Software Supply Chain Aspects in Infrastructure as Code and How to Secure It
Offered By: Linux Foundation via YouTube
Course Description
Overview
Explore the critical aspects of software supply chain security in Infrastructure as Code (IaC) and learn effective strategies to mitigate risks. Delve into the KICS (Keep Infrastructure as Code Secure) open-source project and its role in enhancing IaC security. Examine the parallels between IaC vulnerabilities and software package dependencies, highlighting the importance of scrutinizing reused Docker files, HELM charts, and container sources. Gain insights into emerging risks in the IaC world and their potential impact on lower levels of the software stack. Discover how to leverage IaC scanning techniques to prevent software supply chain issues in your infrastructure. Cover key topics including software security, container supply chain, typosquatting, metadata importance, distroless containers, reproducibility, and secure container creation practices.
Syllabus
Software Supply Chain
Software Security
Supply Chain Security & Containers
Find a HELM chart
Levels of Typosquatting
Container Supply Chain
The importance of metadata
Distroless containers
Reproducibility
Securing Container Creation
Taught by
Linux Foundation
Tags
Related Courses
Unearthing Malicious and Risky OpenSource Packages Using Packjnullcon via YouTube Every Second Counts - Quantifying the Negative Externalities of Cybercrime via Typosquatting
IEEE via YouTube Adapting DevOps in a World of Growing Software Supply Chain Attacks
GOTO Conferences via YouTube Open Source Supply Chain Security - Are Containers the Biggest Blind Spot?
Linux Foundation via YouTube Open Source Supply Chain Threat Landscape - A Moving Target
Linux Foundation via YouTube