The Irresistible Rise of Cloud Native: What the Future Means for YOU

on YouTube ↗22m

" summary

Timeline traces from KVM and Borg to Docker and Kubernetes and then to WebAssembly in Docker, micro VMs and unikernels; claim is that these reduce attack surface but trade observability and IO performance. Supply chain section cites 30,000 malicious npm packages as a wakeup and pushes reproducible builds + software factory plus SBOM and VEX for vulnerability context. SPIFFE-style workload identity, Rust in the kernel, eBPF LSM and confidential computing are tested as practical mitigations.

AI-written summary · about

" chapters (11)

1. 0:00Welcome
2. 1:28Cloud native history
3. 4:22Next-gen isolation tech
4. 7:33Platform engineering & Kubernetes
5. 8:59Security by default
6. 10:02Supply chain security
7. 13:12Supply chain maturity
8. 14:38Quantum cryptography & AI threats
9. 17:06Government regulations & SBOMs
10. 20:39Kernel security & confidential computing
11. 21:21Cloud security future

" related talks

• 25mContainers. Microservices. Cloud. Open Source. Fantasy or Reality for Enterprises?Phil Estes · JAX 2019
• 32mHacking the Cloud Native Renaissance: Lowering Risk of Kubernetes AdoptionAndrew Martin · Open Source in Finance Forum London 2022
• 23mKeynote: A Brief History of the Cloud from Servers to VMs to Buildpacks to Cloud Native ContainersDan Kohn · LinuxCon + ContainerCon Europe 2016
• 09mKeynote: Supply Chain: The New Threat Vector in Cloud Native SecurityAli Golshan · Cloud Native Security Day Europe 2021
• 07mKeynote: Cloud Native Security Market Trends and DriversJohn Morello · KubeCon + CloudNativeCon North America 2022
• 31mReverse Engineering Cloud Native: Interoperability and CommunityKatie Gamanji · Craft Conference 2023
• 14mKeynote: Back to the Future: Next-Generation Cloud Native SecurityMatt Jarvis · CloudNativeSecurityCon North America 2023
• 30mShrinking Software Attack Surface with WebAssembly & CNCF WasmcloudLiam Randall · Cloud Native SecurityCon Europe 2022