Loading…
This event has ended. Visit the official site or create your own event on Sched.
Welcome to The Eighth Annual Information Security Summit presented by ISSA Los Angeles
View analytic
Friday, May 20 • 11:00am - 11:50am
Rethink Systems Security with Containers

Sign up or log in to save this to your schedule and see who's attending!

Containers are gaining traction with the IT and developer communities. The use of container technologies not only empowers DevOps initiatives but also brings fundamental changes to information and application security. We show in this session security innovations leveraging the use of containers and how containers enable a way to bridge the gap between runtime security and application inspection. The most effective containers are stateless - the content of the containers remains unchanged throughout its lifetime. Instead of updating it, one would simply kill the old container and start a new one.

 

This transient nature of containers has far-reaching implications to security. First, we demonstrate that by container image analysis and deep inspection of the set up files, one can accurately predict the runtime behavior of the container, down to its system calls, communications, and process behavior patterns. We show that one can use image analysis and other dev-time "bread crumbs" to build runtime profiles of containers and detect communications, process, and even memory anomalies automatically. We demonstrate that this approach leads to much more accurate anomaly detection than traditional runtime security and will fundamentally change how runtime protection of applications is achieved. We also show performance metrics taken with production-scale deployments.

 


Speakers
avatar for Chenxi Wang

Chenxi Wang

Chief Strategy Officer, Twistlock
Dr. Chenxi Wang is Chief Strategy Officer of Twistlock. She is responsible for corporate strategy and marketing. Dr. Wang joins Twistlock from Ciphercloud, another successful Silicon Valley startup. Prior to that, Chenxi built an illustrious career at Forrester Research and Intel Security. At Forrester, Chenxi covered mobile, cloud, and enterprise security, and wrote many hard hitting research papers. At Intel Security, she led the ubiquity... Read More →


Friday May 20, 2016 11:00am - 11:50am
Ballroom A

Attendees (32)