Security Courses

Nurturing Security Permaculture - Kubernetes SIG Security Update

Explore Kubernetes SIG Security's community-driven approach to enhancing project and user security. Learn about recent updates, upcoming initiatives, and opportunities to contribute.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

Making Sense of Security Supply Chain - An Overview for Beginners

Explore supply chain security fundamentals, tools like Fulcio, Rekor, and cosign, and their integration in this beginner-friendly overview of the rapidly evolving landscape.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

Falco: Cloud-Native Runtime Security for Kubernetes - Recent Developments and Roadmap

Discover Falco: Cloud-Native Runtime Security for Kubernetes. Learn about recent developments, improved eBPF support, security enhancements, ecosystem integrations, and the project's roadmap from experienced contributors.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

IDP Security for Platform Engineers Using Backstage and Kubescape

Explore how Backstage and Kubescape integrate to provide comprehensive Kubernetes security coverage, enabling visualization and management of security posture across your pipeline.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

Kubernetes Security Response Committee: Introduction and Deep Dive

Explore the Kubernetes Security Response Committee's role, vulnerability lifecycle, and key findings from the 2022 security audit. Learn about reporting processes and community impact.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

Interactive Playground to Learn Kubernetes and Cloud Native Security

Explore Kubernetes security through hands-on scenarios in a vulnerable cluster environment. Learn about real-world vulnerabilities, CVEs, and security tools across infrastructure, supply chain, and runtime layers.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

Getting Familiar with Security Observability Using eBPF and Cilium Tetragon

Explore security observability using eBPF and Cilium Tetragon. Learn to extract data, monitor activities, and detect container escapes for enhanced incident prevention and response.

• YouTube
• 1 hour 11 minutes
• Self-Paced
• Free Video

Back to the Future - Next-Generation Cloud Native Security

Explore the future of cloud native security, examining emerging technologies, architectural patterns, and potential challenges. Gain insights into next-gen security pipelines and industry advancements.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

Security Controls for Safe Chaos Experimentation

Explore security considerations in chaos engineering, including authentication, fault-blacklisting, runtime security, policy integration, and secrets management. Learn about new features in LitmusChaos 3.0 beta.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

Staring Into the Abyss with the Security Technical Advisory Group

Explore CNCF's Security TAG efforts, including security reviews, supply chain security, and community initiatives. Learn about cloud native security mechanisms and how to get involved.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

Guardians of the Runtime - Leveraging Behavioral Analysis and Policies for Kubernetes Security

Explore innovative Kubernetes security using behavioral analysis in CI testing and native policies. Learn hands-on practices for implementation and enforcement to protect against latest threats.

• YouTube
• 33 minutes
• Self-Paced
• Free Video

In-Toto: Attestations and Software Supply Chain Security

Explore in-toto framework's advancements in software supply chain security, including attestation verification, type mapping, and integrations with CNCF projects and industry tools.

• YouTube
• 35 minutes
• Self-Paced
• Free Video

Top 10 Istio Security Risks and Mitigation Strategies

Explore top Istio security risks and mitigation strategies for cloud native applications. Learn to prioritize efforts, protect against attacks, and address critical vulnerabilities in service mesh deployments.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

Practical Challenges with Pod Security Admission

Explore challenges in implementing Pod Security Admission, including handling privileged workloads and applying the principle of least privilege. Learn strategies for securing Kubernetes environments.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

A Look Under the Hood of CNCF Security Audits

Insights into CNCF security audits: process, expectations, outcomes, and common vulnerabilities. Explores experiences from auditing six major projects and the value of audit reports for contributors and researchers.

• YouTube
• 31 minutes
• Self-Paced
• Free Video