Automating the DoD Container Hardening Pipeline - Russ Andersson, RapidFort скачать в хорошем качестве

Automating the DoD Container Hardening Pipeline - Russ Andersson, RapidFort

Automating the DoD Container Hardening Pipeline - Russ Andersson, RapidFort The Department of Defense’s security group, Platform One, maintains a centralized hardened container registry called Iron Bank. This DevSecOps initiative ensures containers meet strict safety and security requirements for use across DoD infrastructure. DoD engineers have been building automated container hardening pipelines. Container vulnerability counts have reduced as much as 95%, averaging 70% across the board. Despite the significant reduction in container footprint and software packages, they are fully-functional and exceed Iron Bank security specs. In this talk, cybersecurity engineer David Dooley will walk through the methodologies being used to instrument, harden, test, and optimize these containers. Learn how the DoD employs container vulnerability scanning, testing, reduction, automation, and other open source technologies. For example, Iron Bank NGINX pre- and post-hardening: