Jay Beale -- Docker Security and AppSec

Does moving an application into Docker make it safer, or simply change the risks you need to manage? Jay Beale of InGuardians joins Robert to explain containers, how they differ from virtual machines, and why sharing a Linux kernel matters for security. He examines container breakouts, the danger of assuming isolation is stronger than it is, and practical defenses using Linux security controls. The conversation then turns to patching: teams need to rebuild and replace images, track the software they contain, and test updates before deployment. Jay connects those responsibilities to third-party application libraries and explains why container convenience does not remove operational accountability. He closes with resources for keeping pace with Docker and Linux security.

The Application Security Podcast is brought to you by Security Journey.

About Security Journey
Security Journey provides application security education for developers and everyone in the software development lifecycle.
→ Learn more about Security Journey

Connect with Jay Beale:
→ Jay Beale on LinkedIn
→ InGuardians

Mentioned in this episode:
→ Docker
→ Kubernetes
→ Linux kernel
→ LXC

Follow the Application Security Podcast:
➜ Home
➜ X
➜ LinkedIn
➜ YouTube
➜ Instagram
➜ Facebook

Chapters:
00:00 Docker security with Jay Beale
01:50 From Linux hardening to security consulting
05:36 Containers compared with virtual machines
10:35 Sharing the Linux kernel
14:35 Why Docker changed the developer workflow
16:08 Container breakouts and new security risks
21:53 Controls that reduce breakout risk
26:51 Rebuilding images and keeping containers patched
28:29 Finding vulnerable software in containers
32:53 Third-party libraries and application security
36:31 Testing updates before deployment
39:09 Where to keep learning about Docker security
42:55 Final advice and training resources