Alex Floyd Marshall – Medium

Alex Floyd Marshall

Alex Floyd Marshall

KubeCon NA 2023, Day 3: Vulnerability Remediation Needs Remediating

How to triage vulnerabilities and a working definition of Zero Trust.

Nov 9, 2023

Chicago Skyline at night

Nov 9, 2023

Alex Floyd Marshall

KubeCon NA 2023, Day 2: Hitting Our STRIDE

Not entirely on purpose, I have now sat in on 3 sessions about the STRIDE methodology for threat modeling (1 yesterday and 2 today)…

Nov 8, 2023

Chicago skyline at sunrise

Nov 8, 2023

Alex Floyd Marshall

KubeCon NA 2023 Day 1: Isolation Giveth and Isolation Taketh Away

Theme of the day: Isolation improves security, modularity, and resilience. At least when its actually isolation.

Nov 7, 2023

Chicago Skyline at Night

Nov 7, 2023

Alex Floyd Marshall
in
Secret Handshakes

What is “Zero Trust”

Imagine that you work in a large office (maybe you don’t need to imagine). It can be corporate, government, legal, nonprofit, doesn’t…

Mar 3, 2023

What is “Zero Trust”

Mar 3, 2023

Alex Floyd Marshall

KubeCon NA 2022 Day 5: What Code You Trust Matters, Too

The main talk I attended on the last day of KubeCon was by my Raft colleague Dagan and a DarkWolf Solutions engineer (Will) about the…

Oct 29, 2022

KubeCon NA 2022 Day 5: What Code You Trust Matters, Too

Oct 29, 2022

Alex Floyd Marshall

KubeCon NA 2022 Day 4: GUAC is SPIFFE

Very short update for the day about two standout talks.

Oct 28, 2022

Detroit Skyline from Windsor

Oct 28, 2022

Alex Floyd Marshall

KubeCon NA 2022 Day 3: Who You Trust Matters

In the last session I attended today, Justin Cappos of NYU asked what might be the most important question I have heard about the Sigstore…

Oct 27, 2022

Detroit Skyline at Night

Oct 27, 2022

Alex Floyd Marshall

KubeCon NA 2022 Day 2: SigstoreCon

Today I attended the first annual SigstoreCon. I’ve been following the progress of this project with great interest over the past year or…

Oct 25, 2022

Detroit Skyline at Night

Oct 25, 2022

Alex Floyd Marshall

KubeCon NA 2022 Day 1: Application Networking Day

Recently, I’ve had two K8s Networking related questions circling in the back of my mind:

Oct 25, 2022

Detroit Skyline

Oct 25, 2022

Alex Floyd Marshall
in
Read the Source

Comparing SLSA to the CNCF Software Supply Chain Best Practices Recommendations

SLSA and the CNCF paper have very different scopes, but also help illuminate one another.

Aug 14, 2021

Comparing SLSA to the CNCF Software Supply Chain Best Practices Recommendations

Aug 14, 2021

Alex Floyd Marshall

Alex Floyd Marshall

Lead Cyber Security Engineer at Raft, a new breed of government tech consultancy. Member of the CNCF Security TAG. Freelance writer and occasional blogger.

Following

Help
Status
About
Careers
Press
Blog
Privacy
Terms
Text to speech
Teams