Flexibility without Compromise — As more organizations adopt Kubernetes, security has become a major concern. Kubernetes has many built-in security features, but ensuring security policies are properly enforced across a large and complex cluster can be challenging. At the same time, Kubernetes also needs to provide the flexibility required for developers to work efficiently…

In the first part of this series, we learnt about sandboxed (virtualised) containers and how it provides an added layer of security to container workloads by running the pod in a virtual machine (VM). We also examined how sandboxed containers, implemented in Kata containers, provide the foundation for confidential containers…

An application-centric view of confidential computing — In this article, I’ll briefly discuss the different approaches to confidential computing and its implication for your application design. Quick Recap In simple words, you can think about confidential computing as a means of creating a specific location (a TEE) in memory, where anything inside this location is inaccessible to the entities…

Exploring confidential computing for your business is now much easier than before. If you are new to confidential computing and wondering where you can use it and for what benefits, then please read on. What do you get with Confidential Computing? Let’s start with the fundamental question of what confidential computing can give you for your business. …

I will take you through the journey from sandboxed to confidential containers in this blog. The details should provide you with knowledge of the current options for improving the security of container workloads, the underlying technology stack and trade-offs. First, let's revisit some definitions to have a shared understanding. Sandboxed…

A few months back, I wrote about the building blocks of a confidential computing solution and how you can start deciphering the different pieces of the solution. You can read more about it here. Many months have passed since I wrote the above article, and I wanted to share a…

I wrote about remote attestation in confidential computing and what we are doing for confidential containers in the following blog. In this blog, I will take you through an example attestation workflow from Azure. …

In my previous blog, I touched up the subject of understanding a confidential computing solution. In this blog, I’ll dive deeper into the attestation process. …

If you are following the latest IT trends, you would have come across the mention of “confidential computing”. With the release of product offerings in this space from Intel, AMD, IBM, Microsoft, Google and many others, this promising technology is making way to real users. In this blog, we’ll look…