Name: Mastering Kubernetes Security with Kubernetes Goat
Start: 2023-11-08T13:00:00Z
End: 2023-11-08T13:00:57.000Z
Location: BrightTALK
Rating: 4.7

Cloud computing is a general concept that incorporates software-as-a-service (SaaS), platform-as-a-service (PaaS), infrastructure-as-a-service (IaaS) and other recent well-known technology trends in which the common theme is reliance on the Internet for satisfying the computing needs of the users.  

This channel features presentations by thought leaders who cover the key topic areas in this increasingly important field.

They hybrid clouds have been the norm for a long time now. We have spent a long time applying consistent tooling across our various clouds but protecting them is still a big challenge. We use public clouds, private clouds and SaaS solutions and yet we don’t have a consistent approach to protecting the data. What happens if your SaaS provider fails? How do you get your data back? When did you last check this?

How well are the cloud systems protected? Where is the demarcation line? Is your business aware of the risks it might be taking? And that’s even before we find those SaaS environments that were bought on a credit card without IT's knowledge.

Securing and protecting these environments is a huge challenge so join this webinar to get a strong checklist of areas to consider and approaches you can take that will protect you, your organisation and the data you own.

Wrapping Your Head Around Your Cloud Environment

Securing the cloud ecosystem goes beyond traditional cybersecurity -- it requires a holistic approach that integrates security, compliance, and financial governance. As organizations expand their cloud footprint, misconfigurations, shadow IT, and uncontrolled costs pose significant risks. This session will explore best practices for securing cloud workloads, enforcing compliance standards, and aligning FinOps strategies with security objectives. 

Tune into this session from TD Bank's Pankul Chitrav as she teaches attendees how to leverage automation, policy-driven controls, and cross-functional collaboration to build a resilient, cost-efficient, and secure cloud environment.

Fortifying the Cloud: Integrating Security, Compliance, and Cost Governance

The move to cloud-native architectures increases the security complexity, demanding more efficient and automated solutions. Manual security processes struggle to keep pace with the dynamic nature of cloud environments. Addressing these concerns requires a tailored approach that leverages advanced technologies.

This webinar presented by industry thought leader Atulpriya Sharma will explore how AI can enhance cloud-native security, particularly in hybrid cloud settings. Discover how AI automates policy enforcement, vulnerability scanning, and threat detection, with a focus on open-source tools.

Tune in to learn how to future-proof your cloud security with AI-driven solutions, ensuring your organization stays ahead of emerging threats and maintains a strong security posture.

Transforming Cloud Native Security with AI

Tune into this talk from industry thought leader Atulpriya Sharma as he explores how to build a unified observability strategy using open source, cloud native tools like Prometheus, Loki, Jaeger, and Grafana. 

Attendees will learn strategies to implement a multi-cluster observability infrastructure to collect and analyze metrics, logs, and traces across your multi cluster setups. By implementing these tools and best practices, organizations can overcome the challenges of disparate data sources, inconsistent monitoring, siloed operations and get a complete view of their landscape.

Achieving 360-Degree Visibility in Multi-Cloud Setups

The rise of multi-cloud environments presents unprecedented opportunities for businesses to leverage the best features and services from different cloud providers. This talk will explore the multifaceted landscape of multi-cloud networking, highlighting the vast potential it offers for enhanced performance, cost optimization, and operational resilience.

Join us to delve into the strategic considerations and technical solutions that can help your organization navigate the complexities of multi-cloud networking, maximizing its potential while mitigating its challenges.

Key takeaways:
- Opportunities: Multi-cloud strategies enable organizations to avoid vendor lock-in, optimize workloads across different cloud platforms, and enhance service availability. By integrating multiple clouds, businesses can tailor their infrastructure to specific needs, achieving greater agility and scalability. Furthermore, multi-cloud deployments can enhance data sovereignty and compliance by distributing data across various jurisdictions.
- Challenges: Despite its benefits, multi-cloud networking introduces significant complexity. Key challenges include ensuring seamless interoperability between different cloud services, managing increased security risks, and maintaining consistent network performance. 
- Solutions: These include leveraging automation tools for orchestration and management, adopting robust security frameworks, and utilizing unified monitoring platforms to gain comprehensive visibility across all clouds. Additionally, the talk will cover strategies for optimizing network architecture to ensure high performance and reliability, and methods for effective cost control.

