Hands-On Workshop: Container Security 101
This is a 2 hour hands-on workshop. Is your company adopting containers but you haven’t had a chance to figure out the best way to secure them yet? We’ll get hands-on with containers, learn how to examine them for common mistakes, and then add in some security controls like container image signing, create a Software Bill of Materials, and run vulnerability scans.
Learning Objectives:
- Use standard utilities to create a variety of secure and insecure container images.
- Perform container image signing.
- Create a SBOM and then run vulnerability scans on that SBOM. Examine common gaps in SBOM generation tools.
- Manually examine container image manifests, indexes, and layers.
- Break out of a misconfigured “container”.
Prereqs:
- Comfortable with Linux command line tools, variables, and system concepts
System Requirements:
- Access to a Ubuntu 20.04 x86_64 Virtual Machine
- Steps will be provided to provision this in AWS
