OWASP Docker Top 10
summary
An OWASP Top Ten for Docker that prioritizes actionable fixes, supported by hands‑on scans and an interactive simulator that reproduces failures. It covers findings such as outdated images and vulnerable libraries, orchestration misconfigurations and flat networks exposing services, and demonstrates tools and practices: scanners, monitoring agents, multi‑stage build checks and an asset‑management workflow, plus counts of unpatched instances that fail after reboot.
AI-written summary · about
chapters (10)
- 0:00OWASP Docker Top 10 intro
- 3:06Container security
- 9:14Patch management
- 15:22Vulnerable components
- 21:20Insecure images
- 26:14Network segmentation
- 32:30OS hardening
- 37:40Monitoring security
- 42:39Firewalling containers
- 46:48Best practices
related talks
47mDocker 201 Security
30mTop 10 Introduction
29mFlagship Projects: Top 10 "Intro of Top 10"
22mIntroducing the OWASP Top Ten for Kubernetes
57mBreaking and Fixing your ‘Docker’ ized environments
21mOWASP IoT Top 10
51mHarmonizing the OWASP API and Application Top 10 Lists
01h 02mUnderstanding the OWASP Top 10