Start / Cloud Security Podcast by Google / Ep195 containers vs vms the security showdown

EP195 Containers vs. VMs: The Security Showdown!

41 min • 21 oktober 2024

Cross-over hosts:

Kaslin Fields, co-host at Kubernetes Podcast
Abdel Sghiouar, co-host at Kubernetes Podcast

Guest:

Michele Chubirka, Cloud Security Advocate, Google Cloud

Topics:

How would you approach answering the question ”what is more secure, container or a virtual machine (VM)?”
Could you elaborate on the real-world implications of this for security, and perhaps provide some examples of when one might be a more suitable choice than the other?
While containers boast a smaller attack surface (what about the orchestrator though?), VMs present a full operating system. How should organizations weigh these factors against each other?
The speed of patching and updates is a clear advantage of containers. How significant is this in the context of today's rapidly evolving threat landscape? Are there any strategies organizations can employ to mitigate the slower update cycles associated with VMs?
Both containers and VMs can be susceptible to misconfigurations, but container orchestration systems introduce another layer of complexity. How can organizations address this complexity and minimize the risk of misconfigurations leading to security vulnerabilities?
What about combining containers and VMs. Can you provide some concrete examples of how this might be implemented? What benefits can organizations expect from such an approach, and what challenges might they face?
How do you envision the security landscape for containers and VMs evolving in the coming years? Are there any emerging trends or technologies that could significantly impact the way we approach security for these two technologies?

Resources:

Senaste avsnitt

EP233 Product Security Engineering at Google: Resilience and Security

7 juli | 26 min

EP232 The Human Element of Privacy: Protecting High-Risk Targets and Designing Systems

30 juni | 32 min

EP195 Containers vs. VMs: The Security Showdown!

Senaste avsnitt

EP233 Product Security Engineering at Google: Resilience and Security

EP232 The Human Element of Privacy: Protecting High-Risk Targets and Designing Systems

EP231 Beyond the Buzzword: Practical Detection as Code in the Enterprise

EP230 AI Red Teaming: Surprises, Strategies, and Lessons from Google

EP229 Beyond the Hype: Debunking Cloud Breach Myths (and What DBIR Says Now)

EP228 SIEM in 2025: Still Hard? Reimagining Detection at Cloud Scale and with More Pipelines

EP227 AI-Native MDR: Betting on the Future of Security Operations?

EP226 AI Supply Chain Security: Old Lessons, New Poisons, and Agentic Dreams

EP225 Cross-promotion: The Cyber-Savvy Boardroom Podcast: EP2 Christian Karam on the Use of AI

EP224 Protecting the Learning Machines: From AI Agents to Provenance in MLSecOps

EP223 AI Addressable, Not AI Solvable: Reflections from RSA 2025

EP222 From Post-IR Lessons to Proactive Security: Deconstructing Mandiant M-Trends

EP221 Special - Semi-Live from Google Cloud Next 2025: AI, Agents, Security ... Cloud?

EP220 Big Rewards for Cloud Security: Exploring the Google VRP

EP219 Beyond the Buzzwords: Decoding Cyber Risk and Threat Actors in Asia Pacific

EP218 IAM in the Cloud & AI Era: Navigating Evolution, Challenges, and the Rise of ITDR/ISPM

EP217 Red Teaming AI: Uncovering Surprises, Facing New Threats, and the Same Old Mistakes?

EP216 Ephemeral Clouds, Lasting Security: CIRA, CDR, and the Future of Cloud Investigations

EP215 Threat Modeling at Google: From Basics to AI-powered Magic

EP214 Reconciling the Impossible: Engineering Cloud Systems for Diverging Regulations

EP213 From Promise to Practice: LLMs for Anomaly Detection and Real-World Cloud Security

EP212 Securing the Cloud at Scale: Modern Bank CISO on Metrics, Challenges, and SecOps

EP211 Decoding the Underground: Google's Dual-Lens Threat Intelligence Magic

EP210 Cloud Security Surprises: Real Stories, Real Lessons, Real "Oh No!" Moments

EP209 vCISO in the Cloud: Navigating the New Security Landscape (and Don’t Forget Resilience!)

EP208 The Modern CISO: Balancing Risk, Innovation, and Business Strategy (And Where is Cloud?)

EP207 Slaying the Ransomware Dragon: Can a Startup Succeed?

