Innovate Fast, Operate Securely: AI-Powered Protection for Containerized Workloads
summary
SentinelOne demonstrates an integrated CNAPP: agentless Singularity SCAP that performs asset discovery, KSPM, and an offensive security engine that automatically validates exploitability and returns evidence, plus a runtime agent using eBPF "God mode" visibility deployed as a DaemonSet or sidecar for Fargate. Claims include CVE exploitability analysis, automated prioritization, five detection engines (about 66% detections from static AI), surgical process unwind/remediation, support for 15 Linux distros and serverless containers, and end‑to‑end build-to-runtime fixes.
AI-written summary · about
chapters (16)
- 0:00Introduction and welcome
- 1:06AI in cybersecurity history
- 2:10Top cloud security threats
- 4:20AI for CVE prioritization
- 7:09Proactive and reactive security
- 9:17Build clean deploy clean run clean
- 11:30Cloud security overview
- 13:38Runtime threat detection
- 16:12Kubernetes cluster protection
- 18:18Serverless container security
- 20:04AI engines explained
- 22:55Agentless cloud security
- 24:21Offensive security engine
- 27:53Verified exploit paths
- 28:56Cattle not pets approach
- 29:18Conclusion and Q&A
related talks
13mUsing AI to thwart cloud ransomware
17mOutpace Cyber Threats with Agentic AI + Human Ingenuity
38mA Security State of Mind: Compliance and Vulnerability Audits for Containers
31mAutomatic application hardening by leveraging container runtime behavior analysis
49mContext is everything: CNAPP revolution to secure deployments (PRT254)
56mNavigating the Cloud Native Security Landscape
56mThe Future of AppSec is Cloud-Native
51mInnovate with AWS and secure with CrowdStrike