Name: Securing open source from cloud to edge
Start: 2021-04-15T14:45:00Z
End: 2021-04-15T15:40:00.000Z
Location: BrightTALK
Rating: 5

Get the most in depth information about the Ubuntu technology and services from Canonical. 

Learn why Ubuntu is the preferred Linux platform and how Canonical can help you make the most out of your Ubuntu environment.

As a sysadmin, you need to avoid downtime and ensure high availability. How do you achieve your uptime objective, and ensure this doesn’t come at the cost of security? Canonical's Livepatch service improves the security baseline of running machines, allowing system administrators to apply security patches to the Linux kernel without any disruptions. This webinar will focus on the security and uptime implications associated with live patching the kernel.

In this webinar you will learn about:

- keeping your Livepatch infrastructure up to date
- the importance of security patching medium and below security vulnerabilities in environments with tightly -regulated compliance requirements
- best practices when applying kernel security patches in high availability clusters
- reboot required versus reboot recommended, in the context of machines with Livepatch enabled

How to livepatch Linux kernels in high availability environments

Join us in this webinar to learn about how Ubuntu Pro can help the telecommunications industry safeguard open source telco infrastructure and workloads.

Over generations of telco technologies, the industry has built standards to ensure security and data privacy for the software that runs telco networks. However, total system security can only be achieved when the platforms and the systems where telco software runs are also well protected. Operating systems that host telecommunications software must therefore meet all industry standards and safeguard the running workloads.

Ubuntu Pro addresses that very purpose: It is built to provide you with comprehensive compliance with security standards, such as FIPS, and an unrivaled security coverage promise for commonly used open source toolchains. Now in general availability, Ubuntu Pro provides users with a set of security features for an extensive period of 10 years.

This webinar will cover:

Why security matters in telecommunications
Common security problems in telecommunications
Ubuntu Pro security features for telecom

Speakers:

Serdar Vural, Product Manager, Telco
David Markanich, Business Development Director, Alliances
Lech Sandecki, Product Manager, Ubuntu
Henry Coggill, Product Manager, Security Certifications

Improving Telecom Security in 2023

With the rise of generative AI, enterprises are growing their AI budgets, looking for options to quickly set up the infrastructure and run the entire machine learning cycle. Cloud providers like AWS are often preferred to kick-start AI/ML projects as they offer the computing power to experiment without long-term commitments. Starting on the cloud takes away the burden of computing power, reducing  start-up time and cost and allowing teams to iterate more quickly.

Open source MLOps on AWS

Open source MLOps platforms such as Charmed Kubeflow help developers easily get started with AI, without focusing on operations and maintenance. The software appliance available on the AWS Marketplace is a hassle-free alternative to get access to specialized ML tooling. 

The Charmed Kubeflow appliance is a perfect match for the public cloud, enabling data scientists and machine learning engineers to set up an MLOps environment in minutes and reducing time spent on the setup phase. Users can get familiar with the tool before running AI at scale.

Why join us?

During the webinar, our hosts, Mark Thomas, Solution architect at AWS & Andreea Munteanu, AI/ML Product manager will talk about:
Main challenges of AI/ML
Top 3 industries to benefit from AI/ML
Why choose AWS for AI/ML applications
Benefits of AWS
Open source MLOps on AWS
Run Charmed Kubeflow on a hybrid cloud
The Charmed Kubeflow appliance on AWS

Open source MLOps on AWS

Open-source software adoption is on the rise, but securing open source long-term is a challenge for most organizations who use it. 


According to Synopsys 2023 OSSRA research, around 96% of companies use open source in their codebases. Among them, at least 84% contained known vulnerabilities.

Nowadays, vulnerability exposure lasts for 98 days on average, which means that the majority of organizations are not fixing known vulnerabilities in their codebases for 3 months. This is simply not acceptable in a world of constantly-growing risks and threats.  

Canonical can provide enterprise-grade security to you and your customers with an inexpensive solution.  Ubuntu Pro, Canonical's expanded security maintenance and compliance subscription, is ideal for business builders who want to focus on innovation and be confident of ongoing security maintenance and dependency tracking. 

Join our live partner webinar to discover:
- What is Ubuntu Pro and what is included
- Where to position Ubuntu Pro
- How it can bring you more business opportunities
- Partnering with Canonical


Ubuntu is everywhere. Seize the opportunity to implement it within your customers' businesses.