Multi-Cloud Networking: Opportunities, Challenges and Solutions

Hybrid and multi-cloud environments, now a weapon-of-choice for many companies, are facing increased regulations with their sharp increase in use. To ensure compliance against a range of international requirements, cloud providers are now aiming to establish a joint approach with customers regarding operational resilience requirements.

So, what does this mean for companies? Organizations should ask themselves, as a starter, what their risk appetite is and if they really understand the criticality of their critical cloud services. The next steps are to consider just how they can meet the new compliance regulations for third parties, outsourced operations and cloud providers as well as what level of communications they should establish with them.

Tune into this session presented by business continuity, disaster recovery, cyber resilience and major incident expert Steve Yates, as he shares his views on managing hybrid and multi-cloud environments, in what until recently had been put into the “secret” file! Yates will explore current challenges and  provide a series of “joined-up” options to consider when managing cloud services. In addition, he will delve into the more recent compliance world, where partnerships may be the answer. Viewers are encouraged to share, in confidence, their major concerns before the presentation, if they wish to gain the most from this session.

By the end of the session, you will learn:
- The challenges you may likely encounter. 
- How to redefine your risk appetite.
- How to be conversant in a joined-up thinking approach with your cloud provider(s).

Managing Hybrid and Multi-Cloud Environments: What is the Secret?

As organizations increasingly adopt hybrid and multi-cloud environments to enhance agility and scalability, they face mounting challenges in managing complexity and ensuring peak performance. This session presented by KFC's Manager of Business Intelligence Farid Sheikhi will explore practical strategies to optimize your hybrid and multi-cloud ecosystems, with a focus on maximizing ROI, enhancing security, and simplifying operations.

Join us to learn how to:
- Navigate the complexities of hybrid and multi-cloud environments with effective governance and automation.
- Enhance security through integrated frameworks and real-time threat detection.
- Leverage innovative tools and best practices to boost performance and drive business outcomes.

Simplifying Complexity: Strategies for Hybrid and Multi-Cloud Optimization

We have been hearing that cloud is the answer to digital transformation for many years now and yet research suggests that many organisations still aren’t experiencing the promised benefits. Cloud repatriation is still increasing as organisations pause and take stock of growing costs with limited benefit. So why has cloud not delivered against the promise for so many?

Like many technologies, cloud alone cannot be the answer. How do we maximise on the investment we have made? This webinar from industry thought leader Simon Ratcliffe will take a step back and explore some of the common mistakes and offer pragmatic advice and guidance on how to re-align a strategy that shifts thinking towards maximise the transformational opportunities of the cloud.

About the speaker
Originally a trained psychologist specialising in organisational change, Simon also trained as an accountant and served as a CFO where he specialised in automating financial reporting systems. This led to a career change into technology, first within a training company specialising in developing solutions enabling organisations to extract the maximum benefit from their IT investments.  

Simon has spent the last 15 years specialising in maximising the value from technology investments and creating the organisational and cultural change necessary to maximise these investments. Now working as an independent Management and Technology Consultant, Simon works with a variety of organisations exploring how effective change yields maximum value from technology.

Simon is also a recognised industry speaker, a published author and a leading member of a number of forums, writing and contributing regularly to both the IT and business press as both an author and commentator.

Cloud is the Answer! What is the Question?

Join us for an in-depth webinar where we will explore the transformative power of generative AI in the highly regulated financial services industry. This session will delve into the technical and business aspects of AI and cloud integration, with a focus on compliance, talent development, data quality and accessibility, and practical implementation.

Topics:
1. Integrating GenAI in Financial Services: Understand how generative AI models can enhance financial operations within regulatory frameworks, including detailed use cases and implementation strategies.
2. Developing AI Talent: Explore approaches to building and nurturing AI expertise within your organization to maximize its potential while adhering to industry standards.
3. Data Accessibility and Security: Learn how to manage and secure vast amounts of data in the cloud (private or public), ensuring efficient, compliant, and secure AI implementations.

Key Takeaways:
1. Strategic AI Integration: Gain deep insights into effectively incorporating genAI, enhancing capabilities such as risk assessment and customer service while navigating regulatory challenges.
2. Talent Development: Discover actionable strategies for training and retaining AI talent to drive your organization’s transformation within a regulated environment and ready for the future.
3. Data Management and Security: Learn best practices for managing data in the cloud, ensuring both accessibility for AI applications and stringent security to protect sensitive information and comply with regulations.

