Dergiler / International Journal of Innovative Engineering Applications / 2020 / Cilt: 4 - Sayı: 1

Securing Vulnerabilities in Docker Images

Sayfa
31–39
Yayın Tarihi
2022-10-19
DOI
—
🏛️Bu makalenin bibliyografik verileri ve tam metin bağlantısı DergiPark üzerinden sağlanmıştır.
DergiPark Kaydı ↗
✨

Yapay Zeka Hızlı Bakış & Çıkarımlar

AI Insight
⚡ TL;DR(1 Cümlede Hızlı Çıkarım)

In this paper, focusing on Docker container, its vulnerabilities and possible measurements against security concerns, we have provided information about assessment of risks and vulnerabilities of containerization and the main differences between these two concepts via vulnerability analysis.

📌 3 Maddede Bu Makale

🎯
Amaç & Hipotez:Docker is an alternative application development and publishing infrastructure tool to various virtualization environments such as Virtual box and the like.
📊
Temel Bulgular & Veri:The most popular containerization platform is Docker which is the area where Docker images are run.
💡
Sonuç & Katkı:In this paper, focusing on Docker container, its vulnerabilities and possible measurements against security concerns, we have provided information about assessment of risks and vulnerabilities of containerization and the main differences between these two concepts via vulnerability analysis.
🔬Tür:Araştırma Makalesi
📍Kapsam:Genişletilmiş Akademik Örneklem
⚙️Değişkenler:Technology · Vulnerabilities · Dockers

Abstract

Docker is an alternative application development and publishing infrastructure tool to various virtualization environments such as Virtual box and the like. The most popular containerization platform is Docker which is the area where Docker images are run. Container is a lightweight contrasting option to full machine virtualization that includes exemplifying an application in a container with its own working condition. These two concepts, virtualization and containerization are competing in the cloud-based environments. When virtualization became the mainstream, VM security concerns was common. IT Security experts are discussing the potential weaknesses of a virtualized environment for a long time. In this paper, focusing on Docker container, its vulnerabilities and possible measurements against security concerns, we have provided information about assessment of risks and vulnerabilities of containerization and the main differences between these two concepts via vulnerability analysis.

🔖

Bu Makaleye Atıf Yap

Efe, A., Aslan, U., Kara, A. M. (2022). Securing Vulnerabilities in Docker Images. International Journal of Innovative Engineering Applications, Cilt: 4 - Sayı: 1, 31–39. https://ajindex.com/articles/541242

📄 Tam Metin PDF Okuyucu

📄

PDF görüntüleyici hazırlanıyor...

Kaynakça (16)

  1. Wikipadiea Docker. (n.d.). Retrieved from Wikipedia:
  2. What is Docker? (n.d.). Retrieved from opensource.com:
  3. Docker Security Vulnerabilities. (n.d.). Retrieved from Sysdig:
  4. Five Security concerns when using docker. (n.d.). Retrieved from Oreilly:
  5. Rui, S., Xiaohui, G., & William, E. (March 22 - 24, 2017). A Study of Security Vulnerabilities on Docker Hub. CODASPY '17 Proceedings of the Seventh ACM on Conference on Data and Application Security and Privacy (pp. 269-280). Scottsdale, Arizona, USA: ACM
  6. ISACA, Understanding the Enterprise Advantages of Application Containerization. (n.d.). USA
  7. Docker Website. (n.d.). Retrieved from Docker Website:
  8. Twistlock. (n.d.). Retrieved from 5 Best Practices to Container Image Security:
  9. Over 30% of Official Images in Docker Hub Contain High Priority Security Vulnerabilities. (n.d.). Retrieved from banyanops:
  10. Federacy. (n.d.). Retrieved from Container Scanning Specification:
  11. Docker 1.3.3 Security Advisor. Retrieved from Security focus Website:
  12. Bug 1167505 - (CVE-2014-6407) CVE-2014-6407 docker: symbolic and hardlink issues leading to privilege escalation. Retrieved from bugzilla.redhat Website:
  13. SUSE-SU-2015:0984-1: moderate: Security update for docker.Retrieved from Suse Website:
  14. RHSA-2014:0820 - Security Advisory. Retrieved from redhat Website:
  15. Docker 1.6.1 - Security Advisory [150507]. Retrieved from Seclists Website: http://seclists.org/fulldisclosure/2015/May/28https://www.cvedetails.com/vulnerability-list/vendor_id-13534/product_id- 28125/Docker-Docker.html [16] Ayaz Ö., Aydın G., “Uygulama Sanallaştırmada Yeni Bir Yaklaşım: Docker”,
  16. B. I. Ismail et al., "Evaluation of Docker as Edge computing platfor