Docker Container Application Security Deep Dive

Agenda:

6:00pm-6:30pm - Arrive and mingle
6:30pm-end - Presentation

Docker Container Application Security Deep Dive

A continuous integration and delivery pipeline for Docker containers can produce a large number of images. Over time, inflow into production can pose a challenge in assuring the source of an image, its integrity, and the security of its application components. We will discuss how to integrate compliance and security checks into your pipeline and how to produce a secure, verifiable image. We will also show how to trace production images back to their source, controlling out-of-band changes, and preventing the running of stale or non-compliant containers.

Beyond image assurance, we will discuss capabilities that secure containers at runtime, and reduce the risk from unauthorized activity. User controls will address the needs of developers, operations and application owners, who often require different access privileges to containers based on their responsibilities, level of automation and multi-tenancy requirements. Assuring appropriate access authorization and detailed auditing of all user actions will facilitate compliance and promote adherence to acceptable security practices when running applications in containers.

Bio:

http://photos4.meetupstatic.com/photos/event/b/3/3/8/600_453945880.jpeg

Tsvi Korren has been an enterprise IT professional for 20 years with a background in business process consulting in large organizations. Most recently at CA Technologies, he worked across verticals in government, retail, financial institutions and healthcare to implement compliance and security processes, from identity and access to host and server controls. Tsvi is currently the director of technical services at Aqua, concentrating on building bridges between DevOps and security.

Event Sponsor

http://photos1.meetupstatic.com/photos/event/9/9/e/7/600_454119399.jpeg

Aqua - End-to-End Security Platform for Containerized Applications