Hot Topics

Upbound Donates Provider Code to Crossplane Project
How to Build and Manage a Cloud Center of Excellence
Oracle Bets on Graal to Run Cloud-Native Java Apps Faster
ECS Vs. Plain Kubernetes: 5 Key Differences and How to Choose
CNCF Survey Surfaces Cloud-Native Training Conundrum

Loris Degioanni is the CTO and founder of Sysdig, the cloud-native intelligence platform. He is also the creator of the popular open source troubleshooting tool, sysdig, and the open source container security tool Sysdig Falco. Prior to founding Sysdig, Loris co-created Wireshark, the open source network analyzer, which today has 20+ million users. Loris holds a PhD in computer engineering from Politecnico di Torino and lives in Davis, California.

5 Best Practices for Ensuring Secure Container Images

Most modern organizations understand that the earlier you integrate security into the development process, the more secure the applications will be in production. For containerized workloads, securing the container image throughout the ...

Loris Degioanni | November 4, 2020 | application, best practices, container images, container security, secure, vulnerabilities

Techstrong TV – Live

Click full-screen to enable volume control

Watch latest episodes and shows

UPCOMING WEBINARS

CloudNativeNow.com
DevOps.com
SecurityBoulevard.com

Cloud Security – DevSecOps (NAM/EMEA)

2 November 2023

The post Cloud Security – DevSecOps (NAM/EMEA) appeared first on Cloud Native Now. [...]

Secure Your Container Workloads In Build-Time With Snyk And AWS

1 November 2023

With cloud deployments transforming what was traditionally ‘infrastructure’ to code, development and security teams face new, increased pressure in their attempt to build secure applications quickly. With developers in the driver’s seat, organizations are using modern DevOps processes with integration and deployments happening many times a day and at scale. The post Secure Your Container Workloads In Build-Time With Snyk And AWS appeared first on Cloud Native Now. [...]

Managing Security Posture and Entitlements in the Cloud

19 October 2023

Federating access and ensuring compliance across multi-cloud and hybrid environments is a challenge. This is especially true without proper visibility and processes in place to understand what’s being deployed and how to maintain least-privilege access. Credentials are the number-one attack vector in the cloud, and threat actors are increasingly using The post Managing Security Posture and Entitlements in the Cloud appeared first on Cloud Native Now. [...]

Live Workshop on ‘SCA 2.0’: Using Runtime Analysis to Find High-Risk SCA Vulnerabilities

18 October 2023

Picture this: Your application is composed of 12 Docker containers. Together, they have 400 packages. Your SCA scan detects 120 critical and high vulnerabilities. Your dev team doesn’t have the cycles to fix all of them in time. How do you identify which vulnerabilities truly represent higher risk? In this The post Live Workshop on ‘SCA 2.0’: Using Runtime Analysis to Find High-Risk SCA Vulnerabilities appeared first on Cloud Native Now. [...]

Securing Cloud-Native Workloads: A Deep Dive into Achieving Zero Trust Through Effective Policies on AWS

12 October 2023

Join our upcoming program, where we delve into the intricacies of implementing Zero Trust security principles for cloud-native workloads on AWS. In this session, our experts will discuss the key elements of Zero Trust, emphasizing the role of well-defined policies in bolstering security. The post Securing Cloud-Native Workloads: A Deep Dive into Achieving Zero Trust Through Effective Policies on AWS appeared first on Cloud Native Now. [...]

Explaining the Business Value of Cloud Native to Your Boss

5 October 2023

Your business only cares if the app is running. But it takes a lot of tooling to make that happen and as DevOps, platform engineers and SREs, we need the ability to clearly articulate the business value of why you need Kubernetes, automation and cost tooling, or why your current security vendor won’t secure Kubernetes. […] [...]

SRE – Chaos Engineering

5 October 2023

SRE – Chaos Engineering (APAC)

5 October 2023

Organizational Integration With Service Management

4 October 2023

With its focus on value, collaboration, and continual improvement, ITIL 4 helps you identify and close the gaps in your IT service management practices and ensure your efforts are aligned with your organizational key strategic goals. So, if you are trying to improve customer experience so your organization can enjoy higher levels of performance, you […] [...]

How PRINCE2 Will Drive the Next Wave of Project Automation

3 October 2023

How to Shift Left the Right Way

26 October 2023

Application Security isn’t just a security problem. It’s a business problem. While many organizations understand the benefits of shifting security left, they fail to consider the platforms and fuel needed to make it truly work. Shifting Left is just as much about coordination and collaboration as finding and fixing. Join AppSec experts Scott Gerlach, co-founder.. The post How to Shift Left the Right Way appeared first on Security Boulevard. [...]

Reporting From the Pipeline: The State of Software Security in DevOps

24 October 2023

Requisite for proper DevSecOps, integrated security controls across the development lifecycle and CI pipelines establish mechanisms for rapid risk detection, accelerated remediation, and automated security gates. But aligning software development, AppSec, and DevOps teams to realize a vision for secure DevOps requires a clear strategy. This year’s DevSecOps Report defines a vivid image of organizations’.. The post Reporting From the Pipeline: The State of Software Security in DevOps appeared first on Security Boulevard. [...]

When Seconds Matter: Real-Time Cloud Security With AWS and Sysdig

24 October 2023

Security leaders are wrestling with managing and mitigating cloud risk. Cloud brings speed and automation, but adversaries are moving faster than ever. Seconds matter. Organizations are finding that a disjointed patchwork of tools slows response and leaves too many security gaps. A new approach is needed to streamline cloud security operations, reduce alert fatigue and.. The post When Seconds Matter: Real-Time Cloud Security With AWS and Sysdig appeared first on Security Boulevard. [...]

Managing Security Posture and Entitlements in the Cloud

19 October 2023

Federating access and ensuring compliance across multi-cloud and hybrid environments is a challenge. This is especially true without proper visibility and processes in place to understand what’s being deployed and how to maintain least-privilege access. Credentials are the number-one attack vector in the cloud, and threat actors are increasingly using zero-day vulnerabilities to gain access.. The post Managing Security Posture and Entitlements in the Cloud appeared first on Security Boulevard. [...]

Live Workshop on ‘SCA 2.0’: Using Runtime Analysis to Find High-Risk SCA Vulnerabilities

18 October 2023

Picture this: Your application is composed of 12 Docker containers. Together, they have 400 packages. Your SCA scan detects 120 critical and high vulnerabilities. Your dev team doesn’t have the cycles to fix all of them in time. How do you identify which vulnerabilities truly represent higher risk? In this hands-on workshop, Deepfactor’s VP of.. The post Live Workshop on ‘SCA 2.0’: Using Runtime Analysis to Find High-Risk SCA Vulnerabilities appeared first on Security Boulevard. [...]

	Currently	Planned	N.A.
Artificial Intelligence / Machine Learning (AI/ML)
Generative AI (GenAI)
IoT Interconnectivity management
Location services (geo-fencing, beacons)
Physiological biometrics (face/voice/fingerprint/iris recognition)
Other

5 Best Practices for Ensuring Secure Container Images

Cloud Isn’t That Simple Anymore: Polycloud Vs. Sky Computing

Kubernetes: The ‘All Things’ Platform

Cosmonic Commits to Next Iteration of Wasm Standard

Stop Turning Success Into Failure With Microservices

How CD and GitOps Help You Build a Successful K8s Platform

Mobile Application Development PulseMeter