DockerCon SF 2015: Docker Security

•

9 recomendaciones•7,134 vistas

Least - Privilege Microservices; slides from Diogo Mónica and Nathan McCauley's Docker Security Talk at DockerCon SF 2015.

Least-privilege Microservices
Diogo Mónica
Nathan McCauley

Agenda
• Why least-privilege
• History of least-privilege
• Least-privilege with Docker
• Ongoing and future work
• Conclusions

“Every process must be able to access only the
information and resources that are necessary for its
legitimate purpose”

Front-end
Server
Database
Auth Service

1990
Internet
All-in-one

2000
Internet
DatabasesServicesFront-end

2010
Internet

Server
Host OS
Docker Engine
AppA
AppB
AppC
AppD
AppE
AppF
libraries
Container
One Process

Today
Internet

‣A FE server has a very different security proﬁle than a database or a worker host
‣Imagine that each container only has access exactly to the resources and APIs it
needs. No more, no less.
Front-end Server Back-end Server
‣Access to a lot of
downstream services
‣Most exposed
‣I/O intensive
‣Limited network access
Worker Host
‣CPU Intensive
‣Wide range of workloads
Profiles

‣A container is a process. Let’s ﬁnd out what syscalls it needs.
Process Monitoring

‣Namespaces provide an isolated view of the system (Network, PID, etc)
‣Cgroups limit and isolate the resource usage of a collection of processes
‣Linux Security Modules give us a MAC (AppArmor, SELinux)
Fine-grained controls

Fine-grained controls
‣Capabilities divides the privileges of root into distinct units (bind, chown, etc)
‣Per-container ulimit (since 1.6)
‣User-namespaces: root inside is not root outside (remapped root for 1.8)
‣Seccomp: Individual syscall ﬁltering (working on my laptop)

Safer by default
‣Less than half the Linux capabilities by
default
‣Copy-on-write ensures immutability
‣No device access by default
‣Default AppArmor and SELinux proﬁles
for an increasing number of containers

Safer by default
‣Smaller footprint
‣Remove all unneeded packages
‣Remove all unneeded users
‣Remove all suid binaries
…
Debia
n

Security Profiles
Debia
n
‣Producers of containers should be responsible for creating adequate profiles
‣Profile gets shipped with the container
‣Aggregates all of the different isolation mechanisms into one single profile

Securing the Ecosystem
Debia
n
User-namespaces Seccomp Provenance
Selinux Kerberos

Intro to Container Security
Debia
n
http://bit.ly/1M4O9XE

Docker Bench
Debia
n
https://dockerbench.com/
‣Fully automated
‣Shipped as a container that tests containers

Conclusion
‣Docker is on the path to support least-privilege microservices, since it allows
fine-grained control over what access each container should have.
‣We will need easier tooling to define per-container security profiles
‣You can help!
#docker-security on Freenode

Thank you
diogo@docker.com
nathan.mccauley@docker.com

Más contenido relacionado

La actualidad más candente

Advanced Docker Developer Workflows on MacOS X and Windows

Advanced Docker Developer Workflows on MacOS X and Windows

Advanced Docker Developer Workflows on MacOS X and Windows

Anil Madhavapeddy

Docker and the Linux Kernel

Docker and the Linux Kernel

Docker and the Linux Kernel

Veer's Container Security

Veer's Container Security

Veer's Container Security

Docker Introduction

Docker Introduction

Docker Introduction

Built-in security is one of the most important features in Docker. But to build a secure app, you have to understand how to take advantage of these features. Security begins with the platform, but also requires conscious secure design at all stages of app development. In this session, we'll cover the latest features in Docker security, and how you can leverage them. You'll learn how to add them to your existing development pipeline, as well as how you can and streamline your workflow while making it more secure.

Building a Secure App with Docker - Ying Li and David Lawrence, Docker

Building a Secure App with Docker - Ying Li and David Lawrence, Docker

Building a Secure App with Docker - Ying Li and David Lawrence, Docker

A talk given at Docker London on Wednesday, July 20th, 2016. This talk is a fast-paced overview of the potential threats faced when containerizing applications, married to a quick run-through of the "security toolbox" available in the Docker engine via Linux kernel capabilities and features enabled by OCI's libcontainer/runc and Docker. A video recording of this talk is available here: https://skillsmatter.com/skillscasts/8551-container-security

Docker London: Container Security

Docker London: Container Security

Docker London: Container Security

The Docker network overlay driver relies on several technologies: network namespaces, VXLAN, Netlink and a distributed key-value store. This talk will present each of these mechanisms one by one along with their userland tools and show hands-on how they interact together when setting up an overlay to connect containers. The talk will continue with a demo showing how to build your own simple overlay using these technologies.

Deep Dive in Docker Overlay Networks - Laurent Bernaille - Architect, D2SI

Deep Dive in Docker Overlay Networks - Laurent Bernaille - Architect, D2SI

Deep Dive in Docker Overlay Networks - Laurent Bernaille - Architect, D2SI

Docker - introduction

Docker - introduction

Docker - introduction

Michał Kurzeja

Dockerizing your applications - Docker workshop @Twitter

Dockerizing your applications - Docker workshop @Twitter

Dockerizing your applications - Docker workshop @Twitter

Introduction to Containers - SQL Server and Docker

Introduction to Containers - SQL Server and Docker

Introduction to Containers - SQL Server and Docker

Docker Security and Content Trust

Docker Security and Content Trust

Docker Security and Content Trust

Docker presentation | Paris Docker Meetup

Docker presentation | Paris Docker Meetup

Docker presentation | Paris Docker Meetup

Docker Security Deep Dive by Ying Li and David Lawrence

Docker Security Deep Dive by Ying Li and David Lawrence

Docker Security Deep Dive by Ying Li and David Lawrence

Docker introduction

Docker introduction

Docker introduction

How Secure Is Your Container? ContainerCon Berlin 2016

How Secure Is Your Container? ContainerCon Berlin 2016

How Secure Is Your Container? ContainerCon Berlin 2016

Containers technologies

Containers technologies

Containers technologies

Orchestrating Docker containers at scale

Orchestrating Docker containers at scale

Orchestrating Docker containers at scale

What Have Namespaces Done for you Lately? Liz Rice, Aqua Security

What Have Namespaces Done for you Lately? Liz Rice, Aqua Security

What Have Namespaces Done for you Lately? Liz Rice, Aqua Security

Docker Presentation at the OpenStack Austin Meetup | 2013-09-12

Docker Presentation at the OpenStack Austin Meetup | 2013-09-12

Docker Presentation at the OpenStack Austin Meetup | 2013-09-12

Docker: the road ahead

Docker: the road ahead

Docker: the road ahead

La actualidad más candente (20)

