Containers: Security Story
Container
Malicious or Buggy Process
Pid Namespace
Root Namespace
Userspace
Trusted Process
Attack Surface
Kernel
Container processes can attack the kernel
AI text/layout recreation from video frame; verify against source image.