Zero-Trust Containers: Rethinking Security in the Age of Ephemeral...
summary
Claim: static image scans miss ~67% of issues and attackers compromise new containers in under an hour, so runtime defense is essential. The session shows a working Minikube + Helm demo where Falco detects syscall anomalies and custom rules trigger alerts and automated remediation, and explains how SPIFFE/SPIRE issue cryptographic workload IDs for continuous attestation. It cites cases: Capital One cuts incidents ~90% and Shopify reduces incident impact ~85%, and recommends AppArmor/SELinux, OPA, cosign for layered controls.
AI-written summary · about
chapters (16)
- 0:00Zero-trust containers intro
- 2:11Modern container security crisis
- 3:36Containers and ephemeral basics
- 5:21Why traditional security fails
- 7:30Zero trust policy for containers
- 8:55Zero trust architecture layers
- 11:20Defense in-depth strategy
- 12:03Open-source identity tools
- 13:26AppArmor SELinux access control
- 14:31Runtime security with Falco
- 15:58Anomaly detection fingerprinting
- 17:22Live demo detecting attacks
- 21:14Real-world attack scenarios
- 23:39Industry case study success
- 25:27Key takeaways
- 25:48Question and answer session
related talks
50mRuntime Security for Containers
41mIdentifying and Mitigating Cloud and Container Threats- 41mIdentifying and Mitigating Cloud and Container Threats
32mSponsored Session: A New Security Standard for the AI Era: Zero-CVE and Real-Time Threat…
40mSecuring Containers on the High Seas
37mIt’s 2018; Are My Containers Secure Yet?!
30mMaster the Container Security Model with
36mPanel Discussion: Modern App Security Requires Containers