Advanced Docker Developer Workflows on MacOS X and Windows

Advanced Docker Developer Workflows on MacOS X and Windows

Advanced Docker Developer Workflows on MacOS X and Windows

Docker and the Linux Kernel

Docker and the Linux Kernel

Docker and the Linux Kernel

Veer's Container Security

Veer's Container Security

Veer's Container Security

Docker Introduction

Docker Introduction

Docker Introduction

Building a Secure App with Docker - Ying Li and David Lawrence, Docker

Building a Secure App with Docker - Ying Li and David Lawrence, Docker

Building a Secure App with Docker - Ying Li and David Lawrence, Docker

Docker London: Container Security

Docker London: Container Security

Docker London: Container Security

Deep Dive in Docker Overlay Networks - Laurent Bernaille - Architect, D2SI

Deep Dive in Docker Overlay Networks - Laurent Bernaille - Architect, D2SI

Deep Dive in Docker Overlay Networks - Laurent Bernaille - Architect, D2SI

Docker - introduction

Docker - introduction

Docker - introduction

Dockerizing your applications - Docker workshop @Twitter

Dockerizing your applications - Docker workshop @Twitter

Dockerizing your applications - Docker workshop @Twitter

Introduction to Containers - SQL Server and Docker

Introduction to Containers - SQL Server and Docker

Introduction to Containers - SQL Server and Docker

Docker Security and Content Trust

Docker Security and Content Trust

Docker Security and Content Trust

Docker presentation | Paris Docker Meetup

Docker presentation | Paris Docker Meetup

Docker presentation | Paris Docker Meetup

Docker Security Deep Dive by Ying Li and David Lawrence

Docker Security Deep Dive by Ying Li and David Lawrence

Docker Security Deep Dive by Ying Li and David Lawrence

Docker introduction

Docker introduction

Docker introduction

How Secure Is Your Container? ContainerCon Berlin 2016

How Secure Is Your Container? ContainerCon Berlin 2016

How Secure Is Your Container? ContainerCon Berlin 2016

Containers technologies

Containers technologies

Containers technologies

Orchestrating Docker containers at scale

Orchestrating Docker containers at scale

Orchestrating Docker containers at scale

What Have Namespaces Done for you Lately? Liz Rice, Aqua Security

What Have Namespaces Done for you Lately? Liz Rice, Aqua Security

What Have Namespaces Done for you Lately? Liz Rice, Aqua Security

Docker Presentation at the OpenStack Austin Meetup | 2013-09-12

Docker Presentation at the OpenStack Austin Meetup | 2013-09-12

Docker Presentation at the OpenStack Austin Meetup | 2013-09-12

Docker: the road ahead

Docker: the road ahead

Docker: the road ahead

Destacado

Seven problems of Linux Containers

Seven problems of Linux Containers

Seven problems of Linux Containers

Kirill Kolyshkin

Virtual machines are generally considered secure. At least, secure enough to power highly multi-tenant, large-scale public clouds, where a single physical machine can host a large number of virtual instances belonging to different customers. Containers have many advantages over virtual machines: they boot faster, have less performance overhead, and use less resources. However, those advantages also stem from the fact that containers share the kernel of their host, instead of abstracting a new independent environment. This sharing has significant security implications, as kernel exploits can now lead to host-wide escalations. We will show techniques to harden Linux Containers; including kernel capabilities, mandatory access control, hardened kernels, user namespaces, and more, and discuss the remaining attack surface.

Docker, Linux Containers (LXC), and security

Docker, Linux Containers (LXC), and security

Docker, Linux Containers (LXC), and security

Jérôme Petazzoni

DockerCon SF 2015: DHE/DTR

DockerCon SF 2015: DHE/DTR

DockerCon SF 2015: DHE/DTR

Docker on the Raspberry Pi by Dieter Reuter (Hypriot)

Docker on the Raspberry Pi by Dieter Reuter (Hypriot)

Docker on the Raspberry Pi by Dieter Reuter (Hypriot)

DockerCon SF 2015: Ben Golub's Keynote Day 1

DockerCon SF 2015: Ben Golub's Keynote Day 1

DockerCon SF 2015: Ben Golub's Keynote Day 1

DockerCon 15 Keynote - Day 2

DockerCon 15 Keynote - Day 2

DockerCon 15 Keynote - Day 2

DockerCon SF 2015: Keynote Day 1

DockerCon SF 2015: Keynote Day 1

DockerCon SF 2015: Keynote Day 1

The SDACK architecture stands for Spark, Docker, Akka, Cassandra, and Kafka. At TrendMicro, we adopted the SDACK architecture to implement a security event inspection platform for APT attack analysis. In this talk, we will introduce SDACK stack with Spark lambda architecture, Akka and Kafka for streaming data pipeline, Cassandra for time series data, and Docker for microservices. Specifically, we will show you how we Dockerize each SDACK component to facilitate the RD team of algorithms development, help the QA team test the product easily, and use the Docker as a Service strategy to ship our products to customers. Next, we will show you how we monitor each Docker container and adjust the resource usage based on monitoring metrics. And then, we will share our Docker security policy which ensures our products are safety before shipping to customers. After that, we'll show you how we develop an all-in-one Docker based data product and scale it out to multi-host Docker cluster to solve the big data problem. Finally, we will share some challenges we faced during the product development and some lesson learned.

Using the SDACK Architecture on Security Event Inspection by Yu-Lun Chen and ...

Using the SDACK Architecture on Security Event Inspection by Yu-Lun Chen and ...

Using the SDACK Architecture on Security Event Inspection by Yu-Lun Chen and ...

DockerCon SF 2015: AWS w/ Deepak Singh

DockerCon SF 2015: AWS w/ Deepak Singh

DockerCon SF 2015: AWS w/ Deepak Singh

Containerd is a container supervisor that allows users to manage the lifecycle of a container as well as interact with the container while it is executing. Containerd was built to fulfill many of the requirements that we expect from a modern supervisor all while staying small and fast. In this talk, we will discuss some of the design decisions that shaped containerd’s architecture that allows it to reattach to running containers if it was killed and how it is designed to start 100s containers in seconds.

Containerd: Building a Container Supervisor by Michael Crosby

Containerd: Building a Container Supervisor by Michael Crosby

Containerd: Building a Container Supervisor by Michael Crosby

Riot builds a lot of software. At the start of 2015 we were looking at 3000 build jobs over a hundred different applications and dozens of teams. We were handling nearly 750 jobs per hour and our build infrastructure needed to grow rapidly to meet demand. We needed to give teams total control of the “stack” used to build their applications and we needed a solution that enabled agile delivery to our players. On top of that, we needed a scalable system that would allow a team of four engineers to support over 250. After as few explorations, we built an integrated Docker solution using Jenkins that accepts docker images submitted as build environments by engineers around the company . Our “containerized” farm now creates over 10,000 containers a week and handles nearly 1000 jobs at a rate of about 100 jobs an hour. In this occasionally technical talk, we’ll explore the decisions that led Riot to consider Docker, the evolutionary stages of our build infrastructure, and how the open source and in-house software we combined to achieve our goals at scale. You’ll come away with some best practices, plenty of lessons learned, and insight into some of the more unique aspects of our system (like automated testing of submitted build environments, or testing node.js apps in containers with Chromium and xvfb).

Thinking Inside the Container: A Continuous Delivery Story by Maxfield Stewart

Thinking Inside the Container: A Continuous Delivery Story by Maxfield Stewart

Thinking Inside the Container: A Continuous Delivery Story by Maxfield Stewart

Get hands-on with security features and best practices to protect your containerized services. Learn to push and verify signed images with Docker Content Trust, and collaborate with delegation roles. Intermediate to advanced level Docker experience recommended, participants will be building and pushing with Docker during the workshop. Led By Docker Security Experts: Riyaz Faizullabhoy David Lawrence Viktor Stanchev Experience Level: Intermediate to advanced level Docker experience recommended

Docker Security workshop slides

Docker Security workshop slides

Docker Security workshop slides

Docker Hub: Past, Present and Future by Ken Cochrane & BC Wong

Docker Hub: Past, Present and Future by Ken Cochrane & BC Wong

Docker Hub: Past, Present and Future by Ken Cochrane & BC Wong

Docker Registry V2

Docker Registry V2

Docker Registry V2

Is Docker Secure?

Is Docker Secure?

Is Docker Secure?

Manideep Konakandla

Docker Chicago Meetup - July 2014

Docker Chicago Meetup - July 2014

Docker Chicago Meetup - July 2014

Cohesive Networks

IoT Agents (With Lightweight M2M)

IoT Agents (With Lightweight M2M)

IoT Agents (With Lightweight M2M)

Docker is two years old. While security has always been at the core of the questions revolving around Docker, the nature of those questions has changed. Last year, the main concern was "can I safely colocate containers on the same machine?" and it elicited various responses. Dan Walsh, SELinux expert, notoriously said: "containers do not contain!", and at last year's LinuxCon, Jérôme delivered a presentation detailing how to harden Docker and containers to isolate them better. Today, people have new concerns. They include image transport, vulnerability mitigation, and more. After a recap about the current state of container security, Jérôme will explain why those new questions showed up, and most importantly, how to address them and safely deploy containers in general, and Docker in particular.

Containers, Docker, and Security: State Of The Union (LinuxCon and ContainerC...

