Is All Executable Code Added to a Container Image at Build Time? (Q2) • Liz Rice • GOTO 2020

This presentation was recorded at GOTOpia Europe 2020. #GOTOcon #GOTOpia http://gotopia.eu Liz Rice - Liz is a pro in all things containers and security; chair of the CNCF's Technical Oversight Committee QUESTIONS 1: https://youtu.be/pbIXGp_hGq4 3: https://youtu.be/caRjErS9fiY 4: https://youtu.be/nGR205F4sEM 5: https://youtu.be/3iY9WDXPIVo 6: https://youtu.be/aZHS3Mnk6s4 ABSTRACT Liz's Container Security book, published by O’Reilly, includes a security checklist covering items you should at least think about when considering how to secure your deployments running on containers. In this talk, Liz presents an overview of the checklist and dives into the details on some potential weaknesses that you really need to avoid. The takeaway challenge is for you to check whether your own environments comply with the most important of these recommendations. [...] TIMECODES 00:00 Intro 01:53 Is all executable code added to a container image at build time? 02:40 Treat containers as immutable 04:57 Demo Download slides and read the full abstract here: https://gotopia.eu/2020/sessions/1471/the-container-security-checklist RECOMMENDED BOOKS Liz Rice • Learning eBPF • https://amzn.to/4bIhSbH Liz Rice • Container Security • https://amzn.to/3oU4iJe Liz Rice • Kubernetes Security • https://www.oreilly.com/library/view/kubernetes-security/9781492039075 https://twitter.com/GOTOcon https://www.linkedin.com/company/goto- https://www.facebook.com/GOTOConferences #Security #Containers #CNCF #Docker #DockerSecurity #ContainerSecurity Looking for a unique learning experience? Attend the next GOTO conference near you! Get your ticket at http://gotocon.com SUBSCRIBE TO OUR CHANNEL - new videos posted almost daily. https://www.youtube.com/user/GotoConferences/?sub_confirmation=1