Automating the DoD Container Hardening Pipeline
summary
Pipeline automates container hardening for DoD via runtime instrumentation that learns production behavior, prunes packages and fixes vulnerabilities, yielding up to 95% reduction and an average ~70% vulnerability drop (Java 50–60%, Node >90%). Uses Iron Bank registry, Platform One channels, and deploys into Big Bang hardened Kubernetes while Party Bus and SBIR-style engagements handle onboarding and contracting. RapidFort-style tooling profiles containers, hardens, tests, and revalidates to meet Iron Bank specs.
AI-written summary · about
chapters (8)
- 0:00Introduction and overview
- 1:42Federal engagement roadmap
- 4:39The SBIR process
- 7:10Technical container hardening
- 9:30Ecosystems and tools
- 12:26Deployment journey summary
- 13:26Q&A and expert discussion
- 26:19Conclusion
related talks
31mAutomatic application hardening by leveraging container runtime behavior analysis
26mMulti-layer hardening in Kubernetes
45mSelf-Healing Pipelines? Resilient Deployments with Hardened Containers
50mRuntime Security for Containers
18mPractical End-to-End Container Security at Scale
21mHow containers make security and compliance instantly easier
24mDon’t be a fail whale, secure your containers
32mA Security State Of Mind: Compliance and ...