Tracing Vulnerabilities with SBOMs and Cilium in Hybrid Applications - Esra Siegert & Sebastian Graf

This talk focuses on the importance of supply chain security in today's technology landscape. The speakers present a framework that enhances network traffic tracing between services by integrating Software Bill of Materials (SBOM) information, thereby providing insights into static legacy systems alongside cloud-native infrastructures like Kubernetes pods. They discuss how this architecture not only manages security incidents stemming from emerging vulnerabilities but also ensures transparency across legacy and cloud environments. Utilizing Cilium's Network Policies, the framework allows platform owners to automatically control compromised network traffic and makes vulnerabilities clearly visible in monitoring tools, facilitating a proactive response to security threats.