Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

YouTube

Malicious Compliance: Reflections on Trusting Container Scanners

CNCF [Cloud Native Computing Foundation] via YouTube

Overview

Explore the limitations and potential vulnerabilities of container scanning tools in this eye-opening conference talk. Delve into the intricacies of container image analysis and admission control detection as four security experts demonstrate creative methods to intentionally bypass these security measures. Gain valuable insights into the inner workings of container scanners, understanding what they look for and why certain changes in image building techniques can produce vastly different results. Learn how the flexibility in container image construction and distribution can be exploited to manipulate or prevent scanning tools from fully comprehending a container's contents. Discover the potential risks of relying solely on policy-as-code approaches based on scanner results for security and compliance. Walk away with a deeper understanding of the challenges in validating container images and acquire knowledge to create more robust security policies for your own environments.

Syllabus

Malicious Compliance: Reflections on Trusting Container... - Coldwater, Cooley, Geesaman, McCune

Taught by

CNCF [Cloud Native Computing Foundation]

Reviews

Start your review of Malicious Compliance: Reflections on Trusting Container Scanners

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Someone learning on their laptop while sitting on the floor.