Cloud Native SecurityCon North America 2022: Schedule

7:30am EDT

Badge Pick-Up + Vaccine or Negative COVID-19 Test Verification Fort Pontchartrain Hotel | Lobby Level, Fort Pontchartrain Room Badge Pick-Up + Vaccine or Negative COVID-19 Test Verification Detroit Marriott at the Renassaince | Level 3, Ontario Foyer Badge Pick-Up + Vaccine or Negative COVID-19 Test Verification Huntington Place Detroit On-site COVID-19 Test Kit Pick-Up Fort Pontchartrain Hotel | Lobby Level, Fort Pontchartrain Room

9:00am EDT

Opening Remarks + CTF Overview - Andrew Martin, ControlPlane Room 330 AB

9:20am EDT

Keynote: Crossing the Kubernetes Network Policy Chasm - Michael Foster, Red Hat, Community Lead - StackRox Room 330 AB

9:30am EDT

Keynote: Why Developer Laptop Security is Key to Securing Your CI/CD Pipeline - Jeremy Colvin, Technical PMM, Uptycs Room 330 AB

9:40am EDT

Securing Access to Kubernetes Infrastructure with Kubernetes Zero Trust Principles - Mohan Atreya, Rafay Systems Room 330 AB

10:10am EDT

☕ Coffee Break + Networking Level 3 Foyer

10:25am EDT

Cloud Native Security for the Rest of Us - Tiffany Jernigan, VMware Room 330 AB

11:00am EDT

Day in the Life of a Base Image: The Evolution of Vulnerabilities in the Most Popular Containers - Ayse Kaya, Slim.AI Room 330 AB

11:35am EDT

Panel Discussion: Securing the Golden Path: Adding Guardrails for Developers Without Getting in Their Way! - Moderated by Aradhna Chetal, TIAA; Elizabeth Vasquez Alban, Barclays; Kapil Bareja, Saviyant; Jim Bugwadia... Room 330 AB

12:15pm EDT

🍲 Lunch + Networking Hall E

1:25pm EDT

Building Images for the Secure Supply Chain - Adrian Mouat, Chainguard Room 330 AB An Introduction to Capture the Flag - James Cleverley-Prance, ControlPlane Room 333

2:00pm EDT

How’s Your Supply Chain with Your Insecure OSS Ingestion? - James Holland, Citi Room 330 AB

2:35pm EDT

Uncovering the History of Your Software Artifacts - Mikhail Swift, TestifySec Room 330 AB

3:05pm EDT

☕ Coffee Break + Networking Level 3 Foyer

3:20pm EDT

Conan.Io – Lessons Learned from Securing 40,000 C++ Packages - Diego Rodriguez-Losada Gonzalez, JFrog Room 330 AB An Introduction to Capture the Flag - James Cleverley-Prance, ControlPlane Room 333

3:55pm EDT

Why Machines Deserve Rights: Rethinking Automated Infrastructure Access with OSS Teleport Machine ID - Kenneth DuMez, Teleport Room 330 AB

4:30pm EDT

Verifiable eBPF Traces for Supply Chain Artifacts with Witness and Tetragon - Cole Kennedy, TestifySec Room 330 AB

5:00pm EDT

Closing Remarks - Eric Smalling, Cloud Native Security TAG Room 330 AB CNCF-Hosted Co-Located Events Reception - Sponsored by OpenSSF & Veritas Huntington Place Square, Level 2 (outside)

7:30am EDT

Badge Pick-Up + Vaccine or Negative COVID-19 Test Verification Detroit Marriott at the Renassaince | Level 3, Ontario Foyer Badge Pick-Up + Vaccine or Negative COVID-19 Test Verification Huntington Place Detroit Badge Pick-Up + Vaccine or Negative COVID-19 Test Verification Fort Pontchartrain Hotel | Lobby Level, Fort Pontchartrain Room On-site COVID-19 Test Kit Pick-Up Fort Pontchartrain Hotel | Lobby Level, Fort Pontchartrain Room

