When making the switch to a microservice architecture using containers, you’re making a tradeoff between the up front cost of adding a layer of middleware (container management) and the eventual benefits of using containers to ease in service deployment, migration, and load balancing.

In this talk I’ll discuss a hidden additional benefit of container based deployments--the fact that containers allow you to implement new levels of security and access control that are not available at the machine level.

We’ll cover three core ways that containers can provide additional levels of protection:
image scanning
seccomp profiles for docker
behavioral security for containers

We’ll talk about the pros and cons of each approach, and how they can be combined to create a robust security model. In this talk we’ll show real examples of each approaches, and focus on open source resources available to you.