Using Docker to Secure Traditional Applications without Code Changes
•
0 likes•196 views
Legacy applications often serve critical business needs and have to be maintained for a long time. Some applications may have been written decades ago, grown to millions of lines of code and the team that built and deployed the app may no longer be at your company. This fact poses a particularly challenging problem for the security and availability of these applications. In this talk, we will focus on securing traditional applications using Docker, and showcase how modernizing these apps by moving them into containers not only makes make them portable and cost-efficient but also allows you to run legacy applications more securely, without having to make code changes. We will review the security features of Docker enterprise edition including isolation, encryption, scanning, signing and more to show how you can reduce the attack surface area of legacy apps and limit the impact of any issues. Live demonstrations will show how to use the features in different security configurations and how to respond and react to incoming threats.
Recommended
Recommended
More Related Content
More from Docker, Inc.
More from Docker, Inc. (20)
Recently uploaded
Recently uploaded (20)
Using Docker to Secure Traditional Applications without Code Changes
- 1. Docker 500: Going Fast while Protecting Data 🔒 @diogomonica
- 2. 🤠🛡🤕
- 3. 🏥📲👿
- 5. 💾😩
- 6. “Hospital data breaches were associated with higher 30- day mortality rates in the years following the breach. Mortality rate after a breach was comparable to undoing a year’s worth of improvements.”
- 8. We need more 🔒!
- 9. Wrong! Security was the problem.
- 10. “Changes in HIT and patient care processes in response to a data breach introduce usability challenges and unintended side effects that frustrate clinicians and disrupt patient care.”
- 11. *
- 12. Se·cu·ri·ty /ˈsəˈkyo͝orədē/ Noun noun: security; plural noun: securities 1. the state of being free from danger or threat.
- 13. Safe·ty /ˈsāftē/ Noun noun: safety 1. the condition of being protected from or unlikely to cause danger, risk, or injury.
- 14. Good security lets people go as fast as possible, safely
- 18. We must architect our systems with this level of devotion.
- 19. 🏎
- 20. 🏎💨
- 21. 🏎💨
- 22. 🏎 1. Stringent dynamic, static and load tests to ensure the safety of the drivers. 2. Cockpit is surrounded by "deformable crash- protection structure". 3. Before they race, drivers must demonstrate they can get out of the car within five seconds. 4. Constant monitoring and replacement of tires.
- 23. 🏎🚧
- 24. 🚧 🏎💨
- 25. 🚧🏎💨
- 26. 🔥🏎 1. Driver can be extricated from the car following by lifting out the entire seat. 2. HANS absorbs and redistributes forces that would otherwise hit the driver's skull and neck muscles. 3. Fire-resistant suits withstand fire for 11+ seconds without warming the suit above 104 degrees. 4. Fire suppression system that can be activated by the driver or race marshals. 5. Data recorder keeps speed and deceleration forces so doctors know the severity of an impact.
- 29. 💨
- 30. 💨
- 31. 1. Stringent dynamic, static and load tests to ensure the safety of the drivers. 2. Cockpit is surrounded by "deformable crash- protection structure". 3. Before they race, drivers must demonstrate they can get out of the car within five seconds. 4. Constant monitoring and replacement of tires.
- 32. 1. Stringent dynamic, static and load tests to ensure the safety of the drivers. 2. Cockpit is surrounded by "deformable crash- protection structure". 3. Before they race, drivers must demonstrate they can get out of the car within five seconds. 4. Constant monitoring and replacement of tires.
- 34. trusted, repeatable and adversarial CI/CD pipeline COMMIT sha256:29d234… SCANBUILD 16df34… 6ec6e1…3e94f1… 200dc0… 50d932…… TEST STAGE RUN
- 35. 1. Stringent dynamic, static and load tests to ensure the safety of the drivers. 2. Cockpit is surrounded by "deformable crash- protection structure". 3. Before they race, drivers must demonstrate they can get out of the car within five seconds. 4. Constant monitoring and replacement of tires.
- 40. MTLS on by default
- 42. 1. Stringent dynamic, static and load tests to ensure the safety of the drivers. 2. Cockpit is surrounded by "deformable crash- protection structure". 3. Before they race, drivers must demonstrate they can get out of the car within five seconds. 4. Constant monitoring and replacement of tires.
