Hardening Next Generation Military Software Containers for Use by...
summary
A vendor hardens ironbank/Platform One containers by rebasing onto UBI8, using IronBank base images, adding licensing and obfuscation, and integrating into a Big Bang/Gravity pipeline. A runtime instrumentation step observes exercised behavior, intercepts memory accesses and returns a smaller hardened image. Pilot results over five months show reduced vulnerabilities ~70%, container size reductions ~60–80%, ~200k downloads of artifacts, under 100 support tickets, and a working open source hardening toolchain.
AI-written summary · about
chapters (11)
- 0:00Introduction
- 1:27Defense Unicorns and Space Camp
- 5:04Software factories in DOD
- 11:48Defense Unicorns mission and tools
- 13:16Project goals and supply chain risks
- 21:00Lessons from Iron Bank onboarding
- 24:30Reducing complexity and attack surfaces
- 27:20Industry and defense collaboration
- 29:06Business case for DOD
- 33:40Open source contributions and plans
- 36:31Q&A
related talks
52mKernel Hardening: Ten Years Deep
31mAutomatic application hardening by leveraging container runtime behavior analysis
32mDo Your Containers Even Lift – A Hardening Guide for K8s Containers
25mTowards the Hardened Cloud-Native Cornerstone: Container Runtime Protection from Secur...
48mHardening IoMT Medical Devices: Defense‑in‑Depth on Yocto‑Based Embedded Linux
35mOptimizing Containers for Security and Scaling
38mHardening the Barebox Bootloader
50mHardening the Linux Guest for the Confidential Cloud Computing: Deep Dive and Results