Cloud Native Computing Meetup | May 2023: Cloud Native Security

Please join our May 2023 CNC meetup on Thursday, May 25th 2023 at 16:00 CEST, with an event entirely dedicated to Cloud Native security topics!

Location:
Ergon Informatik AG
Merkurstrasse 43
8032 Zürich
Switzerland

How to find us:
Take tram 8 or 11 or the S18 train to Kreuzplatz, and walk down Zeltweg towards Merkurstrasse. Or take the S-Bahn train to Stadelhofen, and walk along Kreuzbühlstrasse and Merkurstrasse (10 minutes). Or take buses 31 or 33 to Sprecherstrasse and walk down Zeltweg towards Merkurstrasse.

Agenda:
16:00 – Door Opening
16:10 – Welcome, Intro, & Announcements
16:15 – Session 1: "Bypassing Security Controls" by Philippe Bogaerts (Fortinet)
16:45 – 5 minutes pause
16:50 – Session 2: "Constellation - The first always encrypted Kubernetes" by Moritz Eckert (Edgeless Systems)
17:20 – 5 minutes pause
17:25 – Session 3: "Web application security in a DevOps environment" by Stefan Dietiker (Ergon Informatik AG)
17:55 – Final words
18:00 – Networking & apéro

Session 1: "Bypassing Security Controls" by Philippe Bogaerts (Fortinet)
Adopting a DevSecOps approach will ensure security from the moment code is produced until deployed in production. Let’s discuss some pitfalls based on personal research as well as some solutions to ensure peace of mind.

Philippe brings more than 20+ years of experience in security. Being a pioneer in firewall, reverse proxy, and load-balancing, Philippe specialized in web application security with a focus on penetration testing and web application firewalling. Today, Philippe contributes mostly by writing blog posts, talking at meetups as well as co-organizing a renowned security conference. Philippe is a cloud solution engineer at Fortinet.

Session 2: "Constellation - The first always encrypted Kubernetes" by Moritz Eckert (Edgeless Systems)
Confidential computing allows one to keep workloads encrypted and isolated in memory during processing. Constellation is an open-source K8s distro/engine that applies the confidential-computing concept to entire K8s clusters. In this talk, Moritz will introduce confidential computing, discuss the motivation behind Constellation, give an overview of its architecture, and show a live demo.

Moritz Eckert is a passionate cybersecurity expert. He was a software security researcher at EURECOM and UC Santa Barbara. He joined Edgeless Systems in 2020, where he now leads product development. Moritz has presented at top-tier cybersecurity conferences, including Usenix Security Symposium and RSA Conference.

Session 3: "Web application security in a DevOps environment" by Stefan Dietiker (Ergon Informatik AG)

In a DevOps world, developers want to release often and quickly. Centralized application firewalls can slow down this continuous delivery process. The delay is caused by the coordination between firewall operators and app owners to apply the correct changes in security rules. Stefan explains how this pain point can be eliminated with decentralization. So-called micro gateways allow application security to be included in the DevOps process. This shifts the ownership of application security rules to the application team. This increased autonomy restores the short delivery times and also improves security.

Stefan Dietiker has been working in application security for more than ten years. He is a security engineer and is familiar with customers' issues. Since 2021, he has been the product manager of Airlock Microgateway.

The event will be recorded and made available later on VSHN's YouTube channel: https://vshn.tv – subscribe to be notified of updates!

We expect all participants to abide by VSHN's Conference Code of Conduct: https://www.vshn.ch/en/code-of-conduct/

If you would like to talk about your cloud-native projects in the CNC Switzerland meetup events, just send us your talk suggestion here: https://cnc-meetup.ch – we look forward to hearing from you!