Open Source Summit India 2025

Container security approaches often focus heavily on image scanning while neglecting runtime protection, creating dangerous blind spots in cloud native architectures. Organizations deploy seemingly secure containers only to discover exploits targeting runtime vulnerabilities that bypass static analysis entirely. Our talk introduces a comprehensive defense-in-depth strategy that combines supply chain validation, admission controls, and runtime behavior analysis to detect and prevent sophisticated attacks. We'll demonstrate real-world attack patterns and how open source toolkits like Falco, SPIFFE, and AppArmor can be used for runtime protection, focusing on workload attestation and behavioral fingerprinting techniques that traditional security scanners often miss.