DockerCon 2021: An Ounce of Prevention: Curing Insecure Container Images

Slide 1

Slide 1 text

An Ounce of Prevention: Curing Insecure Container Images

Slide 2

Slide 2 text

Eric Smalling Speakers Sr. Developer Advocate, Snyk @ericsmalling Seyfat Khamidov Engineer, Red Ventures @skhamidov1

Slide 3

Slide 3 text

● Avoiding Insecure Docker Images ● Shift left: DevSecOps w/ Docker tools ● Scaling with an image pipeline Agenda

Slide 4

Slide 4 text

Container Security at Scale Security testing automation drives a culture of security and empowers DevSecOps. 2x Adoption Automation empowers shift-left security Companies who automate are twice as likely to implement security testing 60% Production deployments in containers Containers continue to be the dominant mechanism for cloud native application deployment. Source: Snyk 2021 State of Cloud Native Application Security Report 56% Misconfiguration or Unpatched Vulnerability Over half experienced a misconfiguration or known unpatched vulnerability incident involving their cloud native applications. Rapid Fixes Testing faster leads to fixing faster. Over 72% with high levels of automation reported average time to fix vuln’s: less than a week and 36% averaged one day or less.

Slide 5

Slide 5 text

How To Avoid Building Insecure Images ● Minimal Base Images ● Authenticity ● Regular Image/Dependency Scans ● Linting Tools (Hadolint) ● Least Privilege Access ● Updates

Slide 6

Slide 6 text

Docker Scan Allows you to identify vulnerabilities in your Docker images and provides you with recommendations on how to remediate them. Powered by the Snyk engine. ● Shifting Security Left ● Convenience ● Conﬁdence In Applications ● Conﬁgurable Scans

Slide 7

Slide 7 text

Demo

Slide 8

Slide 8 text

Docker Hub/Desktop Docker integrated scanning empowers DevSecOps ● DockerHub

Slide 9

Slide 9 text

Docker Hub/Desktop Docker integrated scanning empowers DevSecOps ● DockerHub

Slide 10

Slide 10 text

Docker Hub/Desktop Docker integrated scanning empowers DevSecOps ● DockerHub

Slide 11

Slide 11 text

Docker Hub/Desktop Docker integrated scanning empowers DevSecOps ● DockerHub ● Docker CLI scan ○ Docker Desktop (Win/Mac)

Slide 12

Slide 12 text

Docker Hub/Desktop Docker integrated scanning empowers DevSecOps ● DockerHub ● Docker CLI scan ○ Docker Desktop (Win/Mac) ○ Docker-CE (Linux) NEW!

Slide 13

Slide 13 text

Docker Hub/Desktop Docker integrated scanning empowers DevSecOps ● DockerHub ● Docker CLI scan ○ Docker Desktop (Win/Mac) ○ Docker-CE (Linux) ● DevSecOps NEW! Build Test Deploy DevOps

Slide 14

Slide 14 text

Docker Hub/Desktop Docker integrated scanning empowers DevSecOps ● DockerHub ● Docker CLI scan ○ Docker Desktop (Win/Mac) ○ Docker-CE (Linux) ● DevSecOps NEW! Build Test Deploy DevOps

Slide 15

Slide 15 text

Docker Hub/Desktop Docker integrated scanning empowers DevSecOps ● DockerHub ● Docker CLI scan ○ Docker Desktop (Win/Mac) ○ Docker-CE (Linux) ● DevSecOps NEW! Build Test Deploy DevOps Security

Slide 16

Slide 16 text

Docker Hub/Desktop Docker integrated scanning empowers DevSecOps ● DockerHub ● Docker CLI scan ○ Docker Desktop (Win/Mac) ○ Docker-CE (Linux) ● DevSecOps NEW! Build Test Deploy DevSecOps

Slide 17

Slide 17 text

● Centralization ● Recommended images ● Updates ○ Fix vulnerabilities as they are found ○ Auto open PR’s to update images Secure Base Images Container Image Pipeline

