Operations | Monitoring | ITSM | DevOps | Cloud

A well-crafted Dockerfile will avoid the need for privileged containers, unused packages, leaked credentials, or anything that can be used for an attack. By removing known risks in advance, you'll reduce security management and operational overhead. In this webinar, we'll go deep on Dockerfile best practices for image builds, so you can prevent security issues and optimize containerized applications.

Safeguarding sensitive credit card data in a massively dynamic multi-cloud infrastructure is no walk in the park. Hear how global payment service provider, Worldpay, is achieving its mission of 100% cloud usage with PCI compliance from development through production. Utilizing a secure DevOps approach with Red Hat OpenShift and Sysdig, Worldpay achieves container security at scale - and so can you.

AWS Fargate is a popular choice for running serverless containers, but runtime security is still a major challenge. Without access to the underlying host, visibility to threats is limited, leaving organizations blind to security risks. Detection and response often come with a lot of overhead or inaccuracies, leaving teams frustrated with the coverage. Level up Fargate security with Sysdig! Join us and AWS to hear how you can confidently secure AWS Fargate serverless containers at scale.

Becoming a Certified Kubernetes Security Specialist (CKS) is tough. The exam covers a broad range of topics about securing container- and Kubernetes-based apps, making it one of the most difficult Kubernetes certifications to achieve. Don't go it alone! Join Sysdig and CNCF Ambassador Saiyam Pathak for this session - we'll go beyond the basics and share expert advice so you can pass!

Introducing Hypper, a new package manager for Kubernetes designed with cluster administrators in mind. Hypper is built on Helm and charts but makes some different assumptions around multi-tenancy and dependent charts (which can be useful with CRD handling). Where Helm assumes a user could be one of many users running in multi-tenant Hypper assumes the user is a cluster administrator managing a cluster.

The rapid adoption of Kubernetes has created an agile attitude toward IT resources. Developers can now easily request the resources that they require in order to innovate better and enable faster iteration of microservice development. Such an environment can be challenging for traditional approaches to security, and a single security team taking sole responsibility for security can be a daunting task that is at odds with the desired agility. In this session, we will demonstrate how to leverage Calico RBAC to achieve shift-left security.

Constant vigilance is required to ensure that cloud infrastructure is locked down, and that DevSecOps teams have the right tools for the job. Cloud adds a new dimension and increases an organization's attack surface. Even a classic CVE can become a greater threat when cloud is factored into the equation. Because of its dynamic, ephemeral nature, Kubernetes ads further complexity to the challenge of protecting microservices. To effectively respond to this new security paradigm, it's critical for Kubernetes cloud security teams to have the Kubernetes-native tools needed to deploy security controls and detect and mitigate threats.

In this webinar we will look at the latest TTPs (Tactics, Techniques and Procedures) used by attackers as of Q1-21 to attack and compromise Kubernetes cluster. Attackers are actively using docker and Kubernetes functionality to compromise your cluster and gain required priviledges. TeamTNT's malware chain, Kinsing and other actors are using cutting edge techniques to compromise, hide, and exploit cloud resources.

An ideal Kubernetes network configuration can provide cost savings and performance improvements. In this webinar, we'll learn how to leverage Calico eBPF on AKS and highlight some of the benefits. The webinar will include demonstrating implementation and performance testing. You will learn best practices on Calico implementation and performance testing. A free trial of Calico Enterprise will be available after this session and you will be able to explore the possibilities on your own within a pre-configured, hosted lab environment.

Deep dive interactive workshop with a Calico expert to educate, influence, and design your next step in Kubernetes security 90-mins hands-on lab with your own provisioned Calico Cloud environment is designed to provide more complete knowledge on how to implement - Egress access controls - DNS policies - Flow visualization - Logging - Compliance You will get best practices that you can implement, and getting an understanding of how others in your industry are doing Kubernetes security in AWS, Azure, GCP or Private cloud environment today.