DevOps World | Jenkins World 2018

Container security is the most rapidly advancing technology area in DevSecOps, with a growing number of vendors building innovative offerings for quickly implementing security on top of a rapidly evolving container ecosystem. This has important implications for how applications are designed, secured, delivered, and operated – and DevSecOps is the specialty that brings all of this together. Just like containers are simple in concept but can be a challenge to industrialize, container security is similarly complex in real world applications. Most obviously, vulnerabilities may exist in container images but it’s also necessary to reduce the container attack surface and limit access by constraining privileges. And then there’s the container host itself, which needs to be hardened and monitored. Each of these must, of course, be automated for container security to be successfully enabled within DevSecOps. And that’s why specialized tools are necessary keep up with the evolving container ecosystem. Our industry panelists will share their opinions, case stories on how they are managing this today and give their views on how this specialized domain combining security, containers, and automation will evolve.