CloudNativeSecurityCon North America 2024

Attending this event?

CloudNativeSecurityCon North America 2024

June 26-27, 2024 | Seattle, WA
View More Details | Registration Information

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for CloudNativeSecurityCon North America 2024 to participate in these sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.

Please note: This schedule is automatically displayed in Pacific Daylight Time (PDT), UTC -7. To see the schedule in your preferred timezone, please select from the drop-down menu to the right, above "Filter by Date."

The schedule is subject to change.

7:30am PDT

Registration + Badge Pick-Up Ballroom Lobby

9:00am PDT

Keynote: Welcome + Opening Remarks - Chris Aniszczyk, CTO, Cloud Native Computing Foundation Ballroom 2-3

9:15am PDT

Keynote: Demystifying Secure Application Communication with Zero Trust: Identity, Integrity, Confidentiality - Lin Sun, Head of Open Source, solo.io Ballroom 2-3

9:30am PDT

Sponsored Keynote: What Can You Do in 5 Minutes? - Alexander Lawrence, Field CISO, Sysdig Ballroom 2-3

9:35am PDT

Keynote: To Be Announced - Cailyn Edwards, Senior Security Engineer, Auth0 by Okta Ballroom 2-3

9:50am PDT

Keynote: K8s Security Safari: Hunting Threats in the Wild Wild Cloud - Stav Ochakovski, DevOps Tech Lead, Mitiga & Ariel Szarf, Senior Cloud Security Researcher, Mitiga Ballroom 2-3

10:05am PDT

Keynotes To Be Announced Ballroom 2-3

10:15am PDT

Keynote: Closing Remarks Ballroom 2-3

10:30am PDT

Coffee Break ☕ Ballroom 1 Solutions Showcase Ballroom 1

11:00am PDT

⚡ Lightning Talk: Can We Build Confidential Machine Learning with WebAssembly? - Tiejun Chen, freelancer 433 Shadow Vulnerabilities in AI/ML Data Stacks - What You Don’t Know CAN Hurt You - Avi Lumelsky & Nitzan Mousseri, Oligo Security 431 SaaC – Security as a Culture, the Distributed Advocacy - Deep Patel, Cisco 443 Accelerating AI Securely with GVisor - Lucas Manning, Google 420 Leveraging the Linux Kernel for Building a Zero-Trust Environment Without a Service Mesh - Marton Sereg & Zsolt Varga, Cisco 423 Tutorial: Sailing the Security Seas with Tetragon - Duffie Cooley, Isovalent 435

11:05am PDT

⚡ Lightning Talk: Security Down to the Kernel - Justin Garrison, Sidero Labs 433

11:10am PDT

⚡ Lightning Talk: Speak Egress and Exit: A Look at Securing Traffic Out of the Mesh with Istio - Nina Polshakova & Ariana Weinstock, Solo.io 433

11:15am PDT

⚡ Lightning Talk: Securing Your Systems with Service Mesh - Tyler Schade, Solo.io 433

11:20am PDT

⚡ Lightning Talk: Don’t Make Me Impersonate My Identity - Cynthia Thomas, Google 433

11:50am PDT

Leveraging Cryptographic Lineage for Context and ConnectedTrust - Yogi Porla, Deep Lineage 431 CSI Forensics: Unraveling Kubernetes Crime Scenes - Alberto Pellitteri & Stefano Chierici, Sysdig 433 Security Champions LeaderBoard - Building and Gamifying the Security Culture at Your Organisation - Aseem Shrey, SecureMyOrg 443 Navigating the Quantum Readiness Journey: Securing Kubernetes with Quantum-Resistant Cryptography - Malin Ridelius, Keyfactor 423 Sigstore, Past, Present and Future - Luke Hinds, Stacklok & Bob Callaway, Google 420

