How to build a container without arming a hacker
summary
Examines container security risks from Living off the Land (LotL) attacks, where attackers reuse legitimate utilities inside containers. Covers which common tools and images can be abused and practical measures to build containers (e.g., image composition, minimizing included utilities) to reduce the attack surface.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 1:09Container security issues
- 3:39Living of the Land attacks
- 10:52LOL attack taxonomy
- 17:59Malicious code storage
- 21:10Privilege escalation via SUID
- 25:28Container debugging and testing
- 28:18Container hardening methods
- 33:31Conclusion and recommendations
- 34:13Q&A
related talks
35mSecuring Containers by Breaking In
37mSecuring Containers by Breaking In
26mThe 10 Container Security Tricks That (...)
30mMaster the Container Security Model with
47mSecuring Containers By Breaking In
35mDocker Security
39mInsecure Containers? Continuous Defense Against Open Source Exploits
41mIdentifying and Mitigating Cloud and Container Threats