World Congress 2023 • Sep 27, 2023

Turning Container security up to 11 with Capabilities

Mathias Tausig

Are default container permissions exposing your internal traffic to rogue images? Discover why dropping all Linux kernel capabilities is the ultimate way to shrink your blast radius.

Turning Container security up to 11 with Capabilities thumbnail

Checking access…

Playback and chapters load privately for Free videos.

Matching moments

4:27 min

Identifying software vulnerabilities and typical configuration weaknesses

Marc Nimmerrichter · World Congress 2022

2:40 min

Discussing container privilege escalation and volume security risks

Andrew Martin · World Congress 2022

4:02 min

Applying tactical security configurations to Docker container layers

Madhu Akula · LIVE

3:21 min

Restricting container privileges using capability and seccomp profiles

Marc Nimmerrichter · World Congress 2022

6:01 min

Handling container constraints and fileless malware

Dimitrij Klesev +1 · LIVE

5:59 min

Live demonstration of vulnerability exploitation and zero trust mitigation

Jan Peer Stöcklmair

Jan Peer Stöcklmair · World Congress 2026 Europe

More from World Congress 2023

The year 3000, a brief history of Web Development thumbnail

The year 3000, a brief history of Web Development

Lorenzo Pieri

Demografie nutzen um jedem Bewerber das passende Angebot zu machen! thumbnail

Demografie nutzen um jedem Bewerber das passende Angebot zu machen!

Nathalie Gierth

Passwordless future: WebAuthn and Passkeys in practice thumbnail

Passwordless future: WebAuthn and Passkeys in practice

Clemens Hübner · inovex

External Secrets Operator: the secrets management toolbox for self-sufficient teams thumbnail

External Secrets Operator: the secrets management toolbox for self-sufficient teams

Moritz Johner

Building Reliable Serverless Applications with AWS CDK and Testing thumbnail

Building Reliable Serverless Applications with AWS CDK and Testing

Fifty Shades of Kubernetes Autoscaling thumbnail

Fifty Shades of Kubernetes Autoscaling

Mario-Leander Reimer

Upcoming sessions on this topic

Starts in 12 days

Conference India 2026

November 25–26, 2026

Bengaluru, India

Get tickets All 107 sessions

Supply Chain Security for the Everyday Engineer
Pradumna Saraf · Kestra Technologies

Wed 25 Nov · Stage 3 - powered by GitHub
Your Agent Just Ran rm -rf: Sandboxing AI Agents from Docker to GKE Agent Sandbox
Rajani Ekunde · Identity company

Wed 25 Nov · Stage 2
What I Got Wrong Shipping an MCP Server for Live Infrastructure
Pritesh Kiri · Harness

Wed 25 Nov · Stage 1 - powered by IBM

Related videos

Kubernetes Security - Challenge and Opportunity thumbnail

Kubernetes Security - Challenge and Opportunity

Marc Nimmerrichter

World Congress · 2022

Hacking Kubernetes: Live Demo Marathon thumbnail

Hacking Kubernetes: Live Demo Marathon

Andrew Martin

World Congress · 2022

Docker exec without Docker thumbnail

Docker exec without Docker

Oliver Seitz · Accenture

World Congress · 2024

Kubernetes Security Best Practices thumbnail

Kubernetes Security Best Practices

Rico Komenda · adesso

World Congress · 2025

Stop Running Mystery Meat in Production thumbnail

Stop Running Mystery Meat in Production

Jeroen van Erp · SUSE

World Congress North America · 2026

Enhancing Workload Security in Kubernetes thumbnail

Enhancing Workload Security in Kubernetes

Dimitrij Klesev +1

LIVE · Feb 2022

Related articles

DC

Daniel Cranney

Do You Trust Your Agents? Five Quick Ways to Contain Them

Do you trust your agents? Most of us use coding agents every day now. Give one a vague request, walk away, and come back to a pile of mostly working software. It’s brilliant, right up until you rem...

21 days ago

An image of a cube-shaped container with a ball of light inside of it

BB

Benedikt Bischof

Walking Into The Era of Supply Chain Risks

Welcome to this issue of the WeAreDevelopers Live Talk series. This article recaps an interesting talk by Vandana Verma who introduced the audience interesting topic of supply chain risks.About the...

over 4 years ago

Walking Into The Era of Supply Chain Risks

DC

Daniel Cranney

Understanding and Mitigating Common Web Vulnerabilities

Vulnerabilities exist in many forms on the web, and attackers continue to find creative ways to exploit them. Technological advances like the proliferation of AI are of course exciting nd filled wi...

over 1 year ago

An image with neon lighting featuring a globe and a padlock

DC

Daniel Cranney

Building AI Solutions with Rust and Docker

In recent years, artificial intelligence has surged in popularity in the world of development. While Python remains a popular choice in the realm of AI, Rust - often known as Rust Lang - is quickly...

about 2 years ago

Building AI Solutions with Rust and Docker

From learning to earning

Jobs that call for the skills explored in this talk.

Staff Developer Advocate, GitHub Security Lab

San Francisco, CA, United States

Experienced $323k Git Github Databases

about 2 months ago •

IT System Administrator

Sensory-Minds GmbH

Offenbach, Germany

Experienced Hybrid · 4 days on-site Linux Docker

Cyber Security Architect - Malware Security Client/Server

€57k–74k Linux Docker Malware

Senior Software Engineer, Vulnerability Management

Expert $329k Remote Ruby Golang Docker

about 2 months ago •

Principal Cybersecurity Engineer

San Jose, United States

Expert $249k–348k Hybrid · 3 days on-site Cybersecurity

Cyber Security Architect - Malware Security Client/Server

Meckenheim, Germany

€57k–74k Linux Docker Malware