Software Engineering Institute (SEI) Podcast Series

Understanding Container Reproducibility Challenges: Stopping the Next Solar Winds


Listen Later

Container images are increasingly being used as the main method for software deployment, so ensuring the reproducibility of container images is becoming a critical step in protecting the software supply chain. In practice, however, builds are often not reproducible due to elements of the build environment that rely on nondeterministic factors such as timestamps and external dependencies. Lack of reproducibility can lead to lack of trust, broken builds, and possibly mask hidden malware insertion. Vessel, a recent tool from the Carnegie Mellon University Software Institute (SEI), helps developers identify the difference between two container images to help sort benign from problematic issues. In this SEI Podcast, Kevin Pitstick, a senior software engineer at the SEI and Vessel's lead developer, and Lihan Zhan, a software engineer at the SEI working on tactical and AI-enabled systems, sit down with Grace Lewis, lead of the Tactical and AI-Enabled Systems (TAS) applied research and development team at the SEI, to discuss the Vessel tool, its development, and application in mission-critical settings.

...more
View all episodesView all episodes
Download on the App Store

Software Engineering Institute (SEI) Podcast SeriesBy Members of Technical Staff at the Software Engineering Institute

  • 4.5
  • 4.5
  • 4.5
  • 4.5
  • 4.5

4.5

18 ratings


More shows like Software Engineering Institute (SEI) Podcast Series

View all
Freakonomics Radio by Freakonomics Radio + Stitcher

Freakonomics Radio

32,003 Listeners

Software Engineering Radio by se-radio@computer.org

Software Engineering Radio

271 Listeners

Making Sense with Sam Harris by Sam Harris

Making Sense with Sam Harris

26,330 Listeners

The a16z Show by Andreessen Horowitz

The a16z Show

1,089 Listeners

Software Engineering Daily by Software Engineering Daily

Software Engineering Daily

625 Listeners

Risky Business by Patrick Gray

Risky Business

374 Listeners

SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast) by Johannes B. Ullrich

SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

653 Listeners

Thoughtworks Technology Podcast by Thoughtworks

Thoughtworks Technology Podcast

43 Listeners

Smashing Security by Graham Cluley

Smashing Security

318 Listeners

Darknet Diaries by Jack Rhysider

Darknet Diaries

8,039 Listeners

Defense in Depth by David Spark, Steve Zalewski, Geoff Belknap

Defense in Depth

74 Listeners

Make It Real by CMU Engineering

Make It Real

0 Listeners

SEI Cyber Talks by Members of Technical Staff

SEI Cyber Talks

0 Listeners

The Journal. by The Wall Street Journal & Spotify Studios

The Journal.

6,095 Listeners

Deep Questions with Cal Newport by Cal Newport

Deep Questions with Cal Newport

1,328 Listeners

Cyber Security Headlines by CISO Series

Cyber Security Headlines

138 Listeners

The Ezra Klein Show by New York Times Opinion

The Ezra Klein Show

15,931 Listeners