This webinar is exclusive to Canonical’s business partners

Secure your customers' open source ecosystems with Ubuntu Pro - Americas

Secure your customers' open source ecosystems with Ubuntu Pro - Europe/Asia

Artificial Intilligence and Machine Learning are hot topics these days, with more enterprises announcing huge investments in powerful computing hardware and new LLM models all over the news. It translates into a clear need to also optimise and search for machine learning tooling, that enables the desired return on investment for all these projects.

Kubeflow vs MLFlow

Started by Google a couple of years ago, Kubeflow is by design an end-to-end MLOps platform for AI at scale. Canonical has its own distribution, Charmed Kubeflow addresses the entire machine-learning lifecycle. It is, in fact, a suite of tools, such as Notebooks, for training, Pipeline for automation, Katib for hyperparameter tuning or KServe for model serving and more. Charmed Kubeflow benefits from a wide range of integrations with other tools such as MLFlow, Spark, Grafana or Prometheus. 

MLFLow on the other hand celebrated last year 10 million downloads, being a very popular solution when it comes to machine learning. Started initially with a core function, the tool has nowadays four conceptions that include model registry or experiment tracking.

So, the main question arises: which one should you choose for Machine Learning Operations? 

Kubeflow vs MLFLow is a panel discussion with Maciej Mazur - AI/ML Principal Engineer at Canonical, Kimonas Sotirchos - Kubeflow Community Working Group Lead and Engineering Manager at Canonical about:

Production-grade MLOps
Open-source MLOps
Community-driven ML tooling
Kubeflow vs MLFlow; Pros and Cons

Kubeflow vs MLFlow

In a world where security breaches are a daily headline, the need for reliable and compliant digital solutions is paramount. For example, U.S. agencies and contractors require FIPS compliance to provide an extra layer of protection for sensitive government data or personal information like healthcare, helping to prevent unauthorised access and ensuring data integrity.

Join us for a deep dive into the craft of FIPS-enabled container images and their deployment anywhere, including on cloud platforms and air-gapped environments. 

We’ll also discuss how to combine FIPS compliance with other recent security improvements such as the release of distroless-type, chiselled Ubuntu container images. Join us and don’t miss the opportunity to ask questions to our experts in the live Q&A. 

The webinar will cover:
- Docker container security challenges
- Basics behind FIPS-enabled containers
- Creating, hardening and deploying your containers
- An introduction to chiselled Ubuntu containers

Docker security and FIPS compliance from air gap to cloud

A holistic approach to securing Spark-based data engineering:

Apache Spark is an open source toolkit that helps users develop parallel, distributed data engineering and machine learning applications and run them at scale. In this webinar, Rob Gibbon – product manager, and Massimiliano Gori – senior information security lead, will survey the state of big data security best practices and outline both high level architectures and pragmatic steps that you can take to secure your Spark applications – wherever they may be running.

We will cover: 
An introduction to Apache Spark - what it is and how it works
Motives and techniques of bad actors
How to identify and prioritise security requirements.
Pragmatic steps to secure Spark based on Kubernetes and object storage.

Securing Apache Spark Big Data Operations

System hardening is an essential preventative security measure for production systems and critical workloads, especially for regulated industries such as healthcare, finance, telecommunications and the public sector. 

Hardening provides defense in depth by setting safe defaults and configurations, implementing least privileges, enabling robust logging and auditing, and enforcing encryption, in line with security industry best practices such as The Center for Internet Security (CIS) benchmarks. CIS uses a consensus process to release benchmarks to safeguard organisations against cyber attacks. To facilitate hardening and the application of these benchmarks on Ubuntu, customers can use Canonical’s automation tooling, the Ubuntu Security Guide (USG).

Canonical has published the CIS benchmark hardening profile for the Ubuntu Security Guide on Jammy Jellyfish. This release provides automated remediation and auditing at scale for Ubuntu Pro customers, bringing 22.04 LTS systems in line with the industry standard CIS hardening benchmarks. The USG tool is available for previous Ubuntu releases, and now extends to the latest Ubuntu LTS. 

In this webinar, we will explain what the CIS benchmarks are all about and the range of configuration options that they touch. Then, we will discuss what the Ubuntu Security Guide tooling provides to Pro users, and demo how easy it is to install and run USG to create a hardened environment. And of course we will include some tips and tricks to make the process easier.

