Sponsored Session: A New Security Standard for the AI Era: Zero-CVE and Real-Time Threat…
summary
The talk presents an automated, DevSecOps approach to achieving a Zero-CVE security posture for containerized workloads by hardening images with Podman/OpenShift using multi-stage builds to drastically reduce packages and image size (example: 166 vs 992 packages; 276MB vs 621MB). It demonstrates an end-to-end toolchain: Syft for SBOMs, Grype for CVE scanning, Cosign for signatures and attestations, StackRox for policy enforcement, and an automated pipeline that rebuilds and blocks vulnerable images to meet SLSA level 3 expectations.
AI-written summary · about
chapters (12)
- 0:00Introduction
- 1:45AI security threats
- 5:57Global security regulations
- 9:05Platform isolation
- 11:12Trusted libraries and images
- 13:35Hardened vs UBI demo
- 17:29Security features demo
- 21:40Supply chain integrity
- 24:08AI security pipeline
- 26:14Red team tools
- 28:59Automated security checks
- 31:09Zero-CVE standard SLSA 3
related talks
29mZero-Trust Containers: Rethinking Security in the Age of Ephemeral...
37mAchieving High Security at Scale with Microservices
32mA Security State Of Mind: Compliance and ...
40mCloud Native Security: A New Paradigm for a New World
21mMake threats visible in your cloud environment — Eric Jung
28mCode, Dependencies and Security: Where Is the Risk
40mPanel Discussion: Open Source Supply Chain Security - Are Containers..
41mIdentifying and Mitigating Cloud and Container Threats