A Special Interest in Cloud Native Security
Talkat KubeCon + CloudNativeCon North America 2020 Virtual · on Thursday, 2020-11-19· at 16:50· Intrado Virtual Event Platform,·
summary
SIG Security publishes a 36-page white paper that defines cloud-native security layers, maintains a supply chain catalog of real compromises with threat definitions and mitigations, and completes concrete reviews — five security assessments to date — that are explicit about being assessments not audits. Each assessment yields a detailed architecture-and-threat document plus a one-page TL;DR with recommendations (example: OPA policy usability finding and suggested surveys and docs). Reviews run about 10 hours over three weeks and coordination happens in the repo and Slack.
AI-written summary · about
chapters (9)
- 0:00Start
- 0:41Mission of the Special Interest Group for Security in the Cloud Native Computing Foundation
- 1:32Cloud Native Security White Paper
- 3:13Presentation Discussions
- 4:13Supply Chain Catalog
- 5:56Security Assessments
- 6:26Security Assessment Is Not a Security Audit
- 8:18Hardware Assessment
- 8:48Security Analysis
