OpenShift Commons Briefing #99: Automated App Defense on OpenShift with Michael Withrow (Twistlock)
October 12, 2017 | by
OpenShift Commons Briefing Summary
The very nature of containers—their minimalistic, declarative, and immutable characteristics—provides an opportunity to automate and scale the protection of apps that run within them. In the old world of security, developers needed to manually tell security teams how their app worked and security teams needed to manually configure various tools, like firewalls, IDS/IPS, and vulnerability management suites, to protect them. Invariably, as the apps changed over time, the rules got out of sync and many organizations fell back to a basic, parameterized approach to security.
Today with containers, though, we can apply machine learning to automatically build a predictive runtime model for each unique version of every app you have, helping you improve your active threat protection and also to do so much more efficiently.
In this briefing, Twistlock's Michael Withrow discusses how Twistlock uses these fundamental container characteristics to block vulnerabilities, stop malicious behaviors, and filter app layer traffic to fundamentally change how organizations secure their apps in a cloud-native stack.
Learn More at the Next OpenShift Commons Gathering in Austin Dec 5th,
Red Hatters, CNCF/Kubernetes project leads, and numerous other members of the OpenShift Commons will be gathering together in Austin for the upcoming OpenShift Commons Gathering co-located with Kubecon at the Austin Convention Center.
Don't forget to leave your feedback and suggestions for each video on YouTube or in the comments section below. This will be incredibly important to shape this Special Interest Group and create sessions that fit the demands of all the OpenShift developers in the community.
About OpenShift Commons
OpenShift Commons is the place for organizations that are part of the OpenShift community to connect with peers and other related open source technology communities to communicate and collaborate across all OpenShift projects and stakeholders.
The Commons' goal is to foster collaboration and communication between OpenShift stakeholders to drive success for all members, and expand & facilitate points of connection between members for sharing knowledge and experience to help drive success for the platform and for participants: customers, users, partners, and contributors.
Introduction and Goals The purpose of this article is to explain in depth how capabilities are implemented in Linux and why they can't be used to it's full extent in Kubernetes or OpenShift without ...
Without supporting information and guidance, updates can be daunting! In our research sessions, we heard from you: Channels can be confusing, and your overall update experience could benefit from a ...