Containers, Docker, and Security: State Of The Union (LinuxCon and ContainerC...

Containers, Docker, and Security: State Of The Union (LinuxCon and ContainerC...

Jérôme Petazzoni

IoT Agents (Introduction)

IoT Agents (Introduction)

IoT Agents (Introduction)

What's New in Docker 1.12 (June 20, 2016) by Mike Goelzer & Andrea Luzzardi

What's New in Docker 1.12 (June 20, 2016) by Mike Goelzer & Andrea Luzzardi

What's New in Docker 1.12 (June 20, 2016) by Mike Goelzer & Andrea Luzzardi

Destacado (20)

Seven problems of Linux Containers

Seven problems of Linux Containers

Seven problems of Linux Containers

Docker, Linux Containers (LXC), and security

Docker, Linux Containers (LXC), and security

Docker, Linux Containers (LXC), and security

DockerCon SF 2015: DHE/DTR

DockerCon SF 2015: DHE/DTR

DockerCon SF 2015: DHE/DTR

Docker on the Raspberry Pi by Dieter Reuter (Hypriot)

Docker on the Raspberry Pi by Dieter Reuter (Hypriot)

Docker on the Raspberry Pi by Dieter Reuter (Hypriot)

DockerCon SF 2015: Ben Golub's Keynote Day 1

DockerCon SF 2015: Ben Golub's Keynote Day 1

DockerCon SF 2015: Ben Golub's Keynote Day 1

DockerCon 15 Keynote - Day 2

DockerCon 15 Keynote - Day 2

DockerCon 15 Keynote - Day 2

DockerCon SF 2015: Keynote Day 1

DockerCon SF 2015: Keynote Day 1

DockerCon SF 2015: Keynote Day 1

Using the SDACK Architecture on Security Event Inspection by Yu-Lun Chen and ...

Using the SDACK Architecture on Security Event Inspection by Yu-Lun Chen and ...

Using the SDACK Architecture on Security Event Inspection by Yu-Lun Chen and ...

DockerCon SF 2015: AWS w/ Deepak Singh

DockerCon SF 2015: AWS w/ Deepak Singh

DockerCon SF 2015: AWS w/ Deepak Singh

Containerd: Building a Container Supervisor by Michael Crosby

Containerd: Building a Container Supervisor by Michael Crosby

Containerd: Building a Container Supervisor by Michael Crosby

Thinking Inside the Container: A Continuous Delivery Story by Maxfield Stewart

Thinking Inside the Container: A Continuous Delivery Story by Maxfield Stewart

Thinking Inside the Container: A Continuous Delivery Story by Maxfield Stewart

Docker Security workshop slides

Docker Security workshop slides

Docker Security workshop slides

Docker Hub: Past, Present and Future by Ken Cochrane & BC Wong

Docker Hub: Past, Present and Future by Ken Cochrane & BC Wong

Docker Hub: Past, Present and Future by Ken Cochrane & BC Wong

Docker Registry V2

Docker Registry V2

Docker Registry V2

Is Docker Secure?

Is Docker Secure?

Is Docker Secure?

Docker Chicago Meetup - July 2014

Docker Chicago Meetup - July 2014

Docker Chicago Meetup - July 2014

IoT Agents (With Lightweight M2M)

IoT Agents (With Lightweight M2M)

IoT Agents (With Lightweight M2M)

Containers, Docker, and Security: State Of The Union (LinuxCon and ContainerC...

Containers, Docker, and Security: State Of The Union (LinuxCon and ContainerC...

Containers, Docker, and Security: State Of The Union (LinuxCon and ContainerC...

IoT Agents (Introduction)

IoT Agents (Introduction)

IoT Agents (Introduction)

What's New in Docker 1.12 (June 20, 2016) by Mike Goelzer & Andrea Luzzardi

What's New in Docker 1.12 (June 20, 2016) by Mike Goelzer & Andrea Luzzardi

What's New in Docker 1.12 (June 20, 2016) by Mike Goelzer & Andrea Luzzardi

Similar a DockerCon SF 2015: Docker Security

Docker security microservices

Docker security microservices

Docker security microservices

DockerDay2015: Docker Security

DockerDay2015: Docker Security

DockerDay2015: Docker Security

Docker introduction

Docker introduction

Docker introduction

Docker-Intro

OpenStack Summit

OpenStack Summit

OpenStack Summit

Docker SF Meetup January 2016

Docker SF Meetup January 2016

Docker SF Meetup January 2016

Patrick Chanezon

Docker Security

Docker Security

Docker Security

Dockers zero to hero

Dockers zero to hero

Dockers zero to hero

Nicolas De Loof

Docker is an open-source project to easily create lightweight, portable, self-sufficient containers from any application. The same container that a developer builds and tests on a laptop can run at scale, in production, on VMs, bare metal, OpenStack clusters, public clouds and more. In this demo, I will show how to build a Apache image from a Dockerfile and deploy a PHP application which is present in an external folder using custom configuration files.

Docker - Demo on PHP Application deployment

Docker - Demo on PHP Application deployment

Docker - Demo on PHP Application deployment

Navigating container technology for enhanced security by Niklas Saari

Navigating container technology for enhanced security by Niklas Saari

Navigating container technology for enhanced security by Niklas Saari

Demystifying Containerization Principles for Data Scientists

Demystifying Containerization Principles for Data Scientists

Demystifying Containerization Principles for Data Scientists

Presented by Tim Mackey, Senior Technology Evangelist, Black Duck Software on August 17. To use containers safely, you need to be aware of potential security issues and the tools you need for securing container-based systems. Secure production use of containers requires an understanding of how attackers might seek to compromise the container, and what you should be aware of to minimize that potential risk. Tim Mackey, Senior Technical Evangelist at Black Duck Software, provides guidance for developing container security policies and procedures around threats such as: 1. Network security 2. Access control 3. Tamper management and trust 4. Denial of service and SLAs 5. Vulnerabilities Register today to learn about the biggest security challenges you face when deploying containers, and how you can effectively deal with those threats. Watch the webinar on BrightTalk: http://bit.ly/2bpdswg

5 Ways to Secure Your Containers for Docker and Beyond

5 Ways to Secure Your Containers for Docker and Beyond

5 Ways to Secure Your Containers for Docker and Beyond

Black Duck by Synopsys

Introduction to Docker

Introduction to Docker

Introduction to Docker

Rafael Konlechner

Evolution of Linux Containerization

Evolution of Linux Containerization

Evolution of Linux Containerization

Evoluation of Linux Container Virtualization

Evoluation of Linux Container Virtualization

Evoluation of Linux Container Virtualization

Imesh Gunaratne

Container & kubernetes

Container & kubernetes

Container & kubernetes

Docker provides an integrated and opinionated toolset to build, ship and run distributed applications. Over the past year, the Docker codebase has been refactored extensively to extract infrastructure plumbing components that can be used independently, following the UNIX philosophy of small tools doing one thing well: runC, containerd, swarmkit, hyperkit, vpnkit, datakit and the newly introduced InfraKit. This talk will give an overview of these tools and how you can use them to build your own distributed systems without Docker. Patrick Chanezon & David Chung, Docker & Phil Estes, IBM

Building Distributed Systems without Docker, Using Docker Plumbing Projects -...

Building Distributed Systems without Docker, Using Docker Plumbing Projects -...

Building Distributed Systems without Docker, Using Docker Plumbing Projects -...

Patrick Chanezon

Revolutionizing the cloud with container virtualization

Revolutionizing the cloud with container virtualization

Revolutionizing the cloud with container virtualization

Webinar Session - https://youtu.be/_5MfGMf8PG4 In this webinar, we share how the Container Attached Storage pattern makes performance tuning more tractable, by giving each workload its own storage system, thereby decreasing the variables needed to understand and tune performance. We then introduce MayaStor, a breakthrough in the use of containers and Kubernetes as a data plane. MayaStor is the first containerized data engine available that delivers near the theoretical maximum performance of underlying systems. MayaStor performance scales with the underlying hardware and has been shown, for example, to deliver in excess of 10 million IOPS in a particular environment.

Webinar: OpenEBS - Still Free and now FASTEST Kubernetes storage

Webinar: OpenEBS - Still Free and now FASTEST Kubernetes storage

Webinar: OpenEBS - Still Free and now FASTEST Kubernetes storage

Bare-metal, Docker Containers, and Virtualization: The Growing Choices for Cl...

Bare-metal, Docker Containers, and Virtualization: The Growing Choices for Cl...

Bare-metal, Docker Containers, and Virtualization: The Growing Choices for Cl...

Odinot Stanislas

Similar a DockerCon SF 2015: Docker Security (20)

Docker security microservices

Docker security microservices

Docker security microservices

DockerDay2015: Docker Security

DockerDay2015: Docker Security

DockerDay2015: Docker Security

Docker introduction

Docker introduction

Docker introduction

Docker-Intro

OpenStack Summit

OpenStack Summit

OpenStack Summit

Docker SF Meetup January 2016

Docker SF Meetup January 2016

Docker SF Meetup January 2016

Docker Security

Docker Security

Docker Security

Dockers zero to hero

Dockers zero to hero

Dockers zero to hero

Docker - Demo on PHP Application deployment

Docker - Demo on PHP Application deployment

Docker - Demo on PHP Application deployment

Navigating container technology for enhanced security by Niklas Saari

Navigating container technology for enhanced security by Niklas Saari

Navigating container technology for enhanced security by Niklas Saari

Demystifying Containerization Principles for Data Scientists

Demystifying Containerization Principles for Data Scientists

Demystifying Containerization Principles for Data Scientists

5 Ways to Secure Your Containers for Docker and Beyond

5 Ways to Secure Your Containers for Docker and Beyond

5 Ways to Secure Your Containers for Docker and Beyond

Introduction to Docker

Introduction to Docker

Introduction to Docker

Evolution of Linux Containerization

Evolution of Linux Containerization

Evolution of Linux Containerization

Evoluation of Linux Container Virtualization

Evoluation of Linux Container Virtualization

Evoluation of Linux Container Virtualization

Container & kubernetes

Container & kubernetes

Container & kubernetes

Building Distributed Systems without Docker, Using Docker Plumbing Projects -...

Building Distributed Systems without Docker, Using Docker Plumbing Projects -...

Building Distributed Systems without Docker, Using Docker Plumbing Projects -...

Revolutionizing the cloud with container virtualization

Revolutionizing the cloud with container virtualization

Revolutionizing the cloud with container virtualization

Webinar: OpenEBS - Still Free and now FASTEST Kubernetes storage

Webinar: OpenEBS - Still Free and now FASTEST Kubernetes storage

Webinar: OpenEBS - Still Free and now FASTEST Kubernetes storage

Bare-metal, Docker Containers, and Virtualization: The Growing Choices for Cl...

Bare-metal, Docker Containers, and Virtualization: The Growing Choices for Cl...

Bare-metal, Docker Containers, and Virtualization: The Growing Choices for Cl...

Más de Docker, Inc.

Raymond Arifianto, AccelByte and Mark Mandel, Google - We have been deploying containerized micro-services for our Game Backend Services for a while. Now we are tackling the challenge to scale up fleets of game dedicated servers in multiple regions, multiple data centers and multiple providers - some in bare metal, some in Cloud. So we leverage docker containerization to deploy Game Servers to achieve Portability, Fast Deployment and Predictability, enabling us to scale up to thousands of servers, on demand, without a sweat.

Containerize Your Game Server for the Best Multiplayer Experience

Containerize Your Game Server for the Best Multiplayer Experience

Containerize Your Game Server for the Best Multiplayer Experience

Nicholas Dille, Haufe-Lexware + Docker Captain - Docker continues to be the standard tool for building container images. For more than a year Docker ships with BuildKit as an alternative image builder, providing advanced features for secret and cache management. These features help to make image builds faster and more secure. In this session, Docker Captain Nicholas Dille will teach you how to use Buildkit features to your advantage.

How to Improve Your Image Builds Using Advance Docker Build

How to Improve Your Image Builds Using Advance Docker Build

How to Improve Your Image Builds Using Advance Docker Build

Lukonde Mwila, Entelect - As the cloud-native approach to development and deployment becomes more prevalent, it's an exciting time for software engineers to be equipped on how to dockerize multi-container applications and deploy them to the cloud. In this talk, Lukonde Mwila, Software Engineer at Entelect, will cover the following topics: - Docker Compose - Containerizing an Nginx Server - Containerizing an React App - Containerizing an Node.JS App - Containerizing anMongoDB App - Runing Multi-Container App Locally - Creating a CI/CD Pipeline - Adding a build stage to test containers and push images to Docker Hub - Deploying Multi-Container App to AWS Elastic Beanstalk Lukonde will start by giving an overview of how Docker Compose works and how it makes it very easy and straightforward to startup multiple Docker containers at the same time and automatically connect them together with some form of networking. After that, Lukonde will take a hands on approach to containerize an Nginx server, a React app, a NodeJS app and a MongoDB instance to demonstrate the power of Docker Compose. He'll demonstrate usage of two Docker files for an application, one production grade and the other for local development and running of tests. Lastly, he'll demonstrate creating a CI/CD pipeline in AWS to build and test our Docker images before pushing them to Docker Hub or AWS ECR, and finally deploying our multi-container application AWS Elastic Beanstalk.

Build & Deploy Multi-Container Applications to AWS

Build & Deploy Multi-Container Applications to AWS

Build & Deploy Multi-Container Applications to AWS

Kevin Jones, NGNIX - NGINX is one of the most popular images on Docker Hub and has been at the forefront of the web since the early 2000's. In this talk we will discuss how and why NGINX's lightweight and powerful architecture makes it a very popular choice for securing containerized applications as a sidecar reverse proxy within containers. We will highlight important aspects of application security that NGINX can help with, such as TLS, HTTP, AuthN, AuthZ and traffic control.

Securing Your Containerized Applications with NGINX

Securing Your Containerized Applications with NGINX

Securing Your Containerized Applications with NGINX

Kathleen Juell, Digital Ocean - Containers are an essential part of today's microservice ecosystem, as they allow developers and operators to maintain standards of reliability and reproducibility in fast-paced deployment scenarios. And while there are best practices that extend across stacks in containerized environments, there are also things that make each stack distinct, starting with the application image itself. This talk will dive into some of these particularities, both at the image and service level, while also covering general best practices for building and running Node applications with database backends using Docker and Compose.

How To Build and Run Node Apps with Docker and Compose

How To Build and Run Node Apps with Docker and Compose

How To Build and Run Node Apps with Docker and Compose

Hands-on Helm

Jeff Hajewski, Salesforce - There is a wealth of information on building deep learning models with PyTorch or TensorFlow. Anyone interested in building a deep learning model is only a quick search away from a number of clear and well written tutorials that will take them from zero knowledge to having a working image classifier. But what happens when you need to deploy these models in a production setting? At Salesforce, we use TensorFlow models to help us provide customers with insights into their data, and we do this as close to real-time as possible. Designing these systems in a scalable manner requires overcoming a number of design challenges, but the core component is Docker. Docker enables us to design highly scalable systems by allowing us to focus on service interactions, rather than how our services will interact with the hardware. Docker is also at the core of our test infrastructure, allowing developers and data scientists to build and test the system in an end to end manner on their local machines. While some of this may sound complex, the core message is simplicity - Docker allows us to focus on the aspects of the system that matter, greatly simplifying our lives.

Distributed Deep Learning with Docker at Salesforce

Distributed Deep Learning with Docker at Salesforce

Distributed Deep Learning with Docker at Salesforce

James Fuller, webcomposite s.r.o. - Curl is the venerable (yet very modern) 'swiss army knife' command line tool and library for transferring data with URLs. Recently we (the Curl team) decided to build a release for Docker Hub. This talk will outline our current development workflow with respect to the docker image and provide insights on what it takes to build a docker image for mass public consumption. We are also keen to learn from users and other developers how we might improve and enhance the official curl docker image.

The First 10M Pulls: Building The Official Curl Image for Docker Hub

The First 10M Pulls: Building The Official Curl Image for Docker Hub

The First 10M Pulls: Building The Official Curl Image for Docker Hub

Fabian Stäber, Instana - In recent years, we saw a great paradigm shift in software engineering away from static monolithic applications towards dynamic distributed horizontally scalable architectures. Docker is one of the key technologies enabling this development. This shift poses a lot of new challenges for application monitoring, ranging from practical issues (need for automation) to technical challenges (Docker networking) to organizational topics (blurring line between software engineers and operations) to fundamental questions (define what is an application). In this talk we show how Docker changed the way we do monitoring, how modern application monitoring systems work, and what future developments we expect.

Monitoring in a Microservices World

Monitoring in a Microservices World

Monitoring in a Microservices World

Clemente Biondo, Engineering Ingegneria Informatica - When the COVID 19 pandemic started, Engineering Ingegneria Informatica Group (1.25 billion euros of revenues, 65 offices around the world, 12.000 employees) was forced to put their digital transformation to the test in order to maintain operational continuity. In this session, Clemente Biondo, the Tech Lead of the Information Systems Department, will share how his company is reacting to this unforeseeable scenario and how Docker-driven digital transformation had paved the path for work to continue remotely. Clemente will discuss learnings moving from colocated teams, manual approaches, email based-business processes, and a monolithic application to a mature DevOps culture characterized by a distributed autonomous workforce and a continuous deployment process that deploys backward-compatible Docker containerized microservices into hybrid multi cloud datacenters an average of twice a day with zero-downtime. He will detail how they use Docker to unify dev, test and production environments, and as an efficient and automated mechanism for deploying applications. Lastly, Clemente shares how, in our darkest hour, he and others are working to shine their brightest light.

COVID-19 in Italy: How Docker is Helping the Biggest Italian IT Company Conti...

COVID-19 in Italy: How Docker is Helping the Biggest Italian IT Company Conti...

COVID-19 in Italy: How Docker is Helping the Biggest Italian IT Company Conti...

Chris Lauer, NOAA Space Weather Prediction Center - This is the story of how adopting a containerized workflow changed the way our small software team works at NOAA’s Space Weather Prediction Center. Our old architecture, a big ball of mud shared-database integration, just wasn’t cutting it - it was killing our agility. Over the past two years, our small team has adopted a microservice style architecture, using Docker with docker-compose and environment files as our deployment strategy for all new development. We’ve discovered the joys of using containers for identical dev, staging, and production environments. We work closely with scientists: much of the code we’re running has complicated and conflicting library dependencies. Docker captures these beautifully - we’ve even had some success teaching our scientists to use it! I’ll share what we’ve learned, some of the persistent challenges we face, and one place we really got it wrong. This talk builds off of a popular hallway track from DockerCon 2019.

Predicting Space Weather with Docker

Predicting Space Weather with Docker

Predicting Space Weather with Docker

Brian Christner, 56k + Docker Captain - In this session, we will unlock the full potential of using Microsoft Visual Studio Code (VS Code) and Docker Desktop to turn you into a Docker Power User. When we expand and utilize the VS Code Docker plugin, we can take our projects and Docker skills to the next level. In addition to using VS Code, we streamline our Docker Desktop development workflow with less context switching and built-in shortcuts. You will learn how to bootstrap new projects, quickly write Dockerfiles utilizing templates, build, run, and interact with containers all from VS Code.

Become a Docker Power User With Microsoft Visual Studio Code

Become a Docker Power User With Microsoft Visual Studio Code

Become a Docker Power User With Microsoft Visual Studio Code

How to Use Mirroring and Caching to Optimize your Container Registry

How to Use Mirroring and Caching to Optimize your Container Registry

How to Use Mirroring and Caching to Optimize your Container Registry

Ashish Sharma, SS&C Eze - SS&C Eze provides various products in the stock market domain. We spent the last couple of years building Eclipse which is an investment suite born in cloud. The journey so far has been very interesting. The very first version of the product were a bunch of monolithic windows services and deployed using Octopus tool. We successfully managed to bring all the monolithic problem to the cloud and created a nightmare for ourselves. We then started applying microservices architecture principles and started breaking the monolithic into small services. Very soon we realized that we need a better packaging/deployment tool. Docker looked like a magical solution to our problem. Since its adoption, It has not only solved the deployment problem for us but has made a deep impact on different aspects of SDLC. It allowed us to use heterogeneous technology stacks, simplified development environment setup, simplified our testing strategy, improved our speed of delivery, and made our developers more productive. In this talk I would like to share our experience of using Docker and its positive impact on our SDLC.

Monolithic to Microservices + Docker = SDLC on Steroids!

Monolithic to Microservices + Docker = SDLC on Steroids!

Monolithic to Microservices + Docker = SDLC on Steroids!

Ara Pulido, Datadog - Container technologies, although not new, have increased their popularity in the past few years, with container orchestrators allowing companies around the world to adopt these technologies to help them ship and scale microservices with precision and velocity. Kubernetes is currently the most popular container orchestration platform, and while many organizations are migrating their workloads to it, Kubernetes is still relatively immature. New corner cases, errors, and quirks are regularly discovered as users push the boundaries of size and scale. When Datadog adopted Kubernetes we discovered some of these boundaries the hard way, and we continuously challenge and modify our infrastructure decisions in order to fit our use case. Join me in this talk for our story on what we learned while we scaled our Kubernetes clusters, the contributions to Kubernetes we made along the way, and how you can apply those learnings when growing your Kubernetes clusters from a handful to hundreds or thousands of nodes.

Kubernetes at Datadog Scale

Kubernetes at Datadog Scale

Kubernetes at Datadog Scale

Andy Clemenko, StackRox - One underutilized, and amazing, thing about the docker image scheme is labels. Labels are a built in way to document all aspects about the image itself. Think about all the information that the tags inside your clothing carry. If you care to look you can find out everything about the garment. All that information can be very valuable. Now think about how we can leverage labels to carry similar information. We can even use the labels to contain Docker Compose or even Kubernetes Yaml. We can even include labels into the CI/CD process making things more secure and smoother. Come find out some fun techniques on how to leverage labels to do some fun and amazing things.

Labels, Labels, Labels

Labels, Labels, Labels

Labels, Labels, Labels

Patrick Deloulay, Micro Focus - Micro Focus started their digital transformation 3 years ago, moving the entire portfolio into hundreds of container images. Leveraging Docker Hub as our primary registry service, we will cover how we ended up building a simple but secure push/pull model to publish and deliver our premium assets to our customers and partners to both meet the high agility of our DevOps teams while greatly simplifying the deployment of our applications.

Using Docker Hub at Scale to Support Micro Focus' Delivery and Deployment Model

Using Docker Hub at Scale to Support Micro Focus' Delivery and Deployment Model

Using Docker Hub at Scale to Support Micro Focus' Delivery and Deployment Model

Lukonde Mwila, Entelect As the cloud-native approach to development and deployment becomes more prevalent, it's an exciting time for software engineers to be equipped on how to dockerize multi-container applications and deploy them to the cloud. In this talk, Lukonde Mwila, Software Engineer at Entelect, will cover the following topics: - Docker Compose - Containerizing an Nginx Server - Containerizing an React App - Containerizing an Node.JS App - Containerizing anMongoDB App - Runing Multi-Container App Locally - Creating a CI/CD Pipeline - Adding a build stage to test containers and push images to Docker Hub - Deploying Multi-Container App to AWS Elastic Beanstalk Lukonde will start by giving an overview of how Docker Compose works and how it makes it very easy and straightforward to startup multiple Docker containers at the same time and automatically connect them together with some form of networking. After that, Lukonde will take a hands on approach to containerize an Nginx server, a React app, a NodeJS app and a MongoDB instance to demonstrate the power of Docker Compose. He'll demonstrate usage of two Docker files for an application, one production grade and the other for local development and running of tests. Lastly, he'll demonstrate creating a CI/CD pipeline in AWS to build and test our Docker images before pushing them to Docker Hub or AWS ECR, and finally deploying our multi-container application AWS Elastic Beanstalk.

