Container Security at the Speed of CI/CD
summary
Covers why containers are complex to secure — spanning application code, web servers and host systems — and the specific security challenges that arise from that complexity. Describes how to build an automated container security solution that operates at DevOps/CI-CD speed, aimed at practitioners with a general understanding of containers.
AI-written summary · about
chapters (16)
- 0:00Intro To Tim
- 1:58What's the Problem? - Container Example
- 3:44What's the problem? - Library and AppSec
- 5:15What's the problem? - Docker Configuration
- 6:18What's the problem? - Host Security
- 7:53What is DevOps
- 9:39DevOps Changes Security
- 11:14DevSecOps enters the picture
- 12:03What is CI/CD
- 13:45Container Security Parts
- 16:31Jenkins Integration
- 16:57Container Security Flow
- 18:36Container - Compliance
- 19:58Container - Runtime
- 22:02RSAConference 2019
- 24:28Apply What You Have Learned Today
related talks
46mWhat Security People Want: Making DevSecOps Happen with Containers
28mContainer Security: A Horror Story
48mContainer Security: It’s All About the Supply Chain
34mContinuous Security - Integrating Pipeline Security
05mContainer Security Best Practices
40mSecuring Containers on the High Seas
27mContainer Security Best Practices
31mContinuous Security – integrating security into your pipelines