What We Learned Dissecting the World's Most Popular Containers
summary
Team scans 130 popular images with open source tools like Docker Slim and grype from Anchore and finds concrete pain points: container sizes correlate with scan time (every ~500 MB adds ~50 s), some images contain ~1,200 packages (category medians ~300–400), and a few have 2,000+ vulnerabilities; overall more than 20% of vulnerabilities are high or critical and some categories exceed 40% high+critical. Research delivers data, visualizations, and recommends automating container optimization.
AI-written summary · about
chapters (11)
- 0:00Introduction
- 2:38About Slim.ai
- 4:49The data scientist's role
- 7:30Container adoption stats
- 10:52Docker Hub growth
- 12:44Research methodology
- 17:18Bloated container impact
- 19:01Package complexity
- 22:44Vulnerability insights
- 24:50Future outlook
- 27:45Q&A and conclusion
related talks
30mWhat We Learned Dissecting the World’s Most Popular Containers
29mDay in the Life of a Base Image: The Evolution of Vulnerabilities in the Most Popular C...
52mThe Life of an Image: Evolution of Vulnerabilities in Popular Containers
35mSecuring Containers by Breaking In
49mVulnerability Exploitation In Docker Container Environments
38mSo. Many. Vulnerabilities. Why are containers such a mess...
50mContainer Attack Surface Reduction Beyond Name Space Isolation
29m5 Best Security Practices for your Production-Ready Containers