Protecting the Omniverse: How NVIDIA is Securing Containers

on YouTube ↗21m

" summary

NVIDIA integrates security into CI/CD to scan thousands of containers and manage hundreds of thousands of container digests, using Anchore open source engine, Anchore Enterprise and SIFt to generate a bill of materials in-team and push results to a central API. Large AI images (20+ GB) drive CPU/memory/disk challenges and secret leakage risk. Policies are stored as code per team, enforced as guard rails not gates, with API-first checks for Jenkins, GitLab CI, GitHub Actions.

AI-written summary · about

" chapters (12)

1. 0:00Intro
2. 0:45GPU
3. 1:35NVIDIA Catalog
4. 2:47Security gets a bad rap
5. 3:42The development life cycle
6. 5:08Hooking in
7. 9:00Inspect
8. 9:48Container Security
9. 12:57Scanning Containers
10. 14:32NVIDIAs Approach
11. 16:51Default Policies
12. 18:25Support for Developers

" related talks

• 06mOpensource Container Security: A Brief OverviewJessica Repka · DevOpsDays Raleigh 2019
• 18mPractical End-to-End Container Security at ScaleYashvier Kosaraju · GOTO Chicago 2020
• 24mDon’t be a fail whale, secure your containersSarah Young · Container Camp UK 2018
• 21mHow containers make security and compliance instantly easierMichael Dielmann · ContainerDays Hamburg 2018
• 40mSecuring Containers on the High SeasJack Mannino, Abdullah Munawar · OWASP AppSec Europe 2018
• 48mSecurity and compliance for container-based microservicesNirmal Mehta, Max Neuvians · AWS Summit Ottawa 2022
• 40mProactive Container Security for the MassesRoss Turk · RSA Conference 2020 DevSecOps & Application Security
• 35mInnovate Fast, Operate Securely: AI-Powered Protection for Containerized WorkloadsRick Bosworth · SOSS Fusion 2024