World Congress 2023 • Sep 27, 2023

Turning Container security up to 11 with Capabilities

Mathias Tausig

Are default container permissions exposing your internal traffic to rogue images? Discover why dropping all Linux kernel capabilities is the ultimate way to shrink your blast radius.

Starting at 3:21 · Watch from the beginning

Turning Container security up to 11 with Capabilities thumbnail

Checking access…

Playback and chapters load privately for Free videos.

Matching moments

4:27 min

Identifying software vulnerabilities and typical configuration weaknesses

Marc Nimmerrichter · World Congress 2022

2:40 min

Discussing container privilege escalation and volume security risks

Andrew Martin · World Congress 2022

4:02 min

Applying tactical security configurations to Docker container layers

Madhu Akula · LIVE

3:21 min

Restricting container privileges using capability and seccomp profiles

Marc Nimmerrichter · World Congress 2022

6:01 min

Handling container constraints and fileless malware

Dimitrij Klesev +1 · LIVE

5:59 min

Live demonstration of vulnerability exploitation and zero trust mitigation

Jan Peer Stöcklmair

Jan Peer Stöcklmair · World Congress 2026 Europe

More from World Congress 2023

The year 3000, a brief history of Web Development thumbnail

The year 3000, a brief history of Web Development

Lorenzo Pieri

Demografie nutzen um jedem Bewerber das passende Angebot zu machen! thumbnail

Demografie nutzen um jedem Bewerber das passende Angebot zu machen!

Nathalie Gierth

Passwordless future: WebAuthn and Passkeys in practice thumbnail

Passwordless future: WebAuthn and Passkeys in practice

Clemens Hübner · inovex

External Secrets Operator: the secrets management toolbox for self-sufficient teams thumbnail

External Secrets Operator: the secrets management toolbox for self-sufficient teams

Moritz Johner

Building Reliable Serverless Applications with AWS CDK and Testing thumbnail

Building Reliable Serverless Applications with AWS CDK and Testing

Fifty Shades of Kubernetes Autoscaling thumbnail

Fifty Shades of Kubernetes Autoscaling

Mario-Leander Reimer

Upcoming sessions on this topic

Supply Chain Security for the Everyday Engineer

Pradumna Saraf

Kestra Technologies

Quality Assurance Engineer

Your Agent Just Ran rm -rf: Sandboxing AI Agents from Docker to GKE Agent Sandbox

Rajani Ekunde

Identity company

Senior Software Engineer

What I Got Wrong Shipping an MCP Server for Live Infrastructure

Pritesh Kiri

Harness

Developer Relations Engineer

Architecting Secure and Encrypted Microservices in K8s

Arushi Garg

Adobe

SDE-2
MV Shiva

Google

SWE

Speed or Security? Why Not Both for Your Coding Agents

Ajeet Raina

Docker

Developer Advocate

Shipping MCP to Real Users: Scaling, Auth, and the PII Leak You Didn't See Coming

Hadar Geva

Myop

CTO & Co-founder

Related videos

Kubernetes Security - Challenge and Opportunity thumbnail

Kubernetes Security - Challenge and Opportunity

Marc Nimmerrichter

World Congress · 2022

Hacking Kubernetes: Live Demo Marathon thumbnail

Hacking Kubernetes: Live Demo Marathon

Andrew Martin

World Congress · 2022

Docker exec without Docker thumbnail

Docker exec without Docker

Oliver Seitz · Accenture

World Congress · 2024

Kubernetes Security Best Practices thumbnail

Kubernetes Security Best Practices

Rico Komenda · adesso

World Congress · 2025

Stop Running Mystery Meat in Production thumbnail

Stop Running Mystery Meat in Production

Jeroen van Erp · SUSE

World Congress North America · 2026

Enhancing Workload Security in Kubernetes thumbnail

Enhancing Workload Security in Kubernetes

Dimitrij Klesev +1

LIVE · Feb 2022

Related articles

DC

Daniel Cranney

Do You Trust Your Agents? Five Quick Ways to Contain Them

Do you trust your agents? Most of us use coding agents every day now. Give one a vague request, walk away, and come back to a pile of mostly working software. It’s brilliant, right up until you rem...

17 days ago

An image of a cube-shaped container with a ball of light inside of it

BB

Benedikt Bischof

Walking Into The Era of Supply Chain Risks

Welcome to this issue of the WeAreDevelopers Live Talk series. This article recaps an interesting talk by Vandana Verma who introduced the audience interesting topic of supply chain risks.About the...

over 4 years ago

Walking Into The Era of Supply Chain Risks

DC

Daniel Cranney

Understanding and Mitigating Common Web Vulnerabilities

Vulnerabilities exist in many forms on the web, and attackers continue to find creative ways to exploit them. Technological advances like the proliferation of AI are of course exciting nd filled wi...

over 1 year ago

An image with neon lighting featuring a globe and a padlock

DC

Daniel Cranney

Building AI Solutions with Rust and Docker

In recent years, artificial intelligence has surged in popularity in the world of development. While Python remains a popular choice in the realm of AI, Rust - often known as Rust Lang - is quickly...

about 2 years ago

Building AI Solutions with Rust and Docker

From learning to earning

Jobs that call for the skills explored in this talk.

Staff Developer Advocate, GitHub Security Lab

San Francisco, CA, United States

Experienced $323k Git Github Databases

about 2 months ago

Cloud Engineer (German)

Barcelona, Spain

about 2 months ago • Verified

IT System Administrator

Sensory-Minds GmbH

Offenbach, Germany

Experienced Remote Linux Docker

about 1 month ago

Cyber Defense & Incident Response

Delivery Hero SE

Santiago de Compostela, Spain

Remote Golang Cybercrime Security Log

Senior Software Engineer, Vulnerability Management

Expert $329k Remote Ruby Golang Docker

about 2 months ago • Verified

Principal Cybersecurity Engineer

San Jose, United States

Expert $249k–348k Remote Cybersecurity