Name: How to Overcome Common Kubernetes Security Challenges
Start: 2023-11-23T05:30:00Z
End: 2023-11-23T05:30:24.000Z
Location: BrightTALK
Rating: 0

Certificate Lifecycle Management and Network Orchestration

AppViewX is the low-code automation platform that assists global enterprises with PKI certificate management and network infrastructure automation. By focussing on maximizing network security while minimizing the manual effort expended by IT teams, AppViewX has helped over 100 organizations realize lower outages, high visibility into PKI and network environments, and complete control over certificates, keys, and device configurations.

Effectively, we're making the last mile of network automation universally accessible via a flexible platform that will fit into existing architecture, and work with it to deliver rapid results in line with compliance goals. Our webinars are designed to educate viewers about industry trends, product capabilities, and customer implementations.
Browse through our library below, or learn more about us at appviewx.com

The importance of code signing to ensure the integrity and authenticity of software, securing the software supply chain, and extending trust to end users cannot be overstated. Yet, many organizations continue to practice code signing with ad-hoc processes and mismanaged private keys, exposing themselves and their software to supply chain attacks. 

How do you mitigate this risk? How do you ensure your code signing practices are efficient, reliable, and secure? 

Join us for an insightful webinar featuring Ganesh Gopalan, Vice President of Product Management at AppViewX, as he shares practical strategies for modernizing code signing processes to tackle DevOps challenges and strengthen the overall software supply chain.

Here’s what you’ll learn:
● The power of secure code signing in modern software supply chains
● How to meet the new CA/Browser Forum code signing requirements
● The strategies to integrate code signing into the DevOps pipeline
● How to give security teams better visibility and control over code signing

How to Safeguard Your Software Supply Chain with Secure Code Signing

Zero-Trust is not a final destination, it’s an ongoing journey. It requires a fundamental shift in how organizations approach security in today’s dynamic threat landscape.

Tune in to this webinar as Manthan Raval, Senior Solution Architect at Amazon Web Services, discusses the essential elements of Zero-Trust implementation, highlighting key examples of how AWS has incorporated micro-segmentation, authorization simplification, and streamlined access to internal applications.

Discover in this webinar:
• The fundamentals of Zero-Trust security models at scale
• How AWS incorporates Zero-Trust principles to protect critical assets
• Practical examples of micro-segmentation and simplified authorization processes
• And more.

Zero-Trust at Scale: The AWS Perspective and Principles You Need To Know

As the digital landscape evolves, the integration of machine identities alongside human identities becomes imperative to establish a zero-trust future for your organization.

Join Geoff Cairns, Principal Analyst at Forrester Research, as he dives into the critical shift of zero-trust strategies towards a robust identity-first security approach, and how organizations can seamlessly blend human and machine identity management while minimizing risk.

Tune in to this webinar to find out how an integrated, human-machine identity security approach has become a game-changer for traditional zero-trust strategies.

Zero-Trust, Not Zero People: Building a Human-Machine Identity Approach

Kubernetes is a highly complex environment to secure and native security controls offered by Kubernetes and other open-source solutions often fall short. 

PKI-based TLS certificates are highly-recommended for Kubernetes security. With identities, authentication, and encryption - TLS certificates offer an effective way of securing multiple layers in Kubernetes, encompassing the Ingress traffic, Service Mesh and pod-to-pod communications, and Kubernetes infrastructure components. 

However, managing a high-volume of short-lived TLS certificates in Kubernetes is not easy. Issuing certificates at DevOps speed while ensuring certificates are valid, secure, and compliant, can become extremely daunting for security teams. 

The key to navigating these challenges and bringing security up to speed with DevOps lies in simplifying certificate lifecycle management for Kubernetes. 

Join our webinar with, Harshana Morthy, Lead Principal Solutions Architect, AppViewX for a deeper dive on: 

- Fortifying Kubernetes security with PKI and TLS/mTLS certificates 
- The challenges of managing certificates across Kubernetes environments 
- How to simplify and modernize Certificate Lifecycle Management to harden Kubernetes security and enable DevOps speed and agility

Simplifying Certificate Lifecycle Management for Kubernetes Environments

The obligation to manage and quickly renew millions of certificates creates a perfect storm for businesses with limited internal resources and personnel. After all, how can you possibly manage the certificate lifecycle at this scale, coupled with the difficulty of recruiting in cryptography? 

Our panel session focuses on this central issue, moderated by Christian Simko, Vice President of Product Marketing at AppViewX, and including two AppViewX customers: Guruprasad Ramamoorthy, VP and Global Head of Infrastructure and Network Services at S&P Global, and Thierry Marier-Bienvenue, Director of Cybersecurity Evolution at Desjardin. 

Access the session as these experts delve into the critical aspects of certificate lifecycle management automation, with a focus on the challenges faced and the benefits obtained through automation. 

