Name: The thing about your software supply chain
Start: 2022-03-29T14:00:00Z
End: 2022-03-29T14:00:32.000Z
Location: BrightTALK
Rating: 0

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and accelerate their digital transformations. The Aqua Platform is the leading Cloud Native Application Protection Platform (CNAPP) and provides prevention, detection, and response automation across the entire application lifecycle to secure the supply chain, secure cloud infrastructure and secure running workloads wherever they are deployed. Aqua customers are among the world’s largest enterprises in financial services, software, media, manufacturing and retail, with implementations across a broad range of cloud providers and modern technology stacks spanning containers, serverless functions and cloud VMs.

Runtime exploitation is a risky business. Malicious actors have developed sophisticated techniques to evade static scans by hiding malware in images and running exploits at runtime. To defend against this new approach and protect your running images, a proactive approach to scanning is required.

Join Aqua Security to discuss runtime security best practices, share real-world examples of evasion, and demonstrate runtime security live using Tracee.   

You will learn:   

-How to proactively detect suspicious runtime behavior?  
-How to identify the hidden tricks bad actors use to evade static analysis  
-The benefits of runtime security using Tracee, Aqua's opensource analysis project and the default analyzer on Github

Aqua Cloud Native Security: The Path to Runtime Security

According to the Cloud Native Computing Foundation’s annual survey, Kubernetes use in production has increased to 83%, up from 78% the year before. 

This suggests that Kubernetes has become a lynchpin for the majority of container deployments, however, by default, Kubernetes is far from secure. Many default settings leave sensitive resources far too accessible, or even downright vulnerable to attack. 

During this webinar, we’ll cover: 

-The most common Kubernetes security pitfalls to avoid 
-How to identify risks in your clusters and workloads (and what to do about them) 
-Prevent the deployment of unsafe and non-compliant workloads

Aqua Cloud Native Security JumpStart: Kubernetes Security

Full cloud native security requires more than application security testing and network monitoring. It requires a concerted approach to vulnerability management within CI/CD pipelines, in pre-production testing, and at runtime.  

Attackers know container images are being statically scanned during the build stage so they’re now exploiting production images. In this session, we’ll show you how to scan CI builds and images but also take you beyond traditional container image scanning to scan for risks that only show up when a container is running.  

In addition to our live demonstration, you will learn:

-Scan CI builds and images based on a constantly updated stream of aggregate sources of vulnerability data (CVEs, vendor advisories, and proprietary research) 
-How to uncover hidden malware and kill chains by detecting hidden risks in container images as if they were running in production. 
-Commercial vs Open Source Scanning: when to use what?

Aqua Cloud Native Security JumpStart: Container Image Scanning

Log4j, fileless execution, crypto-mining, reverse shells –attackers find new ways to infiltrate and exploit your cloud native workloads every day. When a breach can destroy your credibility – every second counts.

In this session, Crystal Poenisch, Senior Product Marketing Manager at Aqua Security,  covers common tactics attackers employ and how you can stop them in real time at every step.

Cloud Native Attacks: Why Runtime Protection is NOT Optional

Supply chain attacks have been the trending topic of the year. But how are attackers actually breaching software supply chains?  What is the real source and impact of these attacks? And how do we break this big problem down into a simple plan of action?  

Join Eran Orzel, co-founder of Argon Security (an Aqua Security company) as he breaks down the findings of a year-long investigation into the software supply chain and the attacks that are threatening enterprises worldwide.

Software Supply Chain: Backdoors to your application hiding in plain sight

In this webinar, we will cover the various security risks and vulnerabilities within the software supply chain, and recreate live how attackers executed a few of the recent supply chain breaches.

The thing about your software supply chain

IT Security

Supply Chain

Security Risk

supply chain software

supply chain breaches

Breach Prevention

Breach Detection

Suppy chain security

Security Breach

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

The thing about your software supply chain

Presented by

About this talk

More from this channel