Homeland Security Courses

First Steps to Full Lifecycle Security with Open Source Tools

Hands-on workshop demonstrating installation, configuration, and customization of open-source security tools for DevOps, focusing on Trivy for container and infrastructure security and Starboard for continuous security assurance.

• YouTube
• 1 hour 21 minutes
• Self-Paced
• Free Video

A First Look at the Security of Serverless Applications

Explore serverless computing security threats, challenges, and mitigation strategies. Learn about attack types, feasibility, and protective measures for this emerging cloud paradigm.

• YouTube
• 18 minutes
• Self-Paced
• Conference Talk

Deja Vu - Let's Think About Security Again

Explore cloud-native security transformations, DevSecOps, and Zero Trust in Crossplane. Discuss potential gaps, new tools, and best practices for developers and security experts in cloud infrastructure management.

• YouTube
• 19 minutes
• Self-Paced
• Conference Talk

Integrating Security in the Build Pipeline

Discover how to integrate security into your build pipeline, addressing vulnerabilities early and making deployment decisions based on artifact security status.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

Secure Code Development and Lessons Learned from etcd Security Audit

Insights from etcd security audit: common code vulnerabilities, critical threats, and best practices for secure development in open-source projects.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

Notary v2 - Supply Chain Security for Containers

Explore Notary v2's advancements in container supply chain security, its integration with other initiatives, and its path to production. Learn about registry-native solutions and ongoing developments.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

Hacking into Kubernetes Security for Beginners

Explore Kubernetes security essentials through live exploits. Learn about RBAC, admission control, and vulnerabilities in Kubernetes, Linux, and dependencies. Gain practical knowledge for securing your clusters.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Enhancing Kubernetes with the Security Profiles Operator

Explore Kubernetes security enhancement with Security Profiles Operator. Learn to manage seccomp, AppArmor, and SELinux profiles using cloud-native APIs for improved workload security and simplified administration.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Get In Containerds, We’re Going Securing - Kubernetes SIG Security is Here

Explore Kubernetes SIG Security's initiatives, including security audits, documentation, and community building. Learn how to contribute to enhancing Kubernetes project security.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

Compliance Beyond Security - A Cloud Native GDPR Implementation Experience

Explore GDPR implementation challenges in cloud-native environments, focusing on user data rights, data removal across the stack, and compliance strategies for modern regulatory landscapes.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

Isolate the Users! Supporting User Namespaces in K8s for Increased Security

Explore user namespaces in Kubernetes for enhanced security, focusing on isolating processes, mitigating risks, and addressing challenges in implementation.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Protecting Ourselves from CNCFgate - Software Supply Chain Security at CNCF - Practices, and Tools

Explore cloud-native software supply chain security practices, challenges, and tools. Learn strategies to protect against vulnerabilities and attacks in complex software systems.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

An Introduction to Cloud Native Security

Explore cloud native security with CNCF's SIG Security. Learn about ongoing projects, efforts to improve security in cloud native environments, and how to contribute to this evolving field.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Policy as Code - What Helm Developers Need to Know About Security

Explore security considerations for Helm developers, focusing on policy as code implementation in cloud-native environments.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

SAFE - A Cloud Native Security Working Group

Explore cloud native security with SAFE, a working group addressing access controls and safety concerns in modern architectures, presented by Liz Rice from Aqua Security.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk