BSidesRDU 2022 - Understanding and Securing Containerized Environments: A Peek Under the Lid - M.L.
BSidesRDU 2022 - Understanding and Securing Containerized Environments: A Peek Under the Lid - Manny Landron
https://bsidesrdu.org/
Understanding and Securing Containerized Environments: A Peek Under the LidSecurity teams face unfamiliar challenges as more organizations transition to and adopt containerized workloads including microservices. This session will explain the fundamental differences between containerization and virtualization, the pros and cons of containerization from a security perspective, and the challenges associated with securing and monitoring containers throughout their lifecycle from container registry to production. Additionally, we'll explore the concept of 'container escape', review the role kernel namespaces and control groups play to enforce segmentation and control resource allocation respectively. Last, we'll rely on the Linux command 'strace', a useful diagnostic, instructional, and debugging tool to intercept and record system calls as a technique to understand a container's runtime behavior and the importance of implementing safeguards, including least privilege access, to promote container isolation.
Theatre
Sat 10:45 am - 11:30 am
--
Manny Landron
Principal Information Security Consultant @ Aligned Technology Group
Manny is a principal information security consultant with Aligned Technology Group with extensive experience building, securing, and monitoring high-value and well-regulated applications and platforms, on-premises and in-cloud. He led the teams that implemented the greenfield information security programs for IAT Insurance Group, a specialty insurance company with about 2B in underwritten premium, and for Citrix ShareFile, a Gartner Magic Quadrant leading content collaboration solution hosted with AWS and Azure. Manny is a graduate of Virginia Tech and a Veteran of the U.S. Army. He enjoys spending time with his family, playing his violin, and hiking the trails of Umstead State Park.