Container Security: Evolution of Attacks in 2020
summary
Examines how attackers target Dockerized applications in 2020 using statistics and trends, and explains Docker-native defensive measures to prevent attack propagation. Reviews open-source tools for container security (audit, runtime protection, secrets management) and surveys built-in features offered by commercial container security vendors.
AI-written summary · about
chapters (26)
- 0:00Introduction
- 3:19Talk goals and structure
- 4:43First container attack 2018
- 6:30Mass and targeted attacks
- 8:38Finding vulnerable containers online
- 10:43Vulnerable images and cryptominers
- 12:512020 Honey Pot research
- 14:59Danger of vanilla images
- 16:43Team TNT targeted attack
- 17:45Insecure container deployments
- 19:33Container escape via Docker socket
- 20:56Dangerous container capabilities
- 23:52Linux vulnerabilities impact
- 25:19Kubernetes critical CVEs 2020
- 27:46CVE statistics 2020
- 28:29New Kubernetes vulnerabilities details
- 31:21Stealth attacker persistence
- 34:14Container security approaches
- 35:18CIS Benchmarks for security
- 36:46Secure configuration issues
- 37:49Image scanning limitations
- 39:19Runtime protection tool issues
- 40:22Zero Trust for containers
- 41:05Commercial security solutions overview
- 42:49Summary and recommendations
- 43:32Q&A