Slide 18

Slide 18 text

Container Image Pipeline

Slide 19

Slide 19 text

● Leveraging the Snyk CLI for scans ● Scanning 1300+ images per day ● Support for multiple container registries ● Allows you to surface ﬁndings which drives remediation efforts Flare - Container Security At Scale Central Scanning Process

Slide 20

Slide 20 text

Flare - Container Security At Scale How It’s Built

Slide 21

Slide 21 text

● Create your free Snyk account to enable integrated Snyk security https://snyk.co/Snyksignupfree ● Test drive the Snyk & Docker integration in this 10-minute Snyk & Docker lab https://snyk.co/SnykDockerworkshop2 ● Snyk & Docker Resource Page https://snyk.co/udmC7 ● Snyk Cloud Native App’ Security Report https://snyk.co/dc21-cnasreport Additional Resources

Slide 22

Slide 22 text

Thank You!

Slide 23

Slide 23 text

At vero eos et accusamus et iusto odio dignissimos ducimus qui blanditiis praesentium voluptatum deleniti atque corrupti. Headline here

Slide 24

Slide 24 text

Text Only Slides

Slide 25

Slide 25 text

Slide title / 2 line max. Secondary headline / 1 line max. Delete if slide title is 2 lines. Sed ut perspiciatis unde omnis iste natus error sit voluptatem accusantium doloremque laudantium, totam rem aperiam, eaque ipsa quae ab illo inventore veritatis et quasi architecto beatae. Nemo enim ipsam voluptatem quia voluptas sit aspernatur aut odit aut fugit, sed quia consequuntur.

Slide 26

Slide 26 text

Paragraph font Monserrat 18pt. Title font Monserrat bold 30pt Secondary headline font Monserrat 18pt

Slide 27

Slide 27 text

Section title. Sed ut perspiciatis unde omnis iste natus error sit voluptatem accusantium doloremque laudantium, totam rem aperiam. Section title. Sed ut perspiciatis unde omnis iste natus error sit voluptatem accusantium doloremque laudantium, totam rem aperiam. Title font Monserrat bold 30pt Secondary headline font Monserrat 18pt

Slide 28

Slide 28 text

Title font Monserrat bold 30pt Secondary headline font Monserrat 18pt Section title. Nemo enim ipsam voluptatem quia voluptas sit aspernatur aut odit aut fugit, sed quia consequuntur. Sed ut perspiciatis unde omnis iste natus error sit voluptatem accusantium doloremque laudantium, totam rem aperiam. Section title. Nemo enim ipsam voluptatem quia voluptas sit aspernatur aut odit aut fugit, sed quia consequuntur. Sed ut perspiciatis unde omnis iste natus error sit voluptatem accusantium doloremque laudantium, totam rem aperiam.

Slide 29

Slide 29 text

Section title. Nemo enim ipsam voluptatem quia voluptas sit aspernatur aut odit aut fugit, sed quia consequuntur. Sed ut perspiciatis unde omnis. Section title. Nemo enim ipsam voluptatem quia voluptas sit aspernatur aut odit aut fugit, sed quia consequuntur. Sed ut perspiciatis unde omnis. Section title. Nemo enim ipsam voluptatem quia voluptas sit aspernatur aut odit aut fugit, sed quia consequuntur. Sed ut perspiciatis unde omnis.

Slide 30

Slide 30 text

Side title Secondary headline 1,000+ Paragraph title bold 14pt Body copy open sans 14pt 1,000+ Paragraph title bold 14pt Body copy open sans 14pt 1,000+ Paragraph title bold 14pt Body copy open sans 14pt 1,000+ Paragraph title bold 14pt Body copy open sans 14pt

Slide 31

Slide 31 text

1. Bullet One 2. Bullet Two 3. Bullet Three 4. Bullet Four 5. Bullet Five 6. Bullet Six Title font Monserrat bold 30pt Secondary headline font Monserrat 18pt

