The Life of an Image: Evolution of Vulnerabilities in Popular Containers
summary
Slim.AI analyzes hundreds of thousands of public images using X‑Ray from Slim Toolkit plus SIFT and GRIPE and finds concrete trends: 900,000 images scanned, an average public image holds ~3,000 CVEs with ~30% high/critical, component count rises to ~400 packages, and only 20% of detected incidents resolve in six months while the average CVE lives 130 days. The data shows 60% of top containers worsen year over year and recommends automate vulnerability remediation and ship only what runs in CI/CD.
AI-written summary · about
chapters (5)
- 0:00RSAConference 2023
- 10:17A complex container landscape that's difficult to secure
- 12:27When the tip of the iceberg is an iceberg Abnormally large number of dependencies
- 31:2120% Packages Account for 80%+ of Vulnerabilities Toxic Packages. Viral CVEs. Pockets of Density vs. Long Tail
- 36:01The decisions are made upstream for you
related talks
29mDay in the Life of a Base Image: The Evolution of Vulnerabilities in the Most Popular C...
34mWhat We Learned Dissecting the World's Most Popular Containers
30mWhat We Learned Dissecting the World’s Most Popular Containers
29m5 Best Security Practices for your Production-Ready Containers
25mMy Container Image has 500 Vulnerabilities, Now What?
38mSo. Many. Vulnerabilities. Why are containers such a mess...
49mVulnerability Exploitation In Docker Container Environments
35mSecuring Containers by Breaking In