This webinar is designed for financial professionals, IT leaders, and business strategists eager to leverage AI and cloud technologies within the confines of a regulated industry. Attendees will walk away with actionable insights and practical knowledge to implement AI solutions, ensuring their financial services are at the forefront of innovation while remaining compliant.

Harnessing AI in the Cloud Era: Transforming Finance with Gen AI

Quantum computing stands at the forefront of technological innovation, promising to revolutionize various industries, with financial services being one of the most significant beneficiaries. From automating complex trading strategies to optimizing risk management and portfolio diversification, quantum computing is set to revolutionize financial decision-making processes. Also, by leveraging the power of quantum algorithms, financial institutions can achieve unprecedented computational speeds and accuracy, enabling them to solve problems previously deemed intractable.  

In this session, Youssouf Traore (Deeptech Investor, MARTRAM Ventures) delves into the core principles of quantum computing and its applications within the financial sector. He shares real-world examples and case studies, illustrating how quantum computing is being used to enhance predictive analytics, improve fraud detection, and streamline regulatory compliance.  

Topics for discussion include: 
- The basic principles of quantum computing and how it differs from classical computing. 
- Use cases of quantum computing to transform decision-making in financial services. 
- Insights from case studies demonstrating how quantum algorithms can be leveraged in financial institutions. 
- The advantages of quantum computing in financial services and the technological and operational challenges involved in its adoption. 
- The future of quantum computing in finance and how to prepare for the technological shift. 


About the Speaker
As an early-stage investor in Deep Tech, I am an Adjunct Professor at IE Business School and IE School of Science and Technology, where I lead the "Deep Tech Venturing and Investment" elective course. I also serve as a Leadership Team Member at the Entrepreneurship Forum Spain and Board Member at the MIT Club of Spain, dedicated to fostering innovation and entrepreneurship.

Optimize Decision-Making Outcomes in Financial Services with Quantum Computing

The advent of cloud computing has ushered in a new era of financial services, characterized by unprecedented levels of innovation, agility, and scalability. As the finance sector grapples with the dual challenges of increasing regulatory scrutiny and rapidly changing consumer expectations, the cloud emerges as a pivotal force for transformation. This presentation aims to dissect the multifaceted impact of cloud technology on the finance industry, highlighting key strategies for leveraging cloud computing to foster innovation and competitive advantage.

We will delve into the core aspects of cloud-powered financial innovation, beginning with an exploration of how cloud technology is reshaping traditional banking, investment, and insurance models. We will examine case studies of fintech startups and established financial institutions that have successfully harnessed the cloud to launch innovative services, improve operational efficiency, and enhance customer experience.

Furthermore, the presentation will address the critical role of security, compliance, and data governance in cloud-based financial services. With the increasing frequency and sophistication of cyber threats, we will discuss best practices for securing sensitive financial data in the cloud, ensuring compliance with global financial regulations, and building trust with customers.

Navigating the Cloud: Driving Financial Innovation for Tomorrow’s Economy

If you work for a financial services firm or as a supplier, it is imminent you are familiar with forthcoming regulations impacting global cloud providers in 2025. These new regulations, based upon operational resilience, help prevent service failures that could lead to a ﬁnancial crisis.  

These new regulations will take effect within the European Union in January 2025 and for the U.K. in March 2025. A long time in the planning, the EU Digital Operational Resilience Act (DORA) and the UK Bank of England (BoE) Operational Resilience Policy may introduce stresses for customers and suppliers but in the long-term, offers relievers to help mitigate service disruptions. 

Tune into this session presented by business continuity, disaster recovery, cyber resilience and major incident expert Steve Yates, as he shares his views to transform ﬁnance in the cloud era. Yates will explore current global operational resilience regulations, whilst exploring the beneﬁts to cloud users and suppliers such as no need for “lock-in” contracts. In addition, he’ll provide real case studies supporting the need for such changes, and why this compliance is the only way forward. Viewers are encouraged to share, in conﬁdence, their major concerns before the presentation if they wish to gain the most from this session. 

By the end of the session, you will be able to understand:
- The scope of the changes being made and benefits they will bring.  
- Operational resilience framework to support business operations.
- How this new regulation aims to create a formal partnership between the customer and supplier.

Transforming Finance in the Cloud Era: What are the Stresses and Relievers?

