Ensuring Information Security in a Containerized World
Containers allow application developers to work with lighter weight virtual machines capable of running on the cloud and provide increased flexibility for sharing existing code. Although the benefits are appealing to developers, the security of networks and data in the containerized world must not be overlooked. This whitepaper outlines known breach vectors of Docker containers by analyzing five common vulnerabilities and exposures (CVEs) while providing a consultative review on why container security is integral. This research addresses the importance of balancing technological convenience with security and advocates for the development of a culture of security awareness amongst container users.
Project sponsored by: Cimcor, LLC.
Project participants:
Colin Andrade
MSIM
Andy Herman
MSIM
Chang Liu
MSIM