A smaller attack surface should lead to a smaller list of CVEs to track, which in turn should lead to a smaller set of vulns that you should care about. But in practice, keeping something like a container image small has a lot of challenges in terms of what should be considered minimal. Neil Carpenter shares advice and anecdotes on what it takes to refine a container image and to change an org's expectations that every CVE needs to be fixed. Visit  for all the latest episodes! Show Notes:

Managing the Minimization of a Container Attack Surface - Neil Carpenter - ASW #344

Information security news, hacking, interviews, podcasts, live Internet TV, cocktails, and more!

Hack naked.

Managing the Minimization of a Container Attack Surface - Neil Carpenter - ASW #344

Security Weekly