Video: Navigating the Cloud: Driving Financial Innovation for Tomorrow’s Economy

Some multi-cloud strategies are accidental, for compliance purposes, or arise from M&A activity. But some others are deliberately aimed at driving value. The cost benefits that come with buying the cheapest services from different providers is only a small part of the value creation process. 

This webinar presented by industry thought leader Simon Ratcliffe will examine different ways some organisations have driven exceptional value from a multi-cloud approach, creating investor and shareholder value through the decisions they have made.

Join us to gain a whole new perspective on how multi cloud can not only help reduce operational costs but can shine a value creation light on the tech function.

Creating Value From a Multi-Cloud Approach

In the discussion, Sean Heide, Research Technical Director of Cloud Security Alliance, will cover the last Top Threats to Cloud Computing report by the Cloud Security Alliance. This document, though not a framework in a traditional sense, is a powerful research paper that outlines the cloud's top risk and threat areas as identified by the entire security community. Through extensive research and collaboration, these findings have been stripped down to be able to describe business impacts, mitigations, and lessons learned from use cases. Whether you are a seasoned veteran in this business, or just getting started on your cloud journey, you will be able to use these findings to begin to put the pieces together to enhance your security posture.

Navigating the Top Cloud Threats: A Practical Approach for Risk Identification

Today’s cloud environments are intricate, interconnected ecosystems. Identifying and tracking cloud assets are a challenge. Effectively securing them is an even more daunting task.

This webinar will take it from the top to define the problems and present prescriptive recommendations that can be implemented by organizations of all sizes.

You will learn:
- Standard cloud concepts and terminology.
- Strategies for discovering and maintaining a cloud asset inventory.
- Guidance on how to protect, detect, and respond to cloud-based incidents.

Cloudy with a Chance of Breach: Controlling Cloud Chaos and Complexity

Join us to gain an understanding of risks and threats that uniquely impact containers and Kubernetes. 

In this panel discussion, we'll explore:
 •  How containerization affects application, platform, and cloud security concerns
 •  Walking through risks to the apps running in the containers
 •  The possibilities of an escape from the container workload to the host and the orchestrator
 •  The potential for this to lead to a bigger compromise of the cloud estate
 •  Addressing strategies for mitigating these risks and detecting possible issues

Understanding How Containers & Kubernetes Change Your Threat Models

Containerization revolutionizes software deployment by packaging applications and their dependencies into portable, isolated units called containers. In fact, according to Enterprise Strategy Group research, 77% of organizations state they support eleven to more than twenty containers per hosts in their environments. When applied to embedded systems, this technology streamlines resource-efficient deployment, enabling seamless application management across diverse devices.  Deployment of containers into embedded platforms comes with security risks and attacks including remote code executions, man-in-the-middle attacks, and privilege escalation.  Thwarting these types of attacks necessitates meticulous attention to developer practices and deployment strategies to ensure comprehensive container security. 
 What you will learn:
• Fundamentals of containers and their adoption on embedded systems
• Security risks surrounding embedded container technology
• Tips for securing containers from development to deployment on embedded systems

Secure Your Embedded Containers from Cloud to Edge

What are the common challenges and success factors for implementing containerization and microservices? Learn about field implementations of different container, container orchestration, and microservices implementations across organizations of many sizes.  

This webcast will show what the common pitfalls are, industry learnings, and how your organization can take the lessons of others to assess and implement your own microservices and/or containerization strategy.

Follow Eric Wright, Technology Evangelist at Turbonomic, at discoposse.com and @discoposse.

Advantages and Challenges of Containers – Notes From the Field

This presentation explores the benefits and challenges of adopting cloud-native practices for application development and deployment. It highlights the importance of leveraging containers and container orchestration technologies like Kubernetes to achieve scalability, portability, and operational efficiency. You’ll understand key concepts and principles of cloud-native architecture, including how it enables faster software delivery, improved resource utilization, and easier application management. 

Attendees will better understand the strategies and best practices needed to effectively modernize applications and maximize their potential in the cloud-native ecosystem. The presentation will also address potential challenges such as skill gaps, security concerns, and cultural transformation, guiding how to overcome them. By the end of the session, participants will have the necessary knowledge and tools to embark on successful application modernization journeys, empowering them to harness the full potential of cloud-native architecture and drive digital transformation within their organizations.

