A study, analysis and deep dive on cloud PAAS security in terms of Docker container security

Manu, A R; Patel, Jitendra Kumar; Akhtar, Shakil; Agrawal, Vinod Kumar; Murthy, K. N. Balasubramanya

doi:10.1109/iccpct.2016.7530284

Cited by 19 publications

(4 citation statements)

References 2 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Thus, to provide a better security aspect in the container, Rastogi et al [ 16 ] updated the concept with two new considerations where both dynamic and static analysis were integrated and test case augmentation using symbolic execution. Manu et al [ 29 ] governed container security using the cloud’s platform as a service (PAAS) protection. They compared the safety of virtual machines with and without hypervisors and container technologies.…”

Section: Resultsmentioning

confidence: 99%

Static-Analysis-Based Solutions to Security Challenges in Cloud-Native Systems: Systematic Mapping Study

Rahaman

Islam

Černý

et al. 2023

Sensors

View full text Add to dashboard Cite

Security is a significant priority for cloud-native systems, regardless of the system size and complexity. Therefore, one must utilize a set of defensive mechanisms or controls to protect the system from exploitation by potential adversaries. There is an expanding amount of research on security issues, including attacks against individual microservices or overall systems and their corresponding defense mechanism options. This study intends to provide a comprehensive overview of currently used defense mechanisms involving static analysis that can detect and react against associated attacks and vulnerabilities. We present a systematic literature review that extracts current approaches for the security analysis of microservices and the violation of security principles. We gathered 1049 relevant publications, of which 50 were selected as primary studies. We are providing practitioners and developers with a structured survey of the existing literature of defensive solutions for microservice architectures and cloud-native systems to aid them in identifying applicable solutions for their systems.

show abstract

Section: Resultsmentioning

confidence: 99%

Static-Analysis-Based Solutions to Security Challenges in Cloud-Native Systems: Systematic Mapping Study

Rahaman

Islam

Černý

et al. 2023

Sensors

View full text Add to dashboard Cite

show abstract

“…Many studies have relied on the vulnerability scanning tools mentioned above to assess the security of image containers [11][12][13][14][15][16][17]. Shu et al built DIVA-a framework that automatically discovers, downloads and analyzes container images on Docker Hub [2].…”

Section: Related Workmentioning

confidence: 99%

DAVS: Dockerfile Analysis for Container Image Vulnerability Scanning

Doan¹,

Jung²

2022

Computers, Materials &Amp; Continua

View full text Add to dashboard Cite

Container technology plays an essential role in many Information and Communications Technology (ICT) systems. However, containers face a diversity of threats caused by vulnerable packages within container images. Previous vulnerability scanning solutions for container images are inadequate. These solutions entirely depend on the information extracted from package managers. As a result, packages installed directly from the source code compilation, or packages downloaded from the repository, etc., are ignored. We introduce DAVS-A Dockerfile analysis-based vulnerability scanning framework for OCI-based container images to deal with the limitations of existing solutions. DAVS performs static analysis using file extraction based on Dockerfile information to obtain the list of Potentially Vulnerable Files (PVFs). The PVFs are then scanned to figure out the vulnerabilities in the target container image. The experimental shows the outperform of DAVS on detecting Common Vulnerabilities and Exposures (CVE) of 10 known vulnerable images compared to Clair-the most popular container image scanning project. Moreover, DAVS found that 68% of real-world container images are vulnerable from different image registries.

show abstract

“…[9]. They have made a deep dive of the PAAS security and also try to analyze, compare and contrast the PAAS Docker container security, with other container technologies, and also with Virtual machine security with and without Hypervisor, and current security level of Dockers container [10]. Chelladhurai at al, have proposed security algorithms and methods to address DoS attacks related issues in the Docker container technology in their study [11].…”

Section: Security Problems In the Docker Literaturementioning

confidence: 99%

Securing Vulnerabilities in Docker Images

Efe¹,

Aslan²,

Kara³

2020

International Journal of Innovative Engineering Applications

View full text Add to dashboard Cite

Review PaperDocker is an alternative application development and publishing infrastructure tool to various virtualization environments such as Virtual box and the like. The most popular containerization platform is Docker which is the area where Docker images are run. Container is a lightweight contrasting option to full machine virtualization that includes exemplifying an application in a container with its own working condition. These two concepts, virtualization and containerization are competing in the cloud-based environments. When virtualization became the mainstream, VM security concerns was common. IT Security experts are discussing the potential weaknesses of a virtualized environment for a long time. In this paper, focusing on Docker container, its vulnerabilities and possible measurements against security concerns, we have provided information about assessment of risks and vulnerabilities of containerization and the main differences between these two concepts via vulnerability analysis.

show abstract

A study, analysis and deep dive on cloud PAAS security in terms of Docker container security

Cited by 19 publications

References 2 publications

Static-Analysis-Based Solutions to Security Challenges in Cloud-Native Systems: Systematic Mapping Study

Static-Analysis-Based Solutions to Security Challenges in Cloud-Native Systems: Systematic Mapping Study

DAVS: Dockerfile Analysis for Container Image Vulnerability Scanning

Securing Vulnerabilities in Docker Images

Contact Info

Product

Resources

About