Make threats visible in your cloud environment — Eric Jung
summary
Shows concrete tooling and thresholds: Trend Micro Vision One and artifact scanner integrate image scanning, runtime sidecar monitoring and XDR-style log unification to trace a CVE from an nginx image (reported with 103 vulnerabilities including 4 high CVEs) through host and lateral movement. Recommends blocking CI/CD on high/critical findings, using secrets manager instead of embedding keys, enforcing pod/network policies, and notes sidecar overhead is small (a few tiny pods). Demo and visual workbench available at the booth.
AI-written summary · about
chapters (10)
- 0:00Introduction to talk
- 1:26Speaker background and expertise
- 3:39Why container security matters
- 6:52Securing host and container environments
- 10:29Network security for containers
- 11:34Securing management stack
- 13:47Building secure container foundations
- 15:17Lateral movement risks demo
- 16:21Detecting threats with XDR
- 17:49Q&A session
related talks
41mIdentifying and Mitigating Cloud and Container Threats- 41mIdentifying and Mitigating Cloud and Container Threats
27mSurviving Day2 : Picking the Right Tool To Secure Your Kubernetes Habitat
19mFrom Code to Cloud: Embedding Security
47m3 steps to help mitigate cloud risks
32mSponsored Session: A New Security Standard for the AI Era: Zero-CVE and Real-Time Threat…
36mBack to the Future in the Space of Cloud Native Security
05mSponsored Keynote: Cloud Security’s Hidden Force: Threat Detection