Cloud Native
Security Talks
RSS

KubeCon Europe 2018

TL;DR NIST Container Security Standards

Elsie Phillips, CoreOS

Abstract

In September 2017, the National Institute of Standards and Technology issued a 63 page paper detailing their recommendations for container security. While it’s chock-full of recommendations all cloud native users should implement, it’s not a text most people will read. In this talk, Elsie Phillips from CoreOS will cover key takeaways from the report like the importance of using container-specific host OSs and using tooling specific to containers to monitor for vulnerabilities, as well as some suggestions for how to implement them within an organization.

More from KubeCon Europe 2018

Open in the index →
  1. The Route To Rootless ContainersEd King, Pivotal & Julz Friedman, IBM 2018-05-02
  2. Securing your Kubernetes Delivery Pipelines with Notary and TUFLiam White & Michael Hough, IBM 2018-05-02
  3. Improving your Kubernetes Workload Security with Hardware VirtualizationFabian Deutsch, Red Hat & Samuel Ortiz, Intel 2018-05-02
  4. Establishing Image Provenance and Security in KubernetesAdrian Mouat, Container Solutions 2018-05-02
  5. Completely Securing the Software Supply Chain using Grafeas + in-totoLukas Puehringer, NYU & Wendy Dembowski, Google 2018-05-02
  6. No video Cloud Native Identity ManagementAndreas Zitzelsberger, QAware GmbH & Andrew Jessup, Scytale Inc. 2018-05-02
  7. OPA: The Cloud Native Policy EngineTorin Sandall, Styra 2018-05-03
  8. Good Enough for the Finance Industry: Achieving High Security at Scale with Microservices in KubernetesZachary Arnold & Austin Adams, Ygrene Energy Fund 2018-05-03
  9. Entitlements: Understandable Container Security ControlsJustin Cormack & Nassim Eddequiouaq, Docker 2018-05-03
  10. Container Isolation at Scale (Introducing gVisor)Dawn Chen & Zhengyu He, Google 2018-05-03
  11. Case Study: How Containers Makes Security and Compliance Instantly EasierJohn Morello, Twistlock 2018-05-03
  12. Applying Least Privileges through Kubernetes Admission ControllersBenjy Portnoy, Aqua Security 2018-05-03
  13. Secure PodsTim Allclair, Google 2018-05-04
  14. Multi-Tenancy in Kubernetes: Best Practices Today, and Future DirectionsDavid Oppenheimer, Google 2018-05-04
  15. Kubernetes Runtime Security: What Happens if a Container Goes Bad?Jen Tong & Maya Kaczorowski, Google 2018-05-04
  16. From Kubelet to Istio: Kubernetes Network Security DemystifiedAndrew Martin, ControlPlane 2018-05-04
  17. A Hacker's Guide to Kubernetes and the CloudRory McCune, NCC Group PLC 2018-05-04