9:00am EDT

Welcome + Opening Remarks - Pratik Lotia, Cloud Native Security TAG Room 330 AB

9:15am EDT

Keynote: Detecting Threats in GitHub with Falco - Loris Degioanni, Chief Technology Officer & Founder, Sysdig Room 330 AB

9:25am EDT

Keynote: Vulnerability Data is Not Enough: The Case for an Actionable UI - Kara Yimoyines, Sr. Engineering Manager, VMware Tanzu Room 330 AB

9:30am EDT

Capture the Flag Experience Room 333

9:35am EDT

Introducing the OWASP Top Ten for Kubernetes - Jimmy Mesta, KSOC Labs, Inc. Room 330 AB

10:05am EDT

☕ Coffee Break + Networking Level 3 Foyer

10:20am EDT

Pwning the CI (with GitHub Action Workflows) - Stephen Giguere, Bridgecrew Room 321 Hands-on Workshop: Batten Down the Hatches! A Cluster Security Journey - Steve Wade, KSOC Labs, Inc. Room 330 AB

10:55am EDT

Policy-Based Governance for End-to-End Integrity Control of Policies - Yuji Watanabe, IBM Research & Jayashree Ramanathan, Red Hat Room 321

11:30am EDT

⚡ Lightning Talk: Assessing Environments Against Cloud Native Security Best Practices - Pratik Lotia, Reddit & Jon Zeolla, Seiso Room 321

11:35am EDT

Source Attestations with Gitsign - Billy Lynch, Chainguard Room 330 AB

11:45am EDT

⚡ Lightning Talk: Securing K8s Pods from Within: A Runtime Approach - Rahul Arvind Jadhav, Accuknox Inc Room 321 🍲 Lunch + Networking Hall E

12:55pm EDT

⚡ Lightning Talk: OPAL: The Open Source GitOps Enabled Platform for Building Authorization - Asaf Cohen, Permit.io Room 321 Hands-on Workshop: Network Policies - The Not-So-Hard Way - Raymond de Jong & Tracy Holmes, Isovalent Room 330 AB

1:10pm EDT

Beyond Proof of Concept: Keys to a Successful SPIRE Rollout in Production - Eli Nesterov, N/A Room 321

1:45pm EDT

Secure CI/CD Using JSON Web Token (JWT) - Dov Hershkovitch, GitLab Room 321

2:05pm EDT

☕ Coffee Break + Networking Level 3 Foyer

2:20pm EDT

Panel Discussion: Say Hi to the New Couple in the Town – DockerSlim and Kyverno – Making Your Kubernetes Workloads More Secure! - Moderated by Mritunjay Sharma, Slim.AI; Shuting Zhao , Nirmata; Ruhika Bulani... Room 321

2:25pm EDT

Hands-on Workshop: Confidential Containers: Bringing Confidential Compute to Kubernetes - Mikko Ylinen, Intel & Tobin Feldman-Fitzthum, T.J. Watson IBM Research Center Room 330 AB

3:05pm EDT

Know Your Dependencies: A Guide to Automating Dependency Assurance - Steve Judd, Jetstack Room 321

3:40pm EDT

See It to Believe It: Bringing Observability to Otherwise Opaque Container Builds - Parth Patel, Kusari & Shripad Nadgowda, Intel Room 321 The Eye of Falco: You Can Escape but Not Hide - Stefano Chierici & Lorenzo Susini, Sysdig Room 330 AB

4:15pm EDT

Fileless Attack - Detecting the Undetectable - Carolina Valencia, Aqua Security Room 321 Getting More Confident with Your Security Helper Libraries Thanks to Go Fuzzing - Jeremy Matos, Grafana Labs Room 330 AB

4:50pm EDT

Closing: "And, That's a wrap!" - Marina Moore + Ragashree M C, Event Program Chairs & Andrew Martin + James Cleverley-Prance, CTF Room 330 AB

5:00pm EDT

CNCF-Hosted Co-Located Events Reception Huntington Place Square, Level 2 (outside)