Master the Container Security Model with
summary
Claims concrete fixes and tools: image scans find surprising results (example scan shows more than 100 vulnerabilities), and 60% of images run as root so enforce non-root users and chown files during build. Use multi-stage builds to keep only the final binary in the runtime image, prefer minimal bases or distro-less images, enable image scanning at push and admission controllers, sign images with Docker Content Trust, and run runtime detection with Falco and Sysdig Spotlight to detect new vulnerabilities and suspicious behavior.
AI-written summary · about
chapters (7)
- 0:00Introduction
- 1:03Containers
- 5:18Shift Less Security
- 8:14Containers running with escalated privileges
- 11:55Unnecessary packages
- 19:13Leaking credentials
- 26:33Prevent unnecessary privileges
related talks
35mSecuring Containers by Breaking In
47mSecuring Containers By Breaking In
26mThe 10 Container Security Tricks That (...)
18mPractical End-to-End Container Security at Scale
35mDocker Security
41mIdentifying and Mitigating Cloud and Container Threats
47mContainer Security, Are You Doing It Wrong?
32mA Security State Of Mind: Compliance and ...