Getting Your Hands "Dirty" in Container Sandbox - Ariel Shuper, Aqua Security
493 views · Published 16 December 2018 · 35:07 · Indexed 5 October 2026
Channel: CNCF [Cloud Native Computing Foundation] · 2018 · Film & Animation
Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March 30 - April 2, Shanghai July 28-30 and Boston November 17-20! Learn more at kubecon.io. The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects Getting Your Hands "Dirty" in Container Sandbox - Ariel Shuper, Aqua Security The session addresses the proliferation of "sandboxing" techniques to isolate containers and improve their security posture. It'll provide a short background on the rise of "sandboxing" technology in the global security space and will drill down into different containers "sandboxing" technologies/projects. It'll examine and compare different sandboxing initiatives: Google's gVisor, Openstack's Katacontainers, Hardware based initiative (containers "enclaves") as opposed to legacy Linux isolation tools applied for Containers (SELinux and Seccomp). It'll analyze the benefit and the challenges of each implementation and will demonstrate the attacks types sandboxing/isolation technologies can mitigate vis-a-vis the attacks which sandboxing/isolation technologies can't mitigate and require additional security layers. To learn more: https://sched.co/GrZ5
More from this channel
-
42:47
Self-hosted, Scale, and Federation with Kubernetes v1.4 and Beyond by Brandon Philips, CoreOS, Inc.
-
44:24
Performance and Scalability Tuning Kubernetes for OpenShift and Docker by Jeremy Eder, Red Hat
-
21:36
rkt and the Open Container Initiative: Promoting Industry Standards by Derek Gonyeo, CoreOS, Inc.
-
22:25
Keynote: Kubernetes: As Seen On TV by Erik St. Martin, Systems Architect, Comcast
-
6:03
Lightning Talk - When Kubernetes is Not the Solution by Joonas Bergius, DigitalOcean
-
8:16
Keynote: SDI: Delivering the Efficiencies of the World’s Largest Clouds to Everyone
-
41:54
18 Months Before the Mast by Jack Foy, Hiya
-
41:54
Taking the Helm - Ancestry's Journey to Kubernetes by Paul MacKay, Ancestry.com