Slide 32

Slide 32 text

Title here Sed ut perspiciatis unde omnis iste natus error sit voluptatem accusantium doloremque laudantium, totam rem aperiam, eaque ipsa quae ab illo inventore veritatis et quasi architecto beatae vitae dicta sunt explicabo. Nemo enim ipsam voluptatem quia voluptas sit aspernatur aut odit aut fugit, sed quia consequuntur magni dolores eos qui ratione voluptatem sequi nesciunt. ● Lorem ipsum ● Lorem ipsum ● Lorem ipsum ● Lorem ipsum ● Lorem ipsum ● Lorem ipsum

Slide 33

Slide 33 text

Image & diagram Slides

Slide 34

Slide 34 text

Slide 35

Slide 35 text

Slide 36

Slide 36 text

Title font Monserrat bold 30pt

Slide 37

Slide 37 text

Title font Monserrat bold 30pt Secondary headline font Monserrat 18pt

Slide 38

Slide 38 text

Slide 39

Slide 39 text

Title font Monserrat

Slide 40

Slide 40 text

Title font Monserrat bold 30pt Secondary headline font Monserrat 18pt

Slide 41

Slide 41 text

Screenshot Slides

Slide 42

Slide 42 text

Side title Secondary headline

Slide 43

Slide 43 text

Side title Secondary headline

Slide 44

Slide 44 text

No content

Slide 45

Slide 45 text

Code block Slides

Slide 46

Slide 46 text

Title font Monserrat bold 30pt Secondary headline font Monserrat 18pt CODE EDITOR { “Lorem”: “ipsum”, “laudantium”: 42 }

Slide 47

Slide 47 text

Side title Secondary headline CODE EDITOR { “Lorem”: “ipsum”, “laudantium”: 42 } Sed ut perspiciatis unde omnis iste natus error sit voluptatem accusantium dolor laudantium, totam rem aperiam, eaque ipsa quae ab illo inventore veritatis et quasi architecto beatae vitae.

Slide 48

Slide 48 text

Slide 49

Slide 49 text

PNG Material

Slide 50

Slide 50 text

No content

Slide 51

Slide 51 text

No content

Slide 52

Slide 52 text

No content

Slide 53

Slide 53 text

No content

Slide 54

Slide 54 text

No content

Slide 55

Slide 55 text

No content

Slide 56

Slide 56 text

No content

Slide 57

Slide 57 text

Dockercon logos on dark

Slide 58

Slide 58 text

Docker Logos on dark

Slide 59

Slide 59 text

Docker Logos on white

Slide 60

Slide 60 text

Dockercon logos on white

Slide 61

Slide 61 text

Text styles Display Slide Title Section Title Body Paragraph Title Caption Small Body Small Paragraph Title Large Body LABEL

Slide 62

Slide 62 text

Color Palette Primary Color Palette Secondary Color Palette

Slide 63

Slide 63 text

Icons

Slide 64

Slide 64 text

Icons

Slide 65

Slide 65 text

Icons

Slide 66

Slide 66 text

Presentation Template

Slide 67

Slide 67 text

How to use sample slides. Take some time browsing through each section to review the slide template options. It may be easier to use the Grid view (found below the your slide navigator). Copy/Paste or Duplicate sample slides, then modify as needed to build your presentation.

Slide 68

Slide 68 text

The grid. In order to maintain visual consistency across slides keep content and objects aligned to the Presentation grid. To turn on guides click view > Guides > “Show Guides”

Slide 69

Slide 69 text

How to edit / replace placeholder images. Select the image you want to replace, then choose “Replace Image…” from the Google Slides top menu. To reposition and resize the placed image, double-click it. This should bring you into adjustment mode where you can move and resize both the cropping frame and the image itself.

Slide 70

Slide 70 text

Content best practices. ● Avoid dense information it makes your slide is difﬁcult to digest. ● For higher impact, consider distributing key content across multiple slides. ● Don’t over use icons. ● Emphasize the most important words with bold or color ● Keep it simple.