Why You Need to Rethink Container Security

WHY YOU NEED TO RETHINK CONTAINER SECURITY

Sasan Padidar

FlawCheck

SASAN PADIDARFOUNDER & CTO

Former Chief Architect of Appthority, in charge of helping Appthority scale up mobile app program analysis from thousands of apps to millions of apps

MS in CS with a focus on Concurrency Theory, Theorem Proving, and Static Analysis

Previous experience working as a consultant to One King’s Lane, Facebook, and Google, to help them scale up

6 cybersecurity patents (additional in progress)

Thursday, January 14, 2016 CONFIDENTIAL & PROPRIETARY. COPYRIGHT 2016 © FLAWCHECK INC. ALL RIGHTS RESERVED 2

HOW CAN WE EXPEDITECONTAINER ADOPTION?


WHY YOU NEED TO RETHINKCONTAINER SECURITYBeing able to trust images & containers is key

Current security products are not designed for container ecosystems

Scalability is critical

Products serving containers need to be agile and flexible

Security products need to integrate tightly with the SDLC


BEGIN TO TRUST IMAGES


FLAWCHECK PRIVATE REGISTRY

Scalable solution for detecting vulnerabilities & malware in containers

Takes seconds per container (supports parallelization & concurrent analysis for limitless scale)

Runs in the public cloud, private cloud, on-premise, and air-gapped

Supports Docker and all major cloud & on-premise CI/CD platforms

Checks containers before containers reach production environments

Provides continuous monitoring of protected containers

Checkpoint inserted into the data pipeline to layer policy on top of containers


DEMO: TEARING APART CONTAINERS What did we find?


THANK YOU

Sasan Padidar

Founder & CTO

[email protected]

@spadidar

Are you using Docker in development environments but concerned about the security of running it in production?

Register today for FlawCheck Private Registry’s free plan, which includes vulnerability & malware inspection services for 1 private repository:

https://console.flawcheck.com/register


Technology

Why You Need to Rethink Container Security