Developing Cloud Security Program for Containers

Note: In addition to online broadcast, we will be doing the live presentation from the Atlassian Sydney office at 341 George St. For those who would like to attend the in-person event, please fill out this form and plan to arrive no later than 5:15pm so you can be checked in before the talk begins. Refreshments and pizza will be provided after the talk! Please note that the seating is limited for the in-person event, and will be offered on a first-come-first-serve basis to those who fill out the form.

Details: Building a container security program is quite complex, especially when you have to deal with containers in orchestration tools such as Kubernetes, combined with the complexity of on-premise, cloud, or hybrid with an extensive footprint. In this talk presentation, we would like to explain how to go about building a security program with containers.

Basic Topics we want to cover:

Team and Culture
• What does a security team need to think about from a skillset,
team, and technology perspective? What are some of the
challenges in the container domain to consider?
• What to unlearn from a traditional world that, in the container
domain, you don’t need to think about?

DevSecOps role in engineering
• Intricacies of a container secure code practices.
• Making sense in secure container base images and supply chain
security.
• Navigating responsibility models

Infrastructure hardening
• Orchestration platform best practices
• Container images and image registry best practices

Applications and monitoring
• IAM and Network policies for achieving fast-paced operational
goals.
• Tracking, preventing, and responding to threats

Speaker Bio:
Rony Moshkovich is a co-founder of Prevasio, an agentless container & cloud security company recently acquired by AlgoSec. Prior to AlgoSec, he spent many years in practical research and engineering roles across the IT security industry.
He has extensive management experience with an emphasis on software research and development.