EP206 Paying the Price: Ransomware's Rising Stakes in the Cloud

EP205 Cybersecurity Forecast 2025: Beyond the Hype and into the Reality

EP204 Beyond PCAST: Phil Venables on the Future of Resilience and Leading Indicators

EP203 Cloud Shared Responsibility: Beyond the Blame Game with Rich Mogull

EP202 Beyond Tiered SOCs: Detection as Code and the Rise of Response Engineering

EP201 Every CTO Should Be a CSTO (Or Else!) - Transformation Lessons from The Hoff

EP200 Zero Touch Prod, Security Rings, and Foundational Services: How Google Does Workload Security

EP199 Your Cloud IAM Top Pet Peeves (and How to Fix Them)

EP198 GenAI Security: Unseen Attack Surfaces & AI Pentesting Lessons

EP197 SIEM (Decoupled or Not), and Security Data Lakes: A Google SecOps Perspective

EP196 AI+TI: What Happens When Two Intelligences Meet?

EP195 Containers vs. VMs: The Security Showdown!

EP194 Deep Dive into ADR - Application Detection and Response

EP193 Inherited a Cloud? Now What? How Do I Secure It?

EP192 Confidential + AI: Can AI Keep a Secret?

EP191 Why Aren't More Defenders Winning? Defender’s Advantage and How to Gain it!

EP190 Unraveling the Security Data Fabric: Need, Benefits, and Futures

EP189 How Google Does Security Programs at Scale: CISO Insights

EP188 Beyond the Buzzwords: Identity's True Role in Cloud and SaaS Security

EP187 Conquering SOC Challenges: Leadership, Burnout, and the SIEM Evolution

EP186 Cloud Security Tools: Trust the Cloud Provider or Go Third-Party? An Epic Debate, Anton vs Tim

EP185 SAIF-powered Collaboration to Secure AI: CoSAI and Why It Matters to You

EP184 One Week SIEM Migration: Fact or Fiction?

EP183 Cloud Security Journeys: Improve, Evolve, Transform with Cloud Customers

EP182 ITDR: The Missing Piece in Your Security Puzzle or Yet Another Tool to Buy?

EP181 Detection Engineering Deep Dive: From Career Paths to Scaling SOC Teams

EP180 SOC Crossroads: Optimization vs Transformation - Two Paths for Security Operations Center

EP179 Teamwork Under Stress: Expedition Behavior in Cybersecurity Incident Response

EP178 Meet Brandon Wood: The Human Side of Threat Intelligence: From Bad IP to Trafficking Busts

EP177 Cloud Incident Confessions: Top 5 Mistakes Leading to Breaches from Mandiant

EP176 Google on Google Cloud: How Google Secures Its Own Cloud Use

EP175 Meet Crystal Lister: From Public Sector to Google Cloud Security and Threat Horizons

EP174 How to Measure and Improve Your Cloud Incident Response Readiness: A New Framework

EP173 SAIF in Focus: 5 AI Security Risks and SAIF Mitigations

EP172 RSA 2024: Separating AI Signal from Noise, SecOps Evolves, XDR Declines?

EP171 GenAI in the Wrong Hands: Unmasking the Threat of Malicious AI and Defending Against the Dark Side

EP170 Redefining Security Operations: Practical Applications of GenAI in the SOC

EP169 Google Cloud Next 2024 Recap: Is Cloud an Island, So Much AI, Bots in SecOps

EP168 Beyond Regular LLMs: How SecLM Enhances Security and What Teams Can Do With It

EP167 Stolen Cards and Fake Accounts: Defending Google Cloud Against Abuse

EP166 Workload Identity, Zero Trust and SPIFFE (Also Turtles!)

EP165 Your Cloud Is Not a Pet - Decoding 'Shifting Left' for Cloud Security

EP164 Quantum Computing: Understanding the (very serious) Threat and Post-Quantum Cryptography

EP163 Cloud Security Megatrends: Myths, Realities, Contentious Debates and Of Course AI

EP162 IAM in the Cloud: What it Means to Do It 'Right' with Kat Traxler

EP161 Cloud Compliance: A Lawyer - Turned Technologist! - Perspective on Navigating the Cloud

EP160 Don't Cloud Your Judgement: Security and Cloud Migration, Again!

EP159 Workspace Security: Built for the Modern Threat. But How?

EP158 Ghostbusters for the Cloud: Who You Gonna Call for Cloud Forensics

EP157 Decoding CDR & CIRA: What Happens When SecOps Meets Cloud

EP156 Living Off the Land and Attacking Critical Infrastructure: Mandiant Incident Deep Dive