Build & Deploy Multi-Container Applications to AWS

Build & Deploy Multi-Container Applications to AWS

Build & Deploy Multi-Container Applications to AWS

Elton Stoneman, Docker Captain + Container Consultant and Trainer How do you provide a SaaS offering when your product is a 10-year old Fortran app, currently built to run on Windows 10? With Docker and Kubernetes of course - and you can do it in a week (... to prototype level at least). In this session I'll walk through the processes and practicalities of taking an older Windows app, making it run in containers with Kubernetes, and then building a simple API wrapper to host the whole stack as a cloud-based SaaS product. There's a lot of technology here from a real world case study, and I'll focus on: - running Windows apps in Docker containers - building a .NET Core API which can run in Linux or Windows containers - running the stack in Kubernetes with Docker Desktop locally and AKS in the cloud - configuring AKS workloads in Azure to burst out to Azure Container Instances And there's a core theme to this session: Docker and Kubernetes are complex technologies, but they're the key to modern development. If you invest time learning them, they make projects like this simple, portable, fast and fun.

From Fortran on the Desktop to Kubernetes in the Cloud: A Windows Migration S...

From Fortran on the Desktop to Kubernetes in the Cloud: A Windows Migration S...

From Fortran on the Desktop to Kubernetes in the Cloud: A Windows Migration S...

This virtual meetup introduces the concepts and best practices of using Docker containers for software development for the Arm architecture across a variety of hardware systems. Using Docker Desktop on Windows or Mac, Amazon Web Services (AWS) A1 instances, and embedded Linux, we will demonstrate the latest Docker features to build, share, and run multi-architecture images with transparent support for Arm.

Developing with Docker for the Arm Architecture

Developing with Docker for the Arm Architecture

Developing with Docker for the Arm Architecture

Más de Docker, Inc. (20)

Containerize Your Game Server for the Best Multiplayer Experience

Containerize Your Game Server for the Best Multiplayer Experience

Containerize Your Game Server for the Best Multiplayer Experience

How to Improve Your Image Builds Using Advance Docker Build

How to Improve Your Image Builds Using Advance Docker Build

How to Improve Your Image Builds Using Advance Docker Build

Build & Deploy Multi-Container Applications to AWS

Build & Deploy Multi-Container Applications to AWS

Build & Deploy Multi-Container Applications to AWS

Securing Your Containerized Applications with NGINX

Securing Your Containerized Applications with NGINX

Securing Your Containerized Applications with NGINX

How To Build and Run Node Apps with Docker and Compose

How To Build and Run Node Apps with Docker and Compose

How To Build and Run Node Apps with Docker and Compose

Hands-on Helm

Distributed Deep Learning with Docker at Salesforce

Distributed Deep Learning with Docker at Salesforce

Distributed Deep Learning with Docker at Salesforce

The First 10M Pulls: Building The Official Curl Image for Docker Hub

The First 10M Pulls: Building The Official Curl Image for Docker Hub

The First 10M Pulls: Building The Official Curl Image for Docker Hub

Monitoring in a Microservices World

Monitoring in a Microservices World

Monitoring in a Microservices World

COVID-19 in Italy: How Docker is Helping the Biggest Italian IT Company Conti...

COVID-19 in Italy: How Docker is Helping the Biggest Italian IT Company Conti...

COVID-19 in Italy: How Docker is Helping the Biggest Italian IT Company Conti...

Predicting Space Weather with Docker

Predicting Space Weather with Docker

Predicting Space Weather with Docker

Become a Docker Power User With Microsoft Visual Studio Code

Become a Docker Power User With Microsoft Visual Studio Code

Become a Docker Power User With Microsoft Visual Studio Code

How to Use Mirroring and Caching to Optimize your Container Registry

How to Use Mirroring and Caching to Optimize your Container Registry

How to Use Mirroring and Caching to Optimize your Container Registry

Monolithic to Microservices + Docker = SDLC on Steroids!

Monolithic to Microservices + Docker = SDLC on Steroids!

Monolithic to Microservices + Docker = SDLC on Steroids!

Kubernetes at Datadog Scale

Kubernetes at Datadog Scale

Kubernetes at Datadog Scale

Labels, Labels, Labels

Labels, Labels, Labels

Labels, Labels, Labels

Using Docker Hub at Scale to Support Micro Focus' Delivery and Deployment Model

Using Docker Hub at Scale to Support Micro Focus' Delivery and Deployment Model

Using Docker Hub at Scale to Support Micro Focus' Delivery and Deployment Model

Build & Deploy Multi-Container Applications to AWS

Build & Deploy Multi-Container Applications to AWS

Build & Deploy Multi-Container Applications to AWS

From Fortran on the Desktop to Kubernetes in the Cloud: A Windows Migration S...

From Fortran on the Desktop to Kubernetes in the Cloud: A Windows Migration S...

From Fortran on the Desktop to Kubernetes in the Cloud: A Windows Migration S...

Developing with Docker for the Arm Architecture

Developing with Docker for the Arm Architecture

Developing with Docker for the Arm Architecture

Último

💥 You’re lucky! We’ve found two different (lead) developers that are willing to share their valuable lessons learned about using UiPath Document Understanding! Based on recent implementations in appealing use cases at Partou and SPIE. Don’t expect fancy videos or slide decks, but real and practical experiences that will help you with your own implementations. 📕 Topics that will be addressed: • Training the ML-model by humans: do or don't? • Rule-based versus AI extractors • Tips for finding use cases • How to start 👨‍🏫👨‍💻 Speakers: o Dion Morskieft, RPA Product Owner @Partou o Jack Klein-Schiphorst, Automation Developer @Tacstone Technology

DEV meet-up UiPath Document Understanding May 7 2024 Amsterdam

DEV meet-up UiPath Document Understanding May 7 2024 Amsterdam

DEV meet-up UiPath Document Understanding May 7 2024 Amsterdam

UiPathCommunity

MS Copilot expands with MS Graph connectors

MS Copilot expands with MS Graph connectors

MS Copilot expands with MS Graph connectors

Nanddeep Nachan

The microservices honeymoon is over. When starting a new project or revamping a legacy monolith, teams started looking for alternatives to microservices. The Modular Monolith, or 'Modulith', is an architecture that reaps the benefits of (vertical) functional decoupling without the high costs associated with separate deployments. This talk will delve into the advantages and challenges of this progressive architecture, beginning with exploring the concept of a 'module', its internal structure, public API, and inter-module communication patterns. Supported by spring-modulith, the talk provides practical guidance on addressing the main challenges of a Modultith Architecture: finding and guarding module boundaries, data decoupling, and integration module-testing. You should not miss this talk if you are a software architect or tech lead seeking practical, scalable solutions. About the author With two decades of experience, Victor is a Java Champion working as a trainer for top companies in Europe. Five thousands developers in 120 companies attended his workshops, so he gets to debate every week the challenges that various projects struggle with. In return, Victor summarizes key points from these workshops in conference talks and online meetups for the European Software Crafters, the world’s largest developer community around architecture, refactoring, and testing. Discover how Victor can help you on victorrentea.ro : company training catalog, consultancy and YouTube playlists.

