Upgrade Images by Digging Out and Automatically Fixing the Vulnerabilities – Lin Ru & Yan Wang
https://www.ispeech.org
Upgrade Images by Digging Out and Automatically Fixing the Vulnerabilities - Lin Ru, DaoCloud & Yan Wang, VMware
Join us for KubeCon + CloudNativeCon in San Diego November 18 - 21. Learn more at https://bit.ly/2XTN3ho. The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy and all of the other CNCF-hosted projects.
As container technology become widely adopted in the industry, how to effectively protect the operating environment from the destruction of related potential vulnerabilities poses new challenges to the platform and/or security administrators. In this presentation, we'll share the ideas of improving the security of the container images managed in the image registry: 1. A pluggable scanning mechanism to quarry out the vulnerabilities of the images and export the scanning reports with kinds of formats to the interested parties; 2. Controlling policies based on the scanning results applied to images to guarantee a secure distribution channel from the image registry to the operating environments; 3. A way to automatically fix the vulnerabilities found in the image to improve the security of the images; 4. A fantastic demo to let you easily understand the solution presented in this talk
https://sched.co/NrpF
2019-07-05 18:23:29
source
Gloss