云安全资料

1.基线检查 CIS Downloads (cisecurity.org)

2. checkov

bridgecrewio/checkov: Prevent cloud misconfigurations during build-time for Terraform, Cloudformation, Kubernetes, Serverless framework and other infrastructure-as-code-languages with Checkov by Bridgecrew. (github.com)

3.RBAC模型：基于用户-角色-权限控制的一些思考 | 人人都是产品经理 (woshipm.com)

4.Open Policy Agent | Documentation

5.Notes on Open Policy Agent and Docker Security (abhaybhargav.com)

6.Matrix - Enterprise | MITRE ATT&CK®

7.红蓝对抗中的云原生漏洞挖掘及利用实录 - 博客 - 腾讯安全应急响应中心 (tencent.com)

8.(2条消息) Docker各种思维脑图【整理】_NoamaNelson的博客-优快云博客_docker脑图

9.The Rego Playground (openpolicyagent.org)

10.https://www.checkov.io/5.Policy%20Index/kubernetes.html

11.The Rego Language · Daniël Paulus (danielpaulus.com)

12.aquasecurity/appshield: Security configuration checks for popular cloud native applications and infrastructure. (github.com)

13.SecurityContext · Kubernetes指南 (gitbooks.io)

14.Threezh1'Blog

15.https://jimmysong.io/kubernetes-hardening-guidance/

16.(4条消息) ebpf深入理解和应用介绍_网络安全研究-优快云博客_ebpf原理

17.http://www.topsec.com.cn/article/2662.html

18.https://mp.weixin.qq.com/s/BAaOREFajQKk3y4MHDgmuA

19.Linux tracing - kprobe, uprobe and tracepoint

简单了解容器安全之Grafeas和Kritis - DockOne.io

每周云安全资讯-2022年第11周 (qq.com)

Cilium 开源安全检测引擎 Tetragon