Securing Container Delivery with TUF

Explore the critical issue of secure container image delivery in this 21-minute conference talk from the Cloud Native Computing Foundation. Learn about The Update Framework (TUF), a security-focused project designed to prevent, detect, and mitigate attacks on software distribution infrastructure. Discover TUF's basic architecture, its protection mechanisms against real-world attacks, and how it can restore a repository's security even after organizational security errors. Gain insights into the importance of updates, attacker compromise methods, compromise resilience, targets metadata, and other TUF implementations.