Projects
Security guidance, benchmarks, books and sites I have led or contributed to.
-
Featured project
OWASP Kubernetes Top 10
Led a group of industry experts to update the OWASP Kubernetes Top 10, providing cluster operators with actionable guidance on cluster security.
-
Kubernetes admission controller threat model
Worked as part of Kubernetes SIG-security I led the project to create a threat model for Kubernetes admission controllers. designed to help create cluster operators and admission controller developers in improving their security
-
Cloud Native Security Book
With over 300 pages across 20 chapters and suitable for all IT professionals, the comprehensive hands-on book starts with Cloud Native security topics optimised for mid-level engineering experience and, through a well-formulated, detailed journey of learning, ends with advanced topics.
-
Cloud Native Security Talks
I created a website which collects together talks from Kubecon and other cloud native conferences on the topic of security.
-
Container Security Site
A resource for container security, for both attackers and defenders
-
PCI container orchestration guidance for Kubernetes
After working as part of the group that created the PCI's guidance for Container orchestration, I wrote a series of posts explaining the guidance and how it can be implemented in Kubernetes
-
Kubernetes RBAC Good Practice Guide
Worked as part of Kubernetes SIG-security I led an effort to create an RBAC good practice guide for the Kubernetes website.
