Runtime encompasses the behavior of containers after their parent pods have been created in Kubernetes. Runtime security analysis is concerned with finding the indicators of compromise in this behavior.

A Kubernetes focused runtime security strategy should be a combination of what to look for and in what context; who to notify and how that information should be used; and how to identify root cause and use that information to build better policy for defense.

NGINX is not only one of the most widely web server on the internet, but it’s also the most
commonly used data plane for Ingress controllers.  In this episode, along with NGINX's Damian Curry, we’ll discuss how their different microservices technologies – which include an Ingress controller, WAF, and service mesh – add value to OpenShift deployments by giving developers and platform ops teams control of the application data plane. 

The key to successful digital transformation is being able to drive value and insight from new and existing data as fast as possible. Today’s perfect storm of radical change, supercharged by the impact of a global pandemic, makes this more important than ever. How do organizations ensure they remain compliant with ever-increasing data privacy regulation in a landscape that spans clouds and data centers? In this podcast we discuss the role data context plays in making this possible. What it is, how it works and how it provides organizations the opportunity to make better business decisions, faster.

Kubernetes helps us innovate and automate  by eliminating compute  infrastructure dependencies, but traditional ‘bolt-on’ networking and security infrastructure impedes automation and innovation, and is actually not secure in a hyperconnected world.  We can solve this by eliminating dependencies on security and networking infrastructure with a full as-code approach.

On this episode,  learn how NetFoundry and its open source Ziti software, puts Zero Trust connectivity into the nucleus of the application development and delivery lifecycle.  OpenShift K8s apps can be ‘dark’ to the networks – for example blocking ransomware from landing – while improving agility, automation and innovation by abstracting away underlying security and networking infrastructure (Security-as-Code meets Infra-as-Code)

There’s been a lot of talk in the security industry about a ‘zero-trust’ security model as the new way to secure modern cloud services. In this podcast we’ll talk about what zero-trust is and how it relates to enforcing network controls in a container environment. Join our host and guest speaker Glen Kosaka,  VP of Product Management at NeuVector, as we discuss security as code, automation, and declarative security policies.

Cert-manager is a highly popular open source project, first created by Jetstack and now part of the CNCF Sandbox, which has grown to become the de facto solution for managing X.509
certificates in Kubernetes and OpenShift environments. On this episode, alongside Jetstack CTO Matthew Bates,  we chart the rise of this popular project from its creators to its end users in TLS/mTLS machine identity management. 

Qualys is currently the only vendor to secure both container and host operating system for the OpenShift Container Platform providing unparalleled visibility, actionable intelligence, and security auditing to the OpenShift stack while using Red Hat CoreOS. Join Qualys' Spencer Brown, Security Solutions Architect and  Alex Mandernack, Director of Product Management, Cloud Security Solutions as we discuss a full-stack security for the OpenShift Container Platform.  

Red Hat OpenShift and Kubernetes are a fundamental part of successful cloud-native development migrations. Traditional ways of doing application security must adapt to the new dynamism of the cloud-native world because applications continue to be a primary target for anyone looking to steal sensitive data, and organizations continue to be subject to a range of data security regulations. As the world leader in digital security, Thales is partnered with Red Hat to secure customer application development environments, running on OpenShift. Learn how Thales helps organizations secure their data at rest and achieve their data compliance obligations – no matter where their data resides.

Security Week is part of Red Hat’s Security monthly series where you learn how Red Hat weaves together DevOps and Security to master the force called DevSecOps. This podcast brings you Red Hat thought leadership to aid in your journey.  July is Data Controls month! In this episode, Dave Baker, Principal Product Security Engineer from Red Hat, discusses data security controls in Kubernetes and OpenShift, specifically ideas around storing, encrypting, and transmitting data in a cluster environment.