CIS hardening benchmarks automation now available for Ubuntu 22.04 LTS

Open source is everywhere, but what’s its role in your company? According to Synopsys 2023 OSSRA research, around 96% of companies use open source in their codebases. From which at least 84% contained known vulnerabilities.

Nowadays vulnerability exposure lasts for around 98 days, which means that the majority of companies are not fixing known vulnerabilities in their codebases for 3 months. This is simply not acceptable. 

With this in mind we created Ubuntu Pro.

Ubuntu Pro is an additional set of features on top of your existing Ubuntu LTS.  The LTS is still secured in exactly the same way it has always been, with five years of security updates for the ‘main’ packages in the distribution, and best-effort security coverage for everything else. 
Ubuntu Pro is an additional stream of security updates and packages that meet compliance requirements such as FIPS or HIPAA, on top of an Ubuntu LTS. Ubuntu Pro was launched in public beta on 5 October, 2022, and moved to general availability on 26 January, 2023. Ubuntu Pro provides security fixes for the entire distribution (‘main and universe’ packages) for ten years, with additional extensions for industrial use cases.


During this webinar we will discuss:
- What is Ubuntu Pro
- What is included
- Pricing

What is so Pro in Ubuntu Pro?

How to build carrier-grade infrastructure using enterprise open source solutions

Service providers need cloud infrastructure everywhere, from modern 5G and 6G network functions running in the network core to sophisticated AI/ML jobs running on the edge. Given the sensitivity of those workloads for any interruptions, outages or performance degradations, the cloud infrastructure used by telcos needs to be fast, robust and ultra stable. But there is one more criterion that plays an important role in telcos’ decision-making process: more and more of them are turning to open source these days.

Telco cloud deployed “the open source way”
In this webinar we will explore open-source cloud infrastructure components, including OpenStack and Kubernetes, as an alternative to proprietary solutions. We will demonstrate that using enterprise open-source solutions unlocks a number of advantages, such as better economics and faster pace of innovation, while ensuring the same level of support as provided by other vendors. The webinar will also provide an overview of HPE Telco Validated Design with Canonical OpenStack and Kubernetes.

Join the webinar on 25 May at 6pm CET to learn how to build carrier-grade infrastructure using enterprise open-source solutions from Canonical and Hewlett Packard Enterprise.

The webinar will cover:  
- The most typical challenges that service providers face
- How OpenStack and Kubernetes help them to address those challenges
- Use cases for OpenStack and Kubernetes in the telco space
- An overview of Canonical infrastructure solutions
- An overview of HPE infrastructure solutions
- HPE Telco Validated Design with Canonical OpenStack and Kubernetes

Telco cloud implementation: Build carrier-grade infrastructure using open source

Public clouds heralded a new era of IT infrastructure flexibility, deployment times reduced from months to minutes, but, at what cost?  Meeting this dynamic demand results in higher operating costs for the hyperscale public clouds, which in turn are passed on to their users. $0.021 per GB sounds cheap, but just how much is the TCO of a multi-PB data set over 5 years?

The funny thing when it comes to storing data is that it typically does not match the ebb and flow of compute requirements, data needs to exist at all times, so this does not fit with the popularised model of scale-up/scale-down resource allocation.

So, what can we do to optimise our storage costs in the public cloud? Deploying Ceph in a cloud adjacent model can help enterprises reduce their storage costs by over 50%, and open themselves up to multi-cloud freedom by hosting their data adjacent to multiple public clouds.  

Cloud adjacent storage with Ceph:
In this webinar, we will discuss how you can store your data in a near-cloud datacenter which will not only reduce your storage TCO, but bring you full control over your data, and the ability to use that data in whichever public cloud you so wish.

We will walk through a scenario where Charmed Ceph is deployed on Dell Poweredge hardware in a co-location facility adjacent to a public cloud region.

