Скачать или смотреть It's Not a Best Practice If No One Can Follow It: Learning From Our Contain... A. Zenla & J. Morello

It's Not a Best Practice If No One Can Follow It: Learning From Our Container Security Mistakes - Alex Zenla, Edera & John Morello, Minimus

Ten years ago, container security was complex, fragmented, and hard to operationalize. Both Twistlock and Alpine Linux were early efforts to help teams harden their containers – Twistlock by detecting and alerting on risks, enforcing runtime protection, and enabling container-level microsegmentation; Alpine by providing minimal, hardened base images. But neither fully solved the problem. Twistlock’s approach was powerful but not always easy – most teams didn’t know where to start, and writing practical segmentation policies was notoriously hard. Alpine, while popular, often broke builds, lacked key language support, and left teams maintaining security-critical patches on their own.

In this talk, John Morello, CTO of Twistlock and now co-founder of Minimus, and Alex Zenla, CTO and co-founder of Edera, will share what they’ve learned – and today’s engineering teams can apply those lessons to hardening their own container deployments.