How containers make security and compliance instantly easier
summary
Company packages a legacy millions-of-lines app into a fat container and wires it into a pipeline that aggregates 30+ feeds for vulnerability data, reduces false positives, and enforces a machine-learned runtime whitelist model per deploy. Policies like non-root containers, secret exposure, and allowed network/port behavior are flagged early in CI and enforced at runtime across Kubernetes and cloud platforms, cutting patch time and keeping pen-test findings from going stale.
AI-written summary · about
chapters (7)
- 0:00Start
- 8:01What's Different About Securing Containers?
- 11:04Fundemental Challenges...
- 13:41Enabling a Whitelist Approach
- 15:48Vulnerability Management
- 16:34Compliance
- 17:20Threat Protection
related talks
38mCase study: How Containers Makes Security and Compliance Instantly Easier
31mAutomatic application hardening by leveraging container runtime behavior analysis
18mPractical End-to-End Container Security at Scale
50mRuntime Security for Containers
40mSecuring Containers on the High Seas
27mContainer Security at the Speed of CI/CD
32mA Security State Of Mind: Compliance and ...
46mWhat Security People Want: Making DevSecOps Happen with Containers