Cloud Native Security Landscape: Myths, Dragons, and Real Talk
summary
Panelists argue concrete priorities: inventory first — many orgs still lack visibility despite 85–97% of commercial products using OSS — then know fix enforce as the three-stage path. Tools in focus are SBOM generation, GUAC for metadata aggregation, SLSA for build integrity, Falco for runtime detection, and eBPF which appears overhyped. A surprising claim: the US will receive ~250,000 SBOMs arriving June 15, creating a tooling gap for turning metadata into actionable, prioritized fixes (runtime-loaded dependencies get higher priority).
AI-written summary · about
chapters (8)
- 0:00Cloud Native Security Landscape
- 3:32Panelists
- 9:45Critical supply chain issues
- 16:28Know, fix, enforce
- 21:49Bridging security teams
- 28:07Standards and open source
- 33:41Supply chain cross-domain
- 34:02Overhyped vs underappreciated
related talks
44mPanel Discussion: Improving the Software Supply Chain Security- 44mImproving the Software Supply Chain Security
35mCloud Native Security for the Rest of Us
50mRunning in the Shadow: Perspectives on Securing the Software Supply Chain
34mCloud Native Security: A New Paradigm for a New World
40mCloud Native Security: A New Paradigm for a New World
28mProduction, Consumption, and the Data: The Open Source Security Sandwich
40mPanel Discussion: Open Source Supply Chain Security - Are Containers..