Engineer for the future of Cloud
June 10-13, 2019
San Jose, CA

Containers can actually improve your security story

Maya Kaczorowski (Google)
2:20pm3:00pm Wednesday, June 12, 2019
Average rating: ****.
(4.71, 7 ratings)

Level

Beginner

Prerequisite knowledge

  • A basic understanding of containers and DevOps practices
  • Familiarity with Kubernetes

What you'll learn

  • Learn how containers help your overall security model

Description

Adopting containers can be intimidating to anyone, but if you’re on the security team, it can feel like yet another technology that you’re now responsible for. Containers are meant to be short-lived, frequently redeployed, and immutable. They enable you to patch your environment more easily, identify when you’re affected by a new vulnerability, and enforce governance for what is deployed in your environment—containers provide a fundamentally different security model, and that’s a good thing.

Maya Kaczorowski covers how containers change your development pipeline and how this helps, rather than hurts, your overall security model. She dives into how this specifically helps with vulnerability discovery, securing your software supply chain, and isolation. You’ll leave able to engage your security team on how to better do DevSecOps or continuous security.

Photo of Maya Kaczorowski

Maya Kaczorowski

Google

Maya Kaczorowski is a product manager in security and privacy at Google, focused on container security. Previously, she worked on encryption at rest and encryption key management. She was also an engagement manager at McKinsey & Company, working in IT security for large enterprises, and she completed her master’s in mathematics, focusing on cryptography and game theory. She’s bilingual in English and French. Outside of work, Maya is passionate about ice cream—making ice cream for friends at home, attending the Penn State Ice Cream Short Course in January 2014, and researching ice cream headaches. She also enjoys puzzling, running, and reading nonfiction.