The Power of Application Intent Analysis for Container Security [I]
summary
Containers’ declarative images, small footprints and immutability let software learn a container’s declarative images and create an image-tied behavioral model (processes, sockets, syscalls) that converges after about one hour cumulative run time and is shared cluster-wide. The system combines that whitelist with threat intel and prioritized CVE risk scoring, then enforces via modes prevent/alert/block (including stopping a container and preserving forensics). Twistlock demonstrates the model in a working runtime product and Kubernetes certification.
AI-written summary · about
chapters (12)
- 0:00Start
- 5:51Old World Security
- 8:28Security Cake
- 9:32An Opportunity for Better Defense
- 10:39Container Characteristics
- 14:55Autonomous Defense
- 16:46What's a Model?
- 20:46Automatic Prevention
- 24:49Supermodels
- 30:27New World Security
- 31:42What is Twistlock?
- 31:53Kubernetes Certified
related talks
29mZero-Trust Containers: Rethinking Security in the Age of Ephemeral...
31mAutomatic application hardening by leveraging container runtime behavior analysis
21mHow containers make security and compliance instantly easier
38mCase study: How Containers Makes Security and Compliance Instantly Easier
30mMaster the Container Security Model with
24mDon’t be a fail whale, secure your containers
46mSecuring Applications and Pipelines on a Container Platform
28mContainer Security: A Horror Story