Proactive Container Security for the Masses
summary
Covers securing Linux container images by using open-source tools and best practices to build proactive container workflows. Focuses on preventing vulnerability propagation in images during creation and management within DevOps/SDLC processes. Names Anchore as the vendor behind the approach.
AI-written summary · about
chapters (16)
- 0:00Intro
- 1:00How to Deploy an Internet Service (2002)
- 5:49A typical container workflow
- 8:31Three distinct security questions
- 11:01How film directors think code is written
- 14:41Modern life depends on trusting someone else's work
- 16:41Apathy can be extremely dangerous
- 18:09Infiltrating a large project like Apache httpd
- 19:44Infiltrating a small project like event-stream
- 21:56Basic hygiene: scan for known vulnerabilities
- 23:21Document the contents of every image
- 24:10Create a SBOM
- 25:15Evaluate against policies
- 26:54Integrate with Kubernetes
- 27:52How to apply what you have learned
- 31:35Policies cover more than just known vulnerabilities
related talks
18mPractical End-to-End Container Security at Scale
06mOpensource Container Security: A Brief Overview
40mSecuring Containers on the High Seas
48mContainer Security: It’s All About the Supply Chain
46mWhat Security People Want: Making DevSecOps Happen with Containers
35mThe 10 steps of Container Security: It's not that hard !
05mContainer Security Best Practices
30mMaster the Container Security Model with