Modular Monolith - a Practical Alternative to Microservices @ Devoxx UK 2024

Modular Monolith - a Practical Alternative to Microservices @ Devoxx UK 2024

Modular Monolith - a Practical Alternative to Microservices @ Devoxx UK 2024

Following the popularity of "Cloud Revolution: Exploring the New Wave of Serverless Spatial Data," we're thrilled to announce this much-anticipated encore webinar. In this sequel, we'll dive deeper into the Cloud-Native realm by uncovering practical applications and FME support for these new formats, including COGs, COPC, FlatGeoBuf, GeoParquet, STAC, and ZARR. Building on the foundation laid by industry leaders Michelle Roby of Radiant Earth and Chris Holmes of Planet in the first webinar, this second part offers an in-depth look at the real-world application and behind-the-scenes dynamics of these cutting-edge formats. We will spotlight specific use-cases and workflows, showcasing their efficiency and relevance in practical scenarios. Discover the vast possibilities each format holds, highlighted through detailed discussions and demonstrations. Our expert speakers will dissect the key aspects and provide critical takeaways for effective use, ensuring attendees leave with a thorough understanding of how to apply these formats in their own projects. Elevate your understanding of how FME supports these cutting-edge technologies, enhancing your ability to manage, share, and analyze spatial data. Whether you're building on knowledge from our initial session or are new to the serverless spatial data landscape, this webinar is your gateway to mastering cloud-native formats in your workflows.

Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME

Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME

Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME

💉💊+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHABI}}+971581248768 +971581248768 Mtp-Kit (500MG) Prices » Dubai [(+971581248768**)] Abortion Pills For Sale In Dubai, UAE, Mifepristone and Misoprostol Tablets Available In Dubai, UAE CONTACT DR.Maya Whatsapp +971581248768 We Have Abortion Pills / Cytotec Tablets /Mifegest Kit Available in Dubai, Sharjah, Abudhabi, Ajman, Alain, Fujairah, Ras Al Khaimah, Umm Al Quwain, UAE, Buy cytotec in Dubai +971581248768''''Abortion Pills near me DUBAI | ABU DHABI|UAE. Price of Misoprostol, Cytotec” +971581248768' Dr.DEEM ''BUY ABORTION PILLS MIFEGEST KIT, MISOPROTONE, CYTOTEC PILLS IN DUBAI, ABU DHABI,UAE'' Contact me now via What's App…… abortion Pills Cytotec also available Oman Qatar Doha Saudi Arabia Bahrain Above all, Cytotec Abortion Pills are Available In Dubai / UAE, you will be very happy to do abortion in Dubai we are providing cytotec 200mg abortion pill in Dubai, UAE. Medication abortion offers an alternative to Surgical Abortion for women in the early weeks of pregnancy. We only offer abortion pills from 1 week-6 Months. We then advise you to use surgery if its beyond 6 months. Our Abu Dhabi, Ajman, Al Ain, Dubai, Fujairah, Ras Al Khaimah (RAK), Sharjah, Umm Al Quwain (UAQ) United Arab Emirates Abortion Clinic provides the safest and most advanced techniques for providing non-surgical, medical and surgical abortion methods for early through late second trimester, including the Abortion By Pill Procedure (RU 486, Mifeprex, Mifepristone, early options French Abortion Pill), Tamoxifen, Methotrexate and Cytotec (Misoprostol). The Abu Dhabi, United Arab Emirates Abortion Clinic performs Same Day Abortion Procedure using medications that are taken on the first day of the office visit and will cause the abortion to occur generally within 4 to 6 hours (as early as 30 minutes) for patients who are 3 to 12 weeks pregnant. When Mifepristone and Misoprostol are used, 50% of patients complete in 4 to 6 hours; 75% to 80% in 12 hours; and 90% in 24 hours. We use a regimen that allows for completion without the need for surgery 99% of the time. All advanced second trimester and late term pregnancies at our Tampa clinic (17 to 24 weeks or greater) can be completed within 24 hours or less 99% of the time without the need surgery. The procedure is completed with minimal to no complications. Our Women's Health Center located in Abu Dhabi, United Arab Emirates, uses the latest medications for medical abortions (RU-486, Mifeprex, Mifegyne, Mifepristone, early options French abortion pill), Methotrexate and Cytotec (Misoprostol). The safety standards of our Abu Dhabi, United Arab Emirates Abortion Doctors remain unparalleled. They consistently maintain the lowest complication rates throughout the nation. Our Physicians and staff are always available to answer questions and care for women in one of the most difficult times in their lives. The decision to have an abortion at the Abortion Cl

+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...

+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...

+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...

?#DUbAI#??##{{(☎️+971_581248768%)**%*]'#abortion pills for sale in dubai@

How to Troubleshoot Apps for the Modern Connected Worker

How to Troubleshoot Apps for the Modern Connected Worker

How to Troubleshoot Apps for the Modern Connected Worker

Angeliki Cooney has spent over twenty years at the forefront of the life sciences industry, working out of Wynantskill, NY. She is highly regarded for her dedication to advancing the development and accessibility of innovative treatments for chronic diseases, rare disorders, and cancer. Her professional journey has centered on strategic consulting for biopharmaceutical companies, facilitating digital transformation, enhancing omnichannel engagement, and refining strategic commercial practices. Angeliki's innovative contributions include pioneering several software-as-a-service (SaaS) products for the life sciences sector, earning her three patents. As the Senior Vice President of Life Sciences at Avenga, Angeliki orchestrated the firm's strategic entry into the U.S. market. Avenga, a renowned digital engineering and consulting firm, partners with significant entities in the pharmaceutical and biotechnology fields. Her leadership was instrumental in expanding Avenga's client base and establishing its presence in the competitive U.S. market.

Biography Of Angeliki Cooney | Senior Vice President Life Sciences | Albany, ...

Biography Of Angeliki Cooney | Senior Vice President Life Sciences | Albany, ...

Biography Of Angeliki Cooney | Senior Vice President Life Sciences | Albany, ...

Angeliki Cooney

Exploring Multimodal Embeddings with Milvus

Exploring Multimodal Embeddings with Milvus

Exploring Multimodal Embeddings with Milvus

Effective data discovery is crucial for maintaining compliance and mitigating risks in today's rapidly evolving privacy landscape. However, traditional manual approaches often struggle to keep pace with the growing volume and complexity of data. Join us for an insightful webinar where industry leaders from TrustArc and Privya will share their expertise on leveraging AI-powered solutions to revolutionize data discovery. You'll learn how to: - Effortlessly maintain a comprehensive, up-to-date data inventory - Harness code scanning insights to gain complete visibility into data flows leveraging the advantages of code scanning over DB scanning - Simplify compliance by leveraging Privya's integration with TrustArc - Implement proven strategies to mitigate third-party risks Our panel of experts will discuss real-world case studies and share practical strategies for overcoming common data discovery challenges. They'll also explore the latest trends and innovations in AI-driven data management, and how these technologies can help organizations stay ahead of the curve in an ever-changing privacy landscape.

TrustArc Webinar - Unlock the Power of AI-Driven Data Discovery

TrustArc Webinar - Unlock the Power of AI-Driven Data Discovery

TrustArc Webinar - Unlock the Power of AI-Driven Data Discovery

CNIC Information System with Pakdata Cf In Pakistan

CNIC Information System with Pakdata Cf In Pakistan

CNIC Information System with Pakdata Cf In Pakistan

Three things you will take away from the session: • How to run an effective tenant-to-tenant migration • Best practices for before, during, and after migration • Tips for using migration as a springboard to prepare for Copilot in Microsoft 365 Main ideas: Migration Overview: The presentation covers the current reality of cross-tenant migrations, the triggers, phases, best practices, and benefits of a successful tenant migration Considerations: When considering a migration, it is important to consider the migration scope, performance, customization, flexibility, user-friendly interface, automation, monitoring, support, training, scalability, data integrity, data security, cost, and licensing structure Next Wave: The next wave of change includes the launch of Copilot, which requires businesses to be prepared for upcoming changes related to Copilot and the cloud, and to consolidate data and tighten governance ShareGate: ShareGate can help with pre-migration analysis, configurable migration tool, and automated, end-user driven collaborative governance

Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff

Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff

Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff

EMPOWERMENT TECHNOLOGY GRADE 11 QUARTER 2 REVIEWER

EMPOWERMENT TECHNOLOGY GRADE 11 QUARTER 2 REVIEWER

EMPOWERMENT TECHNOLOGY GRADE 11 QUARTER 2 REVIEWER

"I see eyes in my soup": How Delivery Hero implemented the safety system for ...

