Docker is currently one of the most representative container platforms, playing a pivotal role in cloud computing, microservices and DevOps. However, Docker containers bring a lot of convenience while also triggering various security threats. In this paper, we take Docker container technology as the research object, and summarize the security threat techniques that Docker containers are currently facing based on the full investigation of existing research work. Specifically, the security threats to Docker containers are analyzed in depth from both static and dynamic aspects according to the point in time and nature of the threats that occur. The static security threat section includes image security and container component risks, while the dynamic security threat section involves container escape, network security, and namespace and cgroups-based configuration security. Finally, three future research directions about Docker container security technology are discussed by combing existing research.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

A Technical Overview of Docker Container Security Threats

  • Qiu Jiang,
  • Weiyong Zhang,
  • Zihao Lin,
  • Yanbin Sun,
  • Shen Su

摘要

Docker is currently one of the most representative container platforms, playing a pivotal role in cloud computing, microservices and DevOps. However, Docker containers bring a lot of convenience while also triggering various security threats. In this paper, we take Docker container technology as the research object, and summarize the security threat techniques that Docker containers are currently facing based on the full investigation of existing research work. Specifically, the security threats to Docker containers are analyzed in depth from both static and dynamic aspects according to the point in time and nature of the threats that occur. The static security threat section includes image security and container component risks, while the dynamic security threat section involves container escape, network security, and namespace and cgroups-based configuration security. Finally, three future research directions about Docker container security technology are discussed by combing existing research.