We'll also explore the integration of certificate management into an identity-first security strategy, discuss Google's 90-day TLS validity proposal, and address the preparations needed for post-quantum cryptography, emphasizing the importance of crypto-agility in security efforts.

Certificate Lifecycle Management Automation Benefits for Crypto-Agility

AVX Session - Christian Simko, Vice President of Product Marketing at AppViewX, will be leading this session, joined by our Chief Product Officer, Ravishankar Chamarajnagar , who will introduce AppViewX's latest product lineup, including KUBE+, SIGN+, and SSH+, addressing critical challenges in the field of certificate and key management. He also discusses the importance of crypto-agility in the ever-changing landscape of cryptography, with Google's 90-day TLS proposal and the impending post-quantum cryptography era. Organizations should start preparing for shorter TLS certificate lifespans today and get ready for post-quantum cryptography.

AppViewX Product Q&A with Ravi Chamarajnagar

Securing and validating the legitimacy of life-saving medical devices is perhaps one of the most crucial applications of effective device security. Moreover, integrating the use of Public Key Infrastructure (PKI) into this strategy allows one to:
• Comply with regulatory agencies’ Internet of Medical Things (IoMT) compliance standards
• Mitigate the risk of counterfeited devices
• And improve trust in patient data.  

In this talk, Xiaomin Chen, PKI and Cybersecurity SME at Dexcom, addresses the growing problem of attacks on IoMT devices by describing how to implement a robust device security solution. 

Watch this session to explore the concept of establishing an IoMT Root of Trust and immutable device identity, as the FDA and other government organizations worldwide advocate for the use of PKI to enhance IoMT security.

5 Ways PKI Prevents Burgeoning Medical Device Security Attacks

One of the significant policy changes through which Google intends to improve internet security is to reduce the maximum validity period for public TLS certificates from 398 days to 90 days. What does this mean for your business? Simply put, more frequent certificate renewals; public TLS certificates will require renewals four times a year.

The challenge begins here, as many companies are still managing TLS certificates manually, which grows increasingly difficult at scale. 

Tune into this webinar to hear from Christopher M. Steffen, Vice President of Research at ENTERPRISE MANAGEMENT ASSOCIATES® (EMA™), and Murali Palanisamy, Chief Solutions Officer at AppViewX, who shed light on the impact of Google's proposal to reduce TLS certificate validity on business security and compliance.

SSL/TLS Certificate Security Management & Expiration Challenges

AppViewX’s CEO, Gregory Webb, starts the Digital Identity Protection Day event with his thoughts on identity-first security trends and zero-trust. He emphasizes the importance of certificates and the challenges associated with managing digital identities, particularly machine identities. He also outlines a path to achieve crypto agility, which involves improving visibility, automation, control, and eventually reaching a state where organizations can efficiently manage digital identities, especially certificates, in a highly automated and secure manner.

Welcome note from the CEO's desk

Digitally signing code is critical to the software development process to validate the integrity of the code and authenticity of the software. However, lax code signing processes and the mishandling of certificates and private keys has led to many high-profile software supply chain vulnerabilities and attacks.
 
To address this, new code signing requirements from the CA/Browser Forum went into effect on June 1, 2023. This major change now requires the use of FIPS 140-2 Level 2 or Common Criteria EAL 4+ hardware security modules (HSMs) or tokens to store and protect private keys associated with all publicly trusted code signing certificates.
 
While this change is initially disruptive, it can also be used to modernize and improve your code signing process. By implementing a SaaS code signing solution backed by a compliant cloud-based HSM, you can seamlessly integrate secure and compliant code signing into your CI/CD pipeline.  
 
Join experts from AppViewX and Fortanix as we discuss this change, the impact to you and an integrated cloud signing and HSM solution you can deploy today. Here’s what you’ll learn by attending:
Instant SaaS deployment and rapid time to value
Fully compliant HSM and secure code signing process
Seamless integration with CI/CD pipeline to boost performance
Accelerate agile and secure software development

Accelerating DevOps with Secure Code Signing and Key Storage in the Cloud

Machine identities greatly outnumber human identities but they continue to be a blind spot for most identity and access management programs. In this webinar, Marc Airo-Farulla, Regional Sales Director at AppViewX, will discuss the challenges of identity-first security and why machine identity management is critical to achieving Zero Trust.

Public Key Infrastructure (PKI) is an essential component to providing trusted identities for machines which include, PCs, mobile, networking and IoT devices as well as servers, applications, cloud services and containers. These trusted identities are verified using digital certificates that enable secure access and authorization and encrypted communication and transactions.

With the increasing complexity of hybrid multi-cloud environments and frequency of cyberattacks, effective certificate lifecycle management has become more important than ever before. However, the challenge is that many enterprise organizations are still using inefficient manual processes and cannot manage certificates at scale.
 
Marc shares his insights and expertise on the key components of a successful certificate lifecycle management program, including automation for continuous discovery, inventory, monitoring, and renewal. He also discusses the potential risks and challenges of certificate management, and offers practical tips for ensuring compliance with industry standards and regulations.