"I see eyes in my soup": How Delivery Hero implemented the safety system for ...

"I see eyes in my soup": How Delivery Hero implemented the safety system for ...

Architecting Cloud Native Applications

Architecting Cloud Native Applications

Architecting Cloud Native Applications

Boost Fertility New Invention Ups Success Rates.pdf

Boost Fertility New Invention Ups Success Rates.pdf

Boost Fertility New Invention Ups Success Rates.pdf

sudhanshuwaghmare1

Polkadot JAM Slides - Token2049 - By Dr. Gavin Wood

Polkadot JAM Slides - Token2049 - By Dr. Gavin Wood

Polkadot JAM Slides - Token2049 - By Dr. Gavin Wood

Juan lago vázquez

When you’re building (micro)services, you have lots of framework options. Spring Boot is no doubt a popular choice. But there’s more! Take Quarkus, a framework that’s considered the rising star for Kubernetes-native Java. It always depends on what's best for your situation, but how to choose the best solution if you're comparing 2 frameworks? Both Spring Boot and Quarkus have their positives and negatives. Let us compare the two by live coding a couple of common use cases in Spring Boot and Quarkus. After this talk, you’ll be ready to get started with Quarkus yourself, and know when to select Quarkus or Spring Boot.

Spring Boot vs Quarkus the ultimate battle - DevoxxUK

Spring Boot vs Quarkus the ultimate battle - DevoxxUK

Spring Boot vs Quarkus the ultimate battle - DevoxxUK

Manulife - Insurer Transformation Award 2024

Manulife - Insurer Transformation Award 2024

Manulife - Insurer Transformation Award 2024

The Digital Insurer

ICT role in 21st century education and its challenges

ICT role in 21st century education and its challenges

ICT role in 21st century education and its challenges

rafiqahmad00786416

FWD Group - Insurer Innovation Award 2024

FWD Group - Insurer Innovation Award 2024

FWD Group - Insurer Innovation Award 2024

The Digital Insurer

Último (20)

DEV meet-up UiPath Document Understanding May 7 2024 Amsterdam

DEV meet-up UiPath Document Understanding May 7 2024 Amsterdam

DEV meet-up UiPath Document Understanding May 7 2024 Amsterdam

MS Copilot expands with MS Graph connectors

MS Copilot expands with MS Graph connectors

MS Copilot expands with MS Graph connectors

Modular Monolith - a Practical Alternative to Microservices @ Devoxx UK 2024

Modular Monolith - a Practical Alternative to Microservices @ Devoxx UK 2024

Modular Monolith - a Practical Alternative to Microservices @ Devoxx UK 2024

Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME

Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME

Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME

+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...

+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...

+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...

How to Troubleshoot Apps for the Modern Connected Worker

How to Troubleshoot Apps for the Modern Connected Worker

How to Troubleshoot Apps for the Modern Connected Worker

Biography Of Angeliki Cooney | Senior Vice President Life Sciences | Albany, ...

Biography Of Angeliki Cooney | Senior Vice President Life Sciences | Albany, ...

Biography Of Angeliki Cooney | Senior Vice President Life Sciences | Albany, ...

Exploring Multimodal Embeddings with Milvus

Exploring Multimodal Embeddings with Milvus

Exploring Multimodal Embeddings with Milvus

TrustArc Webinar - Unlock the Power of AI-Driven Data Discovery

TrustArc Webinar - Unlock the Power of AI-Driven Data Discovery

TrustArc Webinar - Unlock the Power of AI-Driven Data Discovery

CNIC Information System with Pakdata Cf In Pakistan

CNIC Information System with Pakdata Cf In Pakistan

CNIC Information System with Pakdata Cf In Pakistan

Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff

Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff

Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff

EMPOWERMENT TECHNOLOGY GRADE 11 QUARTER 2 REVIEWER

EMPOWERMENT TECHNOLOGY GRADE 11 QUARTER 2 REVIEWER

EMPOWERMENT TECHNOLOGY GRADE 11 QUARTER 2 REVIEWER

"I see eyes in my soup": How Delivery Hero implemented the safety system for ...

"I see eyes in my soup": How Delivery Hero implemented the safety system for ...

"I see eyes in my soup": How Delivery Hero implemented the safety system for ...

Architecting Cloud Native Applications

Architecting Cloud Native Applications

Architecting Cloud Native Applications

Boost Fertility New Invention Ups Success Rates.pdf

Boost Fertility New Invention Ups Success Rates.pdf

Boost Fertility New Invention Ups Success Rates.pdf

Polkadot JAM Slides - Token2049 - By Dr. Gavin Wood

Polkadot JAM Slides - Token2049 - By Dr. Gavin Wood

Polkadot JAM Slides - Token2049 - By Dr. Gavin Wood

Spring Boot vs Quarkus the ultimate battle - DevoxxUK

Spring Boot vs Quarkus the ultimate battle - DevoxxUK

Spring Boot vs Quarkus the ultimate battle - DevoxxUK

Manulife - Insurer Transformation Award 2024

Manulife - Insurer Transformation Award 2024

Manulife - Insurer Transformation Award 2024

ICT role in 21st century education and its challenges

ICT role in 21st century education and its challenges

ICT role in 21st century education and its challenges

FWD Group - Insurer Innovation Award 2024

FWD Group - Insurer Innovation Award 2024

FWD Group - Insurer Innovation Award 2024

DockerCon SF 2015: Docker Security

1. Least-privilege Microservices Diogo Mónica Nathan McCauley

2. Agenda • Why least-privilege • History of least-privilege • Least-privilege with Docker • Ongoing and future work • Conclusions

3. “Every process must be able to access only the information and resources that are necessary for its legitimate purpose”

4. Front-end Server Database Auth Service

5. 1990 Internet All-in-one

6. 2000 Internet DatabasesServicesFront-end

7. 2010 Internet

8.

9. Server Host OS Docker Engine AppA AppB AppC AppD AppE AppF libraries Container One Process

10. Today Internet

11. ‣A FE server has a very different security proﬁle than a database or a worker host ‣Imagine that each container only has access exactly to the resources and APIs it needs. No more, no less. Front-end Server Back-end Server ‣Access to a lot of downstream services ‣Most exposed ‣I/O intensive ‣Limited network access Worker Host ‣CPU Intensive ‣Wide range of workloads Profiles

12. ‣A container is a process. Let’s ﬁnd out what syscalls it needs. Process Monitoring

13. ‣Namespaces provide an isolated view of the system (Network, PID, etc) ‣Cgroups limit and isolate the resource usage of a collection of processes ‣Linux Security Modules give us a MAC (AppArmor, SELinux) Fine-grained controls

14. Fine-grained controls ‣Capabilities divides the privileges of root into distinct units (bind, chown, etc) ‣Per-container ulimit (since 1.6) ‣User-namespaces: root inside is not root outside (remapped root for 1.8) ‣Seccomp: Individual syscall ﬁltering (working on my laptop)

15. Safer by default ‣Less than half the Linux capabilities by default ‣Copy-on-write ensures immutability ‣No device access by default ‣Default AppArmor and SELinux proﬁles for an increasing number of containers

16. Safer by default ‣Smaller footprint ‣Remove all unneeded packages ‣Remove all unneeded users ‣Remove all suid binaries … Debia n

17. Security Profiles Debia n ‣Producers of containers should be responsible for creating adequate profiles ‣Profile gets shipped with the container ‣Aggregates all of the different isolation mechanisms into one single profile

18. Securing the Ecosystem Debia n User-namespaces Seccomp Provenance Selinux Kerberos

19. Intro to Container Security Debia n http://bit.ly/1M4O9XE

20. Docker Bench Debia n https://dockerbench.com/ ‣Fully automated ‣Shipped as a container that tests containers

21. Conclusion ‣Docker is on the path to support least-privilege microservices, since it allows fine-grained control over what access each container should have. ‣We will need easier tooling to define per-container security profiles ‣You can help! #docker-security on Freenode

22. Thank you diogo@docker.com nathan.mccauley@docker.com