- 44. 🤠
- 47. Worker Worker Worker Manager TLS Certificate Authority Worker TLS Worker TLS Worker TLS TLS Worker Manager Certificate Authority Worker Worker TLS TLS TLS TLS Worker Manager Certificate Authority Worker Worker TLS TLS TLS TLS Add Remove Worker Manager TLS Certificate Authority Worker TLS Worker TLS Worker TLS TLS Renew 1 2 34
- 48. Worker Worker Worker Manager TLS Certificate Authority Worker TLS Worker TLS Worker TLS TLS Worker Manager Certificate Authority Worker Worker TLS TLS TLS TLS Worker Manager Certificate Authority Worker Worker TLS TLS TLS TLS Add Remove Worker Manager TLS Certificate Authority Worker TLS Worker TLS Worker TLS TLS Renew 1 2 34
- 49. Worker Worker Worker Manager TLS Certificate Authority Worker TLS Worker TLS Worker TLS TLS Worker Manager Certificate Authority Worker Worker TLS TLS TLS TLS Worker Manager Certificate Authority Worker Worker TLS TLS TLS TLS Add Remove Worker Manager TLS Certificate Authority Worker TLS Worker TLS Worker TLS TLS Renew 1 2 34
- 50. Worker Worker Worker Manager TLS Certificate Authority Worker TLS Worker TLS Worker TLS TLS Worker Manager Certificate Authority Worker Worker TLS TLS TLS TLS Worker Manager Certificate Authority Worker Worker TLS TLS TLS TLS Add Remove Worker Manager TLS Certificate Authority Worker TLS Worker TLS Worker TLS TLS Renew 1 2 34
- 51. 1. Stringent dynamic, static and load tests to ensure the safety of the drivers. 2. Cockpit is surrounded by "deformable crash- protection structure". 3. Before they race, drivers must demonstrate they can get out of the car within five seconds. 4. Constant monitoring and replacement of tires.
- 53. Reverse Uptime Golden Image Freshness
- 54. Reverse Uptime Golden Image Freshness
- 55. 🚧
- 56. 💨🚧
- 57. 💨🚧
- 58. 1. Driver can be extricated from the car following by lifting out the entire seat. 2. HANS absorbs and redistributes forces that would otherwise hit the driver's skull and neck muscles. 3. Fire-resistant suits withstand fire for 11+ seconds without warming the suit above 41 degrees. 4. Fire suppression system that can be activated by the driver or race marshals. 5. Data recorder keeps speed and deceleration forces so doctors know the severity of an impact. 🔥
- 59. 🔥 1. Driver can be extricated from the car following by lifting out the entire seat. 2. HANS absorbs and redistributes forces that would otherwise hit the driver's skull and neck muscles. 3. Fire-resistant suits withstand fire for 11+ seconds without warming the suit above 41 degrees. 4. Fire suppression system that can be activated by the driver or race marshals. 5. Data recorder keeps speed and deceleration forces so doctors know the severity of an impact.
- 62. 🔥 1. Driver can be extricated from the car following by lifting out the entire seat. 2. HANS absorbs and redistributes forces that would otherwise hit the driver's skull and neck muscles. 3. Fire-resistant suits withstand fire for 11+ seconds without warming the suit above 41 degrees. 4. Fire suppression system that can be activated by the driver or race marshals. 5. Data recorder keeps speed and deceleration forces so doctors know the severity of an impact.
- 64. A App AppApp App Port 80 AA A
- 65. 🔥 1. Driver can be extricated from the car following by lifting out the entire seat. 2. HANS absorbs and redistributes forces that would otherwise hit the driver's skull and neck muscles. 3. Fire-resistant suits withstand fire for 11+ seconds without warming the suit above 41 degrees. 4. Fire suppression system that can be activated by the driver or race marshals. 5. Data recorder keeps speed and deceleration forces so doctors know the severity of an impact.
- 70. 🔥 1. Driver can be extricated from the car following by lifting out the entire seat. 2. HANS absorbs and redistributes forces that would otherwise hit the driver's skull and neck muscles. 3. Fire-resistant suits withstand fire for 11+ seconds without warming the suit above 41 degrees. 4. Fire suppression system that can be activated by the driver or race marshals. 5. Data recorder keeps speed and deceleration forces so doctors know the severity of an impact.
- 72. 🔥
- 74. 🔥 1. Driver can be extricated from the car following by lifting out the entire seat. 2. HANS absorbs and redistributes forces that would otherwise hit the driver's skull and neck muscles. 3. Fire-resistant suits withstand fire for 11+ seconds without warming the suit above 41 degrees. 4. Fire suppression system that can be activated by the driver or race marshals. 5. Data recorder keeps speed and deceleration forces so doctors know the severity of an impact.
- 79. Go out there and save lives.
- 80. Thank you