Loading…
June 26-27, 2024 | Seattle, WA
View More Details | Registration Information

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for CloudNativeSecurityCon North America 2024 to participate in these sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.

Please note: This schedule is automatically displayed in Pacific Daylight Time (PDT), UTC -7. To see the schedule in your preferred timezone, please select from the drop-down menu to the right, above "Filter by Date."

The schedule is subject to change.
← Back to schedule
Malicious Compliance Automated: Building Secure Containers and Obfuscating What's Inside - Kyle Quest, AutonomousPlane & Duffie Cooley, Isovalent
Wednesday June 26, 2024 1:55pm - 2:30pm PDT
433
What if you compress a container image? What will happen? Is it even possible?

Let's explore the good, the bad and the fun of minifying container images and the side effects of it.

You will learn what it takes to build secure container images and how to make sure you have only the components you need to reduce the attack surface of your containers. You will learn about what's truely necessary for your containers to function. You will also learn how it's possible to automate container image compression leveraging low level Linux kernel interfaces and application analysis.

We'll also explore the side effects of image compression on the vulnerability scanners and exploits and how they will be disrupted and broken.

As a bonus you will see a number of additional container obfuscation techniques that will make vulnerability scanners completely blind.
Speakers
DC

Duffie Cooley

Field CTO, Isovalent
avatar for Kyle Quest

Kyle Quest

Founder, AutonomousPlane
Kyle is the creator of DockerSlim (aka SlimToolkit, aka MinToolkit), a popular tool to inspect, optimize and debug containers. He's the founder/CEO of AutonomousPlane and he's also the founder/CTO of Slim.AI. He's building a supply chain security solution for the cloud native applications... Read More →
Malicious Compliance Automated.talk pdf
Wednesday June 26, 2024 1:55pm - 2:30pm PDT
433
  Supply Chains + Containers + Application Security
Feedback form is now closed.

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Tweet Share
Share Modal

Share this link via

Or copy link