Open Source Summit Japan

Container orchestration solutions introduce a level of security complexity into the lifecycle of an application. Continuous deployment of container images is fundamentally challenged by the rate of security disclosures. Understanding if a vulnerable image exists, what the vulnerabilities within an image might be and where the images are deployed is a daunting task. One traditional response is to invest in perimeter defenses, but what happens when you don’t own or control the perimeter? Taking a step back, we realize the applications and dependencies are what’s under attack. Having a clearly defined security model covering development, staging and deployment is required. That security model also needs to take into account the vulnerability lifecycle from defect discovery through patch creation with a focus on when malicious actors have an advantage.