Securing the Software Supply Chain in Kubernetes | SUSE Summit Sydney

In this presentation from SUSE Summit Sydney, Mikhail Nikitin, Security Specialist for Asia Pacific at SUSE, discusses the critical importance of software supply chain security and how to implement zero-trust controls within a Kubernetes environment. Mikhail breaks down: • The Evolution of Supply Chain Attacks: How the cost of executing zero-day exploits has dramatically dropped over the last decade, making every organization a potential target. • The Build, Ship, and Run Pipeline: Identifying the key insertion points where malware can enter a traditional CI/CD pipeline. • Verifiable Trust and Certifications: How SUSE leverages its EAL4+ Common Criteria certified Open Build Service to create trusted base container images and secure applications. • Kubernetes-Native Zero Trust: Why vulnerability databases alone are not enough to stop zero-day attacks, and how establishing an application security baseline can prevent unauthorized code execution and hidden network traffic. Learn how a shift-left approach, combined with runtime security and zero-trust controls, can help protect your software supply chain from build through deployment. #SUSE #Cybersecurity #Kubernetes #ZeroTrust #SupplyChainSecurity #CloudNativeSecurity #ContainerSecurity #DevSecOps