Docker 201 Security
TalkinGermanat OWASP AppSec Europe 2018 · on Thursday, 2018-07-05· at 15:30· Westminster - 4th Floor, QEII Centre Broad Sanctuary, Westminster·
summary
Provides a concrete Docker Top 10 checklist of explicit do's and don'ts and demonstrates audit scripts and commands to inspect container images, runtimes and host kernel settings. Shows how to run Kubernetes checks alongside Docker audits, identifies the most common misconfigurations, and shares practical fixes and small automations deployed at customers that reduced exposure.
AI-written summary · about
chapters (12)
- 0:00Docker security 201
- 3:03Container myths debunked
- 8:00Privileged container risks
- 12:20Security processes and patching
- 17:26Network security in containers
- 23:09Security gaps and patch domains
- 27:02Firewalls and perimeter security
- 31:12Container image security
- 35:11Server switches and deployment
- 38:22OS recommendations for containers
- 42:07Host security and access control
- 45:13Summary
related talks
14mDocker Security
24mA Checklist for Security from the Container to the Kubernetes: An Overview End to End
26mThe 10 Container Security Tricks That (...)
50mOWASP Docker Top 10- 24mA Checklist for Security from the Container to the Kubernetes: An Overview End to End
57mBreaking and Fixing your ‘Docker’ ized environments
34mHow secure are Docker containers?
35mThe 10 steps of Container Security: It's not that hard !