In the last years, the use of containers has expanded drastically. Many organisations are running containerised applications in cloud native environments. And since containers can encapsulate complex software
stack with all the dependecies in an isolated enviroment (making the applications portable among clusters), they are widely used at many grid and HPC sites. How to know if these deployments are secure or how can a
security expert or sysadmin, experienced in traditional server and VM based environments adapt to the container based deployments? In this talk EGI CSIRT will point out some of the most common security threats in the container-based environments together with the guidelines on how
to prevent them.