Topics covered will include:
- Scalability: Cloud-native architectures enable applications to scale easily and efficiently. 
- Portability: Cloud-native architectures promote application portability across different cloud providers and environments. 
- Operational Efficiency: Cloud-native practices promote automation and streamline operational tasks. 
- Faster Software Delivery: Cloud-native architectures facilitate faster software delivery through continuous integration and continuous deployment (CI/CD). 
- Resilience and Stability: Cloud-native architectures enhance application resilience and stability. 
- Cost Optimization: Cloud-native approaches can optimize resource utilization, enabling organizations to control and manage costs.

Modernizing Applications With Cloud Native Architecture and Containers

For the last few years, there has been an ongoing debate about multi-cloud/hybrid cloud vs single cloud approach. However, there is increasing evidence that the future will be multi-cloud. Data from a recent survey released by Forrester Research indicates:

62% of public cloud adopters are using 2+ unique cloud environments/platforms

74% of enterprises describe their strategy as hybrid/multi-cloud today

So, the question is what does this mean for your applications? Does adopting multi-cloud increase management complexity? How can you effectively control and manage spend?

In this webinar, we will discuss the benefits and challenges of a multi-cloud approach. We will see how containers are becoming a key building block for enabling application portability and how Kubernetes is becoming the toolbox across clouds. Finally, we will discuss real-world best practices for enabling multi-cloud deployments.

About the speaker:
Ritesh Patel is co-founder of Nirmata and has 20+ years experience building and delivering enterprise software solutions and has led highly successful software and business development teams. Ritesh began his career in engineering for high tech firms and has since migrated to the business side of the operation. In his founding of Nirmata, Ritesh sought to bring his broad spectrum of experience to a single previously unaddressed industry problem through the creation of a new business. To Nirmata’s leadership, Ritesh brings a rare skill set incorporating experience with the entire chain of software development activities. This background has contributed to Nirmata’s commitment to empowering all employees to do the hard work required to deliver tools that solve tough problems.

Getting Ready for a Multi-Cloud Future with Containers and Kubernetes

Hybrid Cloud has become synonymous with Kubernetes and “Containers” through high charged marketing campaigns from IT behemoths. However, container platforms are just one technology platform potentially included within small, medium or enterprise customer Hybrid Cloud Architectures.  

This presentation describes hybrid cloud as a strategy, then as an architecture, and finally it describes the key technologies involved moving forwards and the areas of Next-Gen Hybrid Cloud still requiring standards development, products and service offerings.

Join as we discuss:
Some of the new Enterprises started with a Public Cloud strategy (e.g. Netflix, AirBnB, etc.).
As soon as most organisations are sufficiently mature to require a business O365 service, the organisation then becomes multi-cloud.
Managing a multi-cloud environment is challenging without a hybrid cloud strategy.
What principles might a hybrid cloud strategy have.
What would you expect from the Next-Gen Hybrid Cloud (what should it do).
What are the current relevant product offerings?
This is not just about containers!

Exploring Next-Gen Hybrid Cloud: More Than Containers

Containers in the Enterprise

Kubernetes security is crucial in ensuring the safety and integrity of your organization's data and systems. However, keeping up with the latest security threats and vulnerabilities can be a daunting task. This is where Kubernetes Goat comes in - a "vulnerable by design" Kubernetes Cluster environment that allows you to practice and learn Kubernetes security in a hands-on way.

In this webinar, Pragmatic Security Leader Madhu Akula presents the latest version of Kubernetes Goat and demonstrates how to use it to identify and mitigate vulnerabilities in Kubernetes and containerized environments. He will cover various attack scenarios and real-world vulnerabilities and show how Kubernetes Goat scenarios can be mapped with them. The session will also explore open-source security tools that can be used to write secure code and deploy secure containers in production.

Key Takeaways:
- Gain practical, hands-on experience with Kubernetes security through 25+ offensive and defensive scenarios.
- Learn about the latest security threats and vulnerabilities in containers, Kubernetes, and cloud-native environments.
- Access detailed documentation, labs, and other resources to continue your learning and development in Kubernetes security.
- And more...

Mastering Kubernetes Security with Kubernetes Goat

Kubernetes

kubernetes security

Cloud Security

Cloud Native

Containerization

Security Threats

Cloud

Cyber Security

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Mastering Kubernetes Security with Kubernetes Goat

Presented by

About this talk

Cloud Computing