Container security : fundamental technology concepts that protect containerized applications /
Rice, Liz,author.
"To facilitate scalability and resilience, many organizations now run applications in cloud native environments using containers and orchestration. But how do you know if the deployment is secure? This practical book examines key underlying technologies to help developers, operators, and security professionals assess security risks and determine appropriate solutions. Author Liz Rice, VP of open source engineering at Aqua Security, looks at how the building blocks commonly used in container-based systems are constructed in Linux. You'll understand what's happening when you deploy containers and learn how to assess potential security risks that could affect your deployments. If you run container applications with kubectl or docker and use Linux command-line tools such as ps and grep, you're ready to get started."--Page 4 of cover.
Includes index.
"To facilitate scalability and resilience, many organizations now run applications in cloud native environments using containers and orchestration. But how do you know if the deployment is secure? This practical book examines key underlying technologies to help developers, operators, and security professionals assess security risks and determine appropriate solutions. Author Liz Rice, VP of open source engineering at Aqua Security, looks at how the building blocks commonly used in container-based systems are constructed in Linux. You'll understand what's happening when you deploy containers and learn how to assess potential security risks that could affect your deployments. If you run container applications with kubectl or docker and use Linux command-line tools such as ps and grep, you're ready to get started."--Page 4 of cover.
Container security threats -- Linux system calls, permissions, and capabilities -- Control groups -- Container isolation -- Virtual machines -- Container images -- Software vulnerabilities in images -- Strengthening container isolation -- Breaking container isolation -- Container network security -- Securely connecting components with TLS -- Passing secrets to containers -- Container runtime protection -- Containers and the OWASP top 10 -- Conclusions -- Appendix. Security checklist.
Linux.
Linux
Information technology
Application software.
Computer networks
Application software
Computer networks
Information technology