Whether you're a business owner, IT professional, or cybersecurity expert, you won't want to miss this informative and engaging episode. Join us as we explore the challenges of managing machine identities, the role of certificate lifecycle management and how achieving identity-first security will put you on the path to Zero Trust.

Identity-First Security, the Foundation for Zero Trust

Google recently announced a proposal to reduce the maximum validity period for public TLS certificates from 398 days to 90 days. This is a massive change that all organizations need to be aware of now to start preparing for how to renew all public TLS certificates four times a year.

What is the objective behind these proposed changes? What’s the impact on certificate management and how should organizations prepare?
 
Certificate lifecycle management automation is the only way to keep up with short-lived certificates to ensure your internet applications are available and secure. Start preparing now!

Join Muralidharan Palanisamy, Chief Solutions Officer, AppViewX to learn and understand:

- Google’s proposal to reduce the TLS certificate validity 
- The impact of short-lived certificates and how to prepare
- How to achieve certificate lifecycle automation and crypto-agility at scale with AppViewX CERT+

Crypto-Agility Automation: Prepare Now for Google’s 90-Day TLS Validity Proposal

Digital transformation projects continue to push more business critical applications, services and workloads to the cloud. While this progress helps foster greater employee production, new customer experiences and increased revenue opportunities, it also presents new cybersecurity challenges. Zero Trust security is the approach every enterprise organization is striving to achieve today. But, are security teams thinking about a complete human and machine identity and access management (IAM) strategy across all cloud environments for Zero Trust?

In this webinar, CSA, AWS and AppViewX will discuss the importance of robust cloud security and the hidden challenges of machine identities. We will detail how achieving Zero Trust requires every person and every “thing” to have a trusted identity. And, why IAM to control and segregate user access is not enough as you must also manage thousands to hundreds of thousands of digital identities for applications, services, machines and devices across the entire enterprise cloud environment. Lastly, we will share a prescriptive course of action for how automation can help establish identity-first security best practices—the foundation for Zero Trust.

Hidden Cloud Security Challenges Are a Barrier to Zero Trust

This webinar will focus on the importance of managing an inventory post-discovery – essentially knowing who has access to your critical certificates, and how secure they are. It will also communicate the value of a certificate management tool like CERT+ that allows users to delegate granular access while also safeguarding private keys. 

During this webinar we’ll go over: 
• The critical capabilities that can ensure the security of your digital certificates
• Real-world problems that our customers faced before switching to our solution
• A demo of AppViewX CERT+ that displays how the solution can help protect and manage your certificate inventory efficiently

SSL/TLS Certificate Management 102 - How to Manage?

Deploying Kubernetes effectively requires a practiced hand that understands the security and compliance nuances, including vulnerability analysis on code, multifactor authentication, simultaneous handling of multiple stateless configuration requests, and many more considerations.

Luckily, our panel of experts is equipped to assist you with this very topic. 

Ganesh Janakiraman, Head of Cloud Platform Engineering at Broadcom, joins Ravishankar Chamarajnagar, Chief Product Officer at AppViewX, in this panel discussion to shed light on how to overcome the security challenges in Kubernetes environments and the importance of TLS certificates. 

Tune in to discover how to tackle your own pressing K8s security challenges, as well as hear how AppViewX is helping Broadcom provide visibility, automation, and control of certificates in their Kubernetes environment.

How to Overcome Common Kubernetes Security Challenges

Web Security

Web Application Security

Encryption

Network Security

Digital Identity

Containers

Container Security

Kubernetes

Are you an IT service management professional interested in developing your knowledge and improving your job performance? Join the IT service management community to access the latest updates from industry experts. Learn and share insights related to IT service management (ITSM) including topics such as the service desk, service catalog, problem and incident management, ITIL v4 and more. Engage with industry experts on current best practices and participate in active discussions that address the needs and challenges of the ITSM community.

IT Service Management

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The data center management community focuses on the holistic management and optimization of the data center. From technologies such as virtualization and cloud computing to data center design, colocation, energy efficiency and monitoring, the BrightTALK data center management community provides the most up-to-date and engaging content from industry experts to better your infrastructure and operations. Engage with a community of your peers and industry experts by asking questions, rating presentations and participating in polls during webinars, all while you gain insight that will help you transform your infrastructure into a next generation data center.

Data Center Management

The unexpected nature of natural disasters and other disruptive events means that preparation is key to managing disaster recovery and business continuity planning. Join the business continuity and disaster recovery community for live and recorded presentations discussing best practices for business continuity planning, disaster recovery programs and business continuity management. Learn from BCDR experts to develop your critical infrastructure and gain insight into tactical solutions to your BCDR issues.

Business Continuity / Disaster Recovery

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

How to Overcome Common Kubernetes Security Challenges

Presented by

About this talk

More from this channel