Beyond Image Pull-Time: Ensuring Runtime Integrit... Toddy Mladenov, Flora Taagen & Dallas Delaney

This talk, presented by Toddy Mladenov, Flora Taagen, and Dallas Delaney from Microsoft, explores the importance of ensuring runtime integrity for container images in the cloud-native ecosystem. The speakers discuss how existing image signing solutions only provide protection at the time of image pull, leaving workloads vulnerable to tampering during runtime. They introduce the Notary Project, which addresses this issue through per-layer dm-verity signing and verification, allowing for Linux kernel-enforced integrity and continuous protection policies. Attendees will gain insights into the latest updates from the Notary Project, along with technical workflows and integration points with Notation CLI, containerd, and OCI registries, making this session valuable for both novices and experienced professionals in container security.