title: ÐÐ²ÑÐ¾Ð¼Ð°ÑÐ¸Ð·Ð°ÑÐ¸Ñ ÑÐºÐ°Ð½Ð¸ÑÐ¾Ð²Ð°Ð½Ð¸Ñ Ð¸ Ð°Ð½Ð°Ð»Ð¸Ð·Ð° Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸ ÐºÐ¾Ð½ÑÐµÐ¹Ð½ÐµÑÐ¾Ð² Ð¸ Ð¾ÑÐºÐµÑÑÑÐ°ÑÐ¾ÑÐ¾Ð²
title: Ð²ÑÐ¿ÑÑÐºÐ½Ð°Ñ ÐºÐ²Ð°Ð»Ð¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¾Ð½Ð½Ð°Ñ ÑÐ°Ð±Ð¾ÑÐ° Ð±Ð°ÐºÐ°Ð»Ð°Ð²ÑÐ°
titleType: Subtitle
title: Automate scanning and security analysis of containers and orchestrators
Creators: name: ÐÐ³Ð¾ÑÐ¸ÑÐµÐ², ÐÑÑÐµÐ¼Ð¸Ð¹
Publisher: name: Ð¡Ð°Ð½ÐºÑ-ÐÐµÑÐµÑÐ±ÑÑÐ³ÑÐºÐ¸Ð¹ Ð¿Ð¾Ð»Ð¸ÑÐµÑÐ½Ð¸ÑÐµÑÐºÐ¸Ð¹ ÑÐ½Ð¸Ð²ÐµÑÑÐ¸ÑÐµÑ ÐÐµÑÑÐ° ÐÐµÐ»Ð¸ÐºÐ¾Ð³Ð¾
Year: 2024
Subjects: ÐºÐ¾Ð½ÑÐµÐ¹Ð½ÐµÑÑ
Ð¾ÑÐºÐµÑÑÑÐ°ÑÐ¾ÑÑ
Ð°Ð½Ð°Ð»Ð¸Ð·Ð°ÑÐ¾ÑÑ Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸
kubernetes
containers
orchestrators
security analyzers

description: Ð¢ÐµÐ¼Ð° Ð²ÑÐ¿ÑÑÐºÐ½Ð¾Ð¹ ÐºÐ²Ð°Ð»Ð¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¾Ð½Ð½Ð¾Ð¹ ÑÐ°Ð±Ð¾ÑÑ: Â«ÐÐ²ÑÐ¾Ð¼Ð°ÑÐ¸Ð·Ð°ÑÐ¸Ñ ÑÐºÐ°Ð½Ð¸ÑÐ¾Ð²Ð°Ð½Ð¸Ñ Ð¸ Ð°Ð½Ð°Ð»Ð¸Ð·Ð° Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸ ÐºÐ¾Ð½ÑÐµÐ¹Ð½ÐµÑÐ¾Ð² Ð¸ Ð¾ÑÐºÐµÑÑÑÐ°ÑÐ¾ÑÐ¾Ð²Â». Ð¦ÐµÐ»ÑÑ ÑÐ°Ð±Ð¾ÑÑ ÑÐ²Ð»ÑÐµÑÑÑ Ð¿Ð¾Ð²ÑÑÐµÐ½Ð¸Ðµ Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸ Ð¿ÑÐ¸ Ð¸ÑÐ¿Ð¾Ð»ÑÐ·Ð¾Ð²Ð°Ð½Ð¸Ð¸ ÑÐµÑÐ½Ð¾Ð»Ð¾Ð³Ð¸Ð¹ ÐºÐ¾Ð½ÑÐµÐ¹Ð½ÐµÑÐ¸Ð·Ð°ÑÐ¸Ð¸ Ð¸ Ð¾ÑÐºÐµÑÑÑÐ°ÑÐ¸Ð¸ Ð² Ð¸Ð½ÑÐ¾ÑÐ¼Ð°ÑÐ¸Ð¾Ð½Ð½ÑÑ ÑÐ¸ÑÑÐµÐ¼Ð°Ñ. ÐÑÐµÐ´Ð¼ÐµÑÐ¾Ð¼ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ ÑÐ²Ð»ÑÑÑÑÑ Ð¿ÑÐ¾Ð±Ð»ÐµÐ¼Ñ Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸ Ð¸ ÑÑÐµÐ´ÑÑÐ²Ð° ÑÐºÐ°Ð½Ð¸ÑÐ¾Ð²Ð°Ð½Ð¸Ñ Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸ ÐºÐ¾Ð½ÑÐµÐ¹Ð½ÐµÑÐ¾Ð² Ð¸ Ð¾ÑÐºÐµÑÑÑÐ°ÑÐ¾ÑÐ¾Ð². ÐÐ°Ð´Ð°ÑÐ¸, ÑÐµÑÐ°ÐµÐ¼ÑÐµ Ð² ÑÐ¾Ð´Ðµ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ: 1. ÐÐ·ÑÑÐ¸ÑÑ Ð¾ÑÐ½Ð¾Ð²Ð½ÑÐµ Ð¿ÑÐ¸Ð½ÑÐ¸Ð¿Ñ ÑÐ°Ð±Ð¾ÑÑ ÐºÐ¾Ð½ÑÐµÐ¹Ð½ÐµÑÐ¸Ð·Ð°ÑÐ¸Ð¸ Ð¸ Ð¾ÑÐºÐµÑÑÑÐ°ÑÐ¸Ð¸, Ð° ÑÐ°ÐºÐ¶Ðµ ÑÐ²ÑÐ·Ð°Ð½Ð½ÑÐµ Ñ Ð½Ð¸Ð¼Ð¸ Ð¿ÑÐ¾Ð±Ð»ÐµÐ¼Ñ Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸; 2. ÐÑÐ¾Ð²ÐµÑÑÐ¸ ÑÑÐ°Ð²Ð½Ð¸ÑÐµÐ»ÑÐ½ÑÐ¹ Ð°Ð½Ð°Ð»Ð¸Ð· ÑÑÐµÐ´ÑÑÐ² ÑÐºÐ°Ð½Ð¸ÑÐ¾Ð²Ð°Ð½Ð¸Ñ Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸ ÐºÐ¾Ð½ÑÐµÐ¹Ð½ÐµÑÐ¾Ð² Ð¸ Ð¾ÑÐºÐµÑÑÑÐ°ÑÐ¾ÑÐ¾Ð²; 3. Ð Ð°Ð·ÑÐ°Ð±Ð¾ÑÐ°ÑÑ ÑÐºÑÐ¿ÐµÑÑÐ½ÑÑ ÑÐ¸ÑÑÐµÐ¼Ñ, Ð¿Ð¾Ð¼Ð¾Ð³Ð°ÑÑÑÑ Ð²ÑÐ±ÑÐ°ÑÑ Ð½Ð°Ð¸Ð»ÑÑÑÐµÐµ ÑÑÐµÐ´ÑÑÐ²Ð¾ Ð´Ð»Ñ Ð°Ð½Ð°Ð»Ð¸Ð·Ð° Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸ ÐºÐ¾Ð½ÑÐµÐ¹Ð½ÐµÑÐ¾Ð² Ð¸ Ð¾ÑÐºÐµÑÑÑÐ°ÑÐ¾ÑÐ¾Ð². Ð ÑÐ¾Ð´Ðµ ÑÐ°Ð±Ð¾ÑÑ Ð±ÑÐ»Ð¸ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ñ Ð¾ÑÐ½Ð¾Ð²Ð½ÑÐµ Ð¿ÑÐ¸Ð½ÑÐ¸Ð¿Ñ ÑÐ°Ð±Ð¾ÑÑ ÑÐµÑÐ½Ð¾Ð»Ð¾Ð³Ð¸Ð¹ ÐºÐ¾Ð½ÑÐµÐ¹Ð½ÐµÑÐ¸Ð·Ð°ÑÐ¸Ð¸ Ð¸ Ð¾ÑÐºÐµÑÑÑÐ°ÑÐ¸Ð¸, Ð¿ÑÐ¾Ð±Ð»ÐµÐ¼Ñ Ð¸ ÑÑÐµÐ´ÑÑÐ²Ð° Ð°Ð½Ð°Ð»Ð¸Ð·Ð° Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸, ÑÐ²ÑÐ·Ð°Ð½Ð½ÑÐµ Ñ Ð¸ÑÐ¿Ð¾Ð»ÑÐ·Ð¾Ð²Ð°Ð½Ð¸ÐµÐ¼ ÐºÐ¾Ð½ÑÐµÐ¹Ð½ÐµÑÐ¾Ð² Ð¸ Ð¾ÑÐºÐµÑÑÑÐ°ÑÐ¾ÑÐ¾Ð². Ð ÑÐµÐ·ÑÐ»ÑÑÐ°ÑÐµ ÑÐ°Ð±Ð¾ÑÑ Ð±ÑÐ»Ð° ÑÐ°Ð·ÑÐ°Ð±Ð¾ÑÐ°Ð½Ð° ÑÐºÑÐ¿ÐµÑÑÐ½Ð°Ñ ÑÐ¸ÑÑÐµÐ¼Ð°, Ð¿Ð¾Ð·Ð²Ð¾Ð»ÑÑÑÐ°Ñ Ð²ÑÐ±ÑÐ°ÑÑ Ð½Ð°Ð¸Ð±Ð¾Ð»ÐµÐµ Ð¿Ð¾Ð´ÑÐ¾Ð´ÑÑÐµÐµ ÑÑÐµÐ´ÑÑÐ²Ð¾ ÑÐºÐ°Ð½Ð¸ÑÐ¾Ð²Ð°Ð½Ð¸Ñ Ð¸ Ð°Ð½Ð°Ð»Ð¸Ð·Ð° Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸ ÐºÐ¾Ð½ÑÐµÐ¹Ð½ÐµÑÐ¾Ð² Ð¸ Ð¾ÑÐºÐµÑÑÑÐ°ÑÐ¾ÑÐ¾Ð², ÐºÐ¾ÑÐ¾ÑÑÐ¹ Ð±ÑÐ´ÐµÑ ÑÐ¿Ð¾ÑÐ¾Ð±ÑÑÐ²Ð¾Ð²Ð°ÑÑ Ð¾Ð±ÐµÑÐ¿ÐµÑÐµÐ½Ð¸Ñ Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸ Ð² ÑÐ¾Ð²ÑÐµÐ¼ÐµÐ½Ð½ÑÑ Ð¸Ð½ÑÐ¾ÑÐ¼Ð°ÑÐ¸Ð¾Ð½Ð½ÑÑ ÑÐ¸ÑÑÐµÐ¼Ð°Ñ. ÐÐ¾Ð»ÑÑÐµÐ½Ð½ÑÐµ ÑÐµÐ·ÑÐ»ÑÑÐ°ÑÑ Ð¼Ð¾Ð³ÑÑ Ð±ÑÑÑ Ð¸ÑÐ¿Ð¾Ð»ÑÐ·Ð¾Ð²Ð°Ð½Ñ Ð² ÐºÐ°ÑÐµÑÑÐ²Ðµ ÑÐµÐºÐ¾Ð¼ÐµÐ½Ð´Ð°ÑÐ¸Ð¹ Ð´Ð»Ñ ÑÐ¿ÐµÑÐ¸Ð°Ð»Ð¸ÑÑÐ¾Ð² Ð¿Ð¾ Ð¸Ð½ÑÐ¾ÑÐ¼Ð°ÑÐ¸Ð¾Ð½Ð½Ð¾Ð¹ Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸ Ð¸ Ð°Ð´Ð¼Ð¸Ð½Ð¸ÑÑÑÐ°ÑÐ¾ÑÐ¾Ð² Ð¸Ð½ÑÐ¾ÑÐ¼Ð°ÑÐ¸Ð¾Ð½Ð½ÑÑ ÑÐ¸ÑÑÐµÐ¼.
description: The topic of the graduate qualification work is Â«Automate scanning and security analysis of containers and orchestratorsÂ». The purpose of the study is increasing security when using containerization and orchestration technologies in information systems. The subject of the work is security issues and security scanning tools for containers and orchestrators. The research set the following goals: 1. Understand the basic principles of how containerization and orchestration work, as well as the