We will cover the following:
1) Cloud storage challenges and economics
2) Workloads that suit this model
3) What is Cloud adjacent storage?
4) TCO analysis of both solutions
5) Hardware and cluster configuration choices
6) Using open source Charmed Ceph
7) Managed Operations

Optimise cloud storage costs with Ceph

KubernetesとOpenStackは、いずれも確立されたオープンソースプロジェクトであり、現代のクラウド環境のインフラストラクチャを構成する必須要素です。競争のある経済、ベンダーロックインがない、革新のペースが速いなど、どんな種類や希望の組織にもメリットがあります。しかし、どちらを選ぶかが難しいところです。

OpenStackとKubernetes：どちらを選ぶ？
よくある悩みです。このウェビナーを参考に、それぞれの組織に最適な決断を下していただければ幸いです。まずKubernetes、OpenStack、それらの類似点と相違点を紹介します。その後、どちらかを使用したほうが良い場合、1つのプラットフォームで両方を同時に使用したほうが有利な場合について説明します。最適なソリューションを調べるため、パブリッククラウドからエッジ、開発から実運用まであらゆるコンピューティング環境を検討します。

この実用的なウェビナーでは、すべての機能を統合したスタックを実行し、Ubuntuで従来のワークロードとクラウドネイティブのワークロード（OpenStackでKubernetes、KubernetesでOpenStackなど）を実行するメリットもデモでご紹介します。5月17日午後12時のウェビナーで、世界をリードするオープンソースインフラプロジェクトを実際にご覧ください。

ウェビナーの内容：
• KubernetesとOpenStackの類似点と相違点
• Kubernetes、OpenStack、統合スタックの使用事例
• OpenStackでKubernetesを実行するメリット
• KubernetesでOpenStackを実行するメリット
• UbuntuでKubernetesとOpenStackを実行するメリット

OpenStackとKubernetes: どちらを選ぶ？

One year ago, we celebrated the release of Ubuntu Core 22, the Ubuntu flavour optimised for IoT and edge devices.

With 4 releases behind, Ubuntu Core 22 has been largely adopted by enterprises as an embedded operating system. It successfully solves many of the key challenges the IoT and edge devices makers are facing. 

Join us in this 2023 live edition of "Intro to Ubuntu Core 22". You will be able to ask your questions to our speaker, Mohit Kedia, Director of IoT Product Management at Canonical.

In this webinar, you will learn:
- Everything you need to know about Ubuntu Core
- A recap of the latest features of Ubuntu Core 22
- Why Ubuntu Core 22 is the embedded operating system chosen by many key players

Intro to Ubuntu Core 22

Developing and running Linux workloads in regulated and high-security environments require a long and expensive validation process. As a result, U.S. government agencies and companies that are required to meet government standards and/or deploy to meet their RMF, ATO or FedRAMP or GOVCloud demands will typically need to make large investments, ensuring that they run on robust and secure infrastructure platforms.

Thanks to Ubuntu Pro and AWS you can have highly secure and FIPS enabled Open Source Linux instances running in no time. Having confidence in your federally regulated CVE’s not only for your Ubuntu Linux O/S, but also your Installed Application packages is something that many have asked for in the Open Source community.  The flexibility and instant elasticity offered by the Ubuntu Pro within AWS will give you peace of mind while quickly scaling your cloud infrastructure.  

In this webinar, we will look at Ubuntu Pro with FIPS and additional security controls we provide at a higher level for agencies or missions to help you meet your security and compliance requirements. The session will also include a demo that shows how easy it is to start securing the Ubuntu Operating System within the AWS cloud.

The webinar will cover the following topics:
What does it mean to have a FIPS enabled Operating System?
Application of FIPS, FedRAMP, DevSecOps, RMF, ATO and/or GovCloud
What is Ubuntu Pro with CVE updates in relation to the Repo’s?
Security for the O/S and your Application Packages
How can you start using Ubuntu Pro on AWS
How security controls and processes are used within agency missions
Demonstrate how easy some of these controls are implemented

FIPS Enabled Ubuntu Pro on AWS (FedRAMP, GovCloud and more)

With looming macroeconomic uncertainties affecting growth, a new wave of companies are trying to control costs by downsizing their staff and reducing infrastructure costs. As a result, tech companies like Ahrefs and Basecamp have decided to move away from public clouds and repatriate their workloads. But workload repatriation also entails a complex data migration effort. 

Data is often one of the most valuable assets of a company. Therefore, data migration projects can be daunting as they might endanger these assets if executed poorly. Gartner predicted that “more than 50% of data migration initiatives will exceed their budget and timeline—and potentially harm the business—because of flawed strategy and execution”. 

