Untrusted Execution: Attacking the Cloud Native Supply Chain - Francesco Beltramini
summary
Walks through an end-to-end threat model that splits supply chains into pre-build, build, post-build stages and maps attack trees to concrete mitigations. Recommends pipelines-as-code, two‑person approval, ephemeral build runners and artifact signing so builds are reproducible and tamper-evident, citing a reference stack built on Kubernetes, Tekton and in‑toto and adoption paths via Salsa/Secure Software Factory. Demonstrates signing, provenance verification, SCA and sandbox detonation; intended controls are implementable and verifiable.
AI-written summary · about
chapters (9)
- 0:00Introduction and speaker background
- 2:28Defining software supply chain
- 8:09Threat modeling fundamentals
- 12:21Pre-build stage threat modeling
- 16:59Build stage threat modeling
- 20:52Post-build stage threat modeling
- 24:47CNCF secure software resources
- 30:48Key takeaways and recommendations
- 31:29Q&A session
related talks
37mUntrusted Execution: Attacking the Cloud Native Supply Chain
37mUntrusted Execution: Attacking the Cloud Native Supply Chain
36mKubernetes Supply Chain Security: The Software Factory
41mSupply Chain Armoring: Tools and Techniques for Open Source Projects
09mKeynote: Supply Chain: The New Threat Vector in Cloud Native Security
39mReflections on Trust in the Software Supply Chain
36mBuilding a Trusted and Resilient Software Supply Chain
41mHow to protect your CI/CD from a Supply chain attack?