OpenShift Commons Briefing #99: Automated App Defense on OpenShift with Michael Withrow
Channel: OpenShift
Date: 2017-10-12

The very nature of containers – their minimalistic, declarative, and immutable characteristics – provide an opportunity automate and scale the protection of apps that run within them. In the old world of security, developers needed to manually tell security teams how their app worked and security teams needed to manually configure various tools, like firewalls, IDS/IPS, and vulnerability management suites, to protect them. Invariably, as the apps changed over time, the rules got out of sync and many organizations fell back to basic, parameterized approach to security. With continuers, though, we can apply machine learning to automatically build a predictive runtime model for each unique version of every app you have, helping you both improve your active threat protection but also to do so much more efficiently. In this briefing,Michael Withrow discusses how Twistlock uses these fundamental container characteristics to block vulnerabilities, stop malicious behaviors, and filter app layer traffic, fundamentally change how organizations secure their apps in a cloud native stack.