In this webinar, we present a strategy to successfully plan, design and execute your data migration. We will also present a number of open-source solutions that can help you:

Build a cost-effective storage solution to host your data 
Secure your data
Automate your database operations

Define a data migration strategy

Kubernetes and OpenStack are well-established open-source projects and essential infrastructure components for building modern cloud environments. They bring tangible benefits to organisations of any type and size, including competitive economics, no vendor lock-in and fast paced  innovation. However, it can be difficult to choose between them. 

Kubernetes or OpenStack: which one to choose?

Sounds like a common dilemma? In this webinar, we will try to solve it, helping you make right decisions that best suit your organisation. We will discuss Kubernetes, OpenStack, their similarities, and the differences between them. We will walk you through use cases where using one or the other makes more sense, as well as use cases where it’s most beneficial to use both on one platform at the same time. In search of best-fit solutions, we will look around the entire compute spectrum: from public clouds to the edge and from development to production.

During this technical webinar, we will also provide demos covering the benefits of running a fully-integrated stack for traditional and cloud-native workloads on Ubuntu, including both Kubernetes on OpenStack and OpenStack on Kubernetes use cases. Join the webinar on 5 April at 6pm CET to see these world-leading open-source infrastructure projects in action.

The webinar will cover:  
1) Similarities and differences between Kubernetes and OpenStack
2) Use cases for Kubernetes, OpenStack and an integrated stack
3) The benefits of running Kubernetes on OpenStack
4) The benefits of running OpenStack on Kubernetes
5) The benefits of running Kubernetes and OpenStack on Ubuntu

OpenStack vs Kubernetes

Building upon years of contributions from the wider Linux community, Ubuntu is the most widely used OS among professional developers and the preferred open-source enabler for thousands of development teams.

But Linux on devices must be treated differently than on servers to reduce the cost of maintenance and the risk of failure in the field. To respond to this need, Canonical developed Ubuntu Core, an Ubuntu flavour optimised for embedded devices.

Ubuntu Core is also open source, binary-compatible and backed by a strong developer community but it is specifically designed for the world of IoT.  It is optimised for security and reliable OTA updates, with its entire ecosystem engineered to solve the major bottlenecks behind shipping embedded Linux devices in production.
In this webinar, we will discuss:

- The challenges of managing IoT and edge devices at scale
- The key security pillars before going to production with embedded Linux
- Why Ubuntu Core is the new standard for the embedded world

Embedded Ubuntu for devices

As major organisations migrate and continue to build, test and deploy across open source technologies, security of those platforms is always top-of-mind. With Ubuntu, security is built in from its foundation, making it a popular Linux distribution used by developers and a secure platform for production environments across any multi-cloud infrastructure, even extending to devices and edge computing. 

The Ubuntu security team at Canonical is constantly working to review threats, fix vulnerabilities and upgrade security capabilities for releases to protect your systems and mission-critical workloads.

Get the full Ubuntu security story and see how our teams are securing Ubuntu systems across cloud, device and edge environments.

In this webinar, join our team to learn how:
- Ubuntu is built with security in mind from the ground up, and how we keep you protected against major vulnerabilities
- How you can ensure performant open source in production environments
- Specific security services that can help you achieve maximum availability by reducing downtime and providing access to high and critical CVE fixes
- Ubuntu helps organisations remain compliant with government and industry standards and regulations, including Common Criteria EAL2 with FIPS 140-2 Level 1 certified crypto modules

Securing open source from cloud to edge

Open Source

Security

Cyber Defence

Cyber Incident Response

Cyber Attacks

Compliance

Vulnerabilities

Vulnerability Management

Ubuntu

FIPS

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The application development community features top thought leadership focusing on optimal practices in software development, SDLC methodology, mobile app development and application development platforms and tools. Join top software engineers and coders as they cover emerging trends in everything from enterprise app development to developing for mobile platforms such as Android and iOS.

Application Development

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

Join thousands of engaged IT professionals in the application management community on BrightTALK. Interact with your peers in relevant webinars and videos on the latest trends and best practices for application lifecycle management, application performance management and application development.

Application Management

Get powerful end user computing insights from influential EUC experts. Connect with thought leaders and colleagues to get the most up-to-date knowledge on effective approaches to get non-programmers to create working applications.

End User Computing

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Securing open source from cloud to edge

Presented by

About this talk

More from this channel