12:25pm PDT

Lunch 🍲 Ballroom 1

1:55pm PDT

Brave New World: Welcoming New AI Identity Challenges - Gabriel L. Manor, Permit.io 431 Building Bridges in Open Source: Connecting Academic Talent with Industry Innovation - Ben Smith-Foley, Rensselaer Center for Open Source 443 Avengers Assemble: Threat Modeling Kubernetes Clusters at a Massive Scale - Sai Charan Teja Gopaluni & Ashok Srirama, Amazon Web Services 420 Is the Internet on Fire? Strategies for Mitigating Open Source Software Vulnerabilities - Andrew Martin, ControlPlane & Michael Lieberman, Kusari 423 Tutorial: Demystifying and Enabling Workload Identify Across the Cloud Native Ecosystem - Andrew Block, Anjali Telang, Trilok Geer, Red Hat; Mariusz Sabath & Maia Iyer, IBM 435

2:45pm PDT

Threat Modelling: How to Improve Your Kubernetes Security Posture with Threat Model? - Maxime Coquerel, Royal Bank of Canada (RBC) 423 Threat Modeling for AI Apps with Attacks as Code - Priyanka Tembey, Operant & Glenn McDonald, Operant AI 431 Championing Security: Scaling Security at Every Level - Dwayne McDaniel, GitGuardian 443 Below the Radar: Identifying Hidden Threats Within the Development Ecosystem - Yakir Kadkoda, Aqua Security 420

3:20pm PDT

Coffee Break ☕ Ballroom 1

3:50pm PDT

One Project, Different Angles: How to Secure and Observe with Cilium - Christine Kim, Isovalent 423 Everyone’s Starting to Look SPIFFE: MTLS and Identity with Linkerd and Teleport - Dave Sudia, Teleport & Flynn, Buoyant 431 API Security: Code-to-Cloud Context for Complete Protection - Idan Plotnik, Apiiro 433 Metrics That Matter: How to Choose Cloud Security KPIs for Your Business - Emma Yuan Fang, EPAM Systems 443 A Deep Dive Into the Current Runtime Security Landscape - Ankur Kothiwal, CERN 420 Tutorial: Applying Consistent GitHub Security Policies with Minder - Dania Valladares & Luke Hinds, Stacklok 435

4:40pm PDT

Level up Your Security Career with the TAG Security Community - Andrew Martin, ControlPlane 423 Learn to Navigate the Perils and Pitfalls of Multi-Tenant Identity Infrastructure - Dakshitha Ratnayake & Florian Forster, ZITADEL 431 Detection Engineering in Kubernetes Environments: Wrangling Security Data Out of Your Clusters! - Dakota Riley, Aquia 433 Navigating the Intersection: AI’s Role in Shaping the Secure Open Source Software Ecosystem - Harry Toor, Open Source Security Foundation (OpenSSF) 443 Evasive Maneuvers: Strategies to Overcome Runtime Detection Tools - Oshrat Nir & Amit Schendel, ARMO 420

5:15pm PDT

Sponsor Booth Crawl Ballroom 1

7:30am PDT

Registration + Badge Pick-Up Ballroom Lobby

9:00am PDT

Keynote: Opening Remarks Ballroom 2-3

9:05am PDT

Keynote: To Be Announced - Rey Lejano, Solutions Architect, Red Hat Ballroom 2-3

9:20am PDT

Keynote: Security Education Through the Art of Storytelling - Ann Wallace, Director of Product Security Education, Okta Ballroom 2-3

9:35am PDT

Keynote: Sugar Ray.io on K8s: Shut the Door, Baby! - Greg Castle, GKE Security Tech Lead, Google & Cynthia Thomas, Product Manager, Google Ballroom 2-3

9:50am PDT

Keynote: To Be Announced - Marina Moore, PhD Candidate, New York University Ballroom 2-3

10:05am PDT

Keynote: We’re VEXing the Cloud Native Landscape. Bring Your Code! - Adolfo García Veytia, Staff Software Engineer, Stacklok Ballroom 2-3

10:20am PDT

Keynote: Closing Remarks Ballroom 2-3

10:30am PDT

Coffee Break ☕ Ballroom 1 Solutions Showcase Ballroom 1

11:00am PDT

Container Images & Security 101: 5 Need to Know Facts - Phil Estes, AWS 431 Scan, Patch, VEX - Using Open Source Tools to Manage Vulnerabilities in Containers - Toddy Mladenov & Sertaç Özercan, Microsoft; Itay Shakury, Aqua Security 433 Shift Down Security! How Platform Teams Can Help Break the Logjam - Jim Bugwadia, Nirmata & Poonam Lamba, Google 443 Amplifying Impact: Documentation and Supply Chain Security - Michelle Irvine, Google Cloud 423 Embracing the Future: The Effortless Mutual TLS and Rich Layer 7 Authz Policy Without Sidecars - Lin Sun, solo.io 420 Tutorial: Hacking Istio: The Good, the Bad, and the Misconfigured - Nina Polshakova & Peter Jausovec, Solo.io 435

11:50am PDT

Demystify Modern Signing: Keys, Certs, and Envelopes - John Kjell, TestifySec 431 Securing CI/CD Runners Through eBPF Agent - Mert Coskuner, Yahoo & Cenk Kalpakoglu, Kondukto 433 What Is the Right Dose of Security That Does Not Hurt Productivity - David Melamed, Jit 443 How to Generate VEX Automatically for Your Project - Shlomo Heigh, CyberArk & Ben Hirschberg, ARMO 423 The Runtime Rodeo; Where Open Source Image Behavior Is Tamed - Jimmy Mesta, RAD Security 420

12:25pm PDT

Lunch 🍲 Ballroom 1

1:55pm PDT

Got Root? Privilege Escalation (and Remediation!) on Kubernetes - Tiffany Jernigan, Independent 431 Implementing a Multi-Tenant, Relationship-Based Authorization Model with OpenFGA - Evan Anderson, Stacklok & María Inés Parnisari, Okta 435 Proactive Kubernetes Security: Anomaly Detection and Runtime Alerting in Kubernetes Workloads - Amit Schendel, ARMO & Remi Minnebo, Alter Domus 433 A Mouthful of Mayhem: Taste Test and Gut Response to SLSA, GUAC, and Supply Chain’s Plat Du Jour - Shane Lawrence, Shopify 423 Where Does Your Software (Really) Come from? - Trevor Rosen, GitHub 420

2:45pm PDT

Guardians of the Dataverse: Securing the AI Supply and Data Chain - Frederick Kautz, TestifySec Inc. 431 How Does a Workload Authenticate an API Request?: Implementing Transaction Tokens with Keycloak - Yoshiyuki Tabata, Hitachi, Ltd. 435 Kubernetes Node Firewalling from the Inside Out - Jef Spaleta, Isovalent & Justin Garrison, Sidero Labs 443 Kubernetes Deep Dive: Elevating ML Workload Monitoring to Art - Ziwen Ning & Geeta Gharpure, Amazon Web Services 433 End-to-End Encryption for Container Checkpointing in Kubernetes - Radostin Stoyanov, University of Oxford 423 User Namespaces in Kubernetes: Security and Flexibility - Pick Both - David Leadbeater, G-Research 420

3:20pm PDT

Coffee Break ☕ Ballroom 1

3:50pm PDT

From Risks to Resilience: Leveraging CNCF Projects Against Kubernetes' OWASP Top 10 - Alireza Rahmani & Hilliary Lipsig, Red Hat 431 Implementing AI RMF with Policy-as-Code Automation - Robert Ficcaglia, SunStone Secure; Anca Sailer & Vikas Agarwal, IBM 423 Bridging Mesh Enclaves: Securing and Maintaining Mesh Heterogeneity - Lukonde Mwila, Amazon Web Services (AWS) 443 IAM Confused: Decoding 8 Real World Cloud Identity Breaches - Maya Levine, Sysdig 435 How to Actively Protect Users and Assets of a 5G CloudNative Network? - Willem Berroubache, Orange 433 Teach Your SBOM New Tricks with Bomshell - Adolfo García Veytia, Stacklok 420

4:40pm PDT

All I Know About Cybersecurity I Learned from Fungus - Alex Lawrence, Sysdig 431 Cloud Native GRC - Brandt Keller, Defense Unicorns & Jon Zeolla, Zenable 423 Network ACLs Made Easy: Establishing Zero Trust Network Policies in a Few Clicks - Juno Im & Yonghwi Jin, Theori 443 The Story of Crush: The Microservice That Navigated the Cloud Native Ocean with a SPIFFE Identity - Mattias Gees, Venafi & Tom Meadows, Testifysec 435 Drawing Lines in the Sand, or Running Unprivileged eBPF in Kubernetes - Nikola Grcevski, Grafana Labs 433