Identifying and Mitigating Cloud and Container Threats
Talkat Open Source Summit Europe 2023 · on Wednesday, 2023-09-20· at 15:55· Room 0A (Floor 0), Abandoibarra Etorb., 4, 48011 Bilbao, Bizkaia, Spain·
summary
Covers build-to-runtime specifics: use minimal base images (example Node image drops from 15 critical/153 high to 1 critical/3 high when slimmed), apply image signing and registry hardening, and prioritize vulnerabilities — 87% of images show high/critical issues, 71% have fixes, but runtime analysis narrows true exploitable risk to ~2%. Runtime detection taps kernel system calls via eBPF or module, matches rules with Falco, and ships alerts through Falco sidekick; a live Log4j→LDAP reverse‑shell demo triggers Falco alerts and surfaces the exact commands and containers.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 1:50Container threat landscape
- 7:52Securing container images
- 16:43Image signing and sources
- 19:51Runtime security importance
- 23:07Falco runtime detection
- 26:20Log4Shell demo and detection
- 36:21Key takeaways
- 38:09Zero trust and shift-left
- 39:36Q&A
related talks
41mIdentifying and Mitigating Cloud and Container Threats
50mRuntime Security for Containers
30mMaster the Container Security Model with
29mZero-Trust Containers: Rethinking Security in the Age of Ephemeral...
29mDetecting cloud and container threats
21mMake threats visible in your cloud environment — Eric Jung
24mCracking the Code of Cloud Security
27mContainer Security Best Practices