Container Security: Theory & Practice

[AppDefects]

DockerCon19 last week highlighted how Netflix has created a first class Cloud architecture for critical service delivery. Michael Wardorp presented on how Netflix builds security into their container ecosystem. Netflix Open Source (see Github repo here) is a big part of the architecture - Titus is a critical piece of the container Control Plane security narrative. Security Monkey is used for SecOps to monitor and alert on account anomalies. One of the lessons learned from the video is that "Cloud APIs have great power, protect them!" 

What is your Container security story?

[rslade]

> AppDefects (Newcomer III) posted a new topic in Tech Talk on 05-07-2019 02:11 PM

>     What is
> your Container security story?

I use airgaps and floppy disks.

Mind you, even that is subject to some attacks ...
https://blogs.securiteam.com/index.php/archives/2030

====================== (quote inserted randomly by Pegasus Mailer)
rslade@vcn.bc.ca slade@victoria.tc.ca rslade@computercrime.org
Man is only a subject full of error, natural and ineffaceable,
without grace. Nothing shows him the truth. Everything deceives
him. These two sources of truth, reason and the senses, besides
being both wanting in sincerity, deceive each other in turn.
- Blaise Pascal (1623-1662), Pensees (1660)
victoria.tc.ca/techrev/rms.htm http://twitter.com/rslade
http://blogs.securiteam.com/index.php/archives/author/p1/
https://is.gd/RotlWB