, threat modeling, and industry trends while collaborating with experts.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

Where Does Your Software Really Come From - Artifact Attestations and Open Source Verification

Explore GitHub's Artifact Attestations: a new capability for verifying open source software origins, enhancing transparency and security in the OSS ecosystem.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

How to Generate VEX Automatically for Your Project

Learn to automate VEX generation for Kubernetes workloads, reducing false positives in security scans and streamlining vulnerability management using Kubescape and a new GitHub Action.

• YouTube
• 33 minutes
• Self-Paced
• Free Video

Learn to Navigate the Perils and Pitfalls of Multi-Tenant Identity Infrastructure

Explore challenges and solutions in multi-tenant identity management for B2B, B2C, and M2M environments, focusing on security, user experience, and balancing isolation with resource sharing.

• YouTube
• 22 minutes
• Self-Paced
• Free Video

Implementing Transaction Tokens with Keycloak for API Request Authentication

Explore implementing Transaction Tokens with Keycloak for secure API authentication in cloud-native architectures, addressing token redirect attacks and enabling call chain identification for internal workloads.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

How to Secure and Observe with Cilium - Different Angles

Explore Cilium's evolution from CNI to multi-faceted project offering Service Mesh, Hubble, and Tetragon. Learn common use cases for securing applications using the Cilium family of projects.

• YouTube
• 22 minutes
• Self-Paced
• Free Video

Amplifying Impact: Documentation and Supply Chain Security

Explore how high-quality documentation enhances security practices, based on DORA research. Learn measurement techniques, key findings, and strategies to improve documentation for better security outcomes.

• YouTube
• 43 minutes
• Self-Paced
• Free Video

End-to-End Encryption for Container Checkpointing in Kubernetes

Explore end-to-end encryption for container checkpointing in Kubernetes, addressing security risks and best practices to protect sensitive data during runtime state preservation.

• YouTube
• 32 minutes
• Self-Paced
• Free Video