Containers - Your Ally in Improving Security

Explore how containers can enhance security in modern software development and deployment environments. This conference talk from BSidesSF 2019 delves into built-in security tactics offered by Kubernetes and Docker. Learn to automate and configure crucial security features such as read-only filesystems, Linux capabilities, seccomp profiles, and cross-container communication limitations. Discover techniques for systematically configuring services using Kubernetes metadata and syscall data, moving beyond simply enabling features and hoping for the best. Gain insights into improving security practices for developers who are now building, configuring, and deploying their own services on container platforms.