Look Who it Was Random video

A Security State of Mind: Compliance and Vulnerability Audits for Containers by Chris Van Tuin

416 views · Published 16 November 2016 · 38:28 · Indexed 8 November 2026

Channel: CNCF [Cloud Native Computing Foundation] · 2016 · People & Blogs

Watch on YouTube

A Security State of Mind: Compliance and Vulnerability Audits for Containers - Chris Van Tuin, Red Hat

"A Security State of Mind: Compliance and Vulnerability Audits for Containers

Data breaches are on the rise and placing increased pressure on Enterprise IT to protect the business.  With the rise of DevOps and as hackers takes advantage of known vulnerabilities on unpatched or misconfigured systems, Enterprise IT increasingly needs to automate vulnerability management, security management, and compliance checking.  OpenSCAP is an opensource tool for automatically verifying the presence of patches, checking system security configuration settings, and examining systems for signs of compromise.

In this presentation, you'll learn about:

* How Containers enable DevOps, Container Technology, and the security risks with deploying containers in the enterprise
* Security vulnerability (CVEs) and Configuration issues (CCEs) notifications and checks
* Automating vulnerability management, security management, and compliance checking with OpenSCAP
* Scanning online and offline Containers and Virtual Machines with OpenSCAP
* Generating and understanding OpenSCAP audit reports
* Customizing OpenSCAP profiles

Join Chris Van Tuin, Chief Technologist, West at Red Hat, as he walks through the inherent security risks of deploying containers in the enterprise and how OpenSCAP can help protect and secure the business."

About Chris Van Tuin
Chris Van Tuin, Chief Technologist for the West Region NA at Red Hat, has over 20 years of experience in IT and Software. Since joining Red Hat in 2005, Chris has been architecting solutions for strategic customers and partners with a focus on emerging technologies including IaaS, PaaS, and DevOps. He started his career at Intel in IT and Managed Hosting followed by leadership roles in services and sales engineering at Loudcloud and Linux startups. Chris holds a Bachelors of Electrical Engineering from Georgia Institute of Technology.
Join us for KubeCon + CloudNativeCon in Barcelona May 20 - 23, Shanghai June 24 - 26, and San Diego November 18 - 21!  Learn more at https://kubecon.io. The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy and all of the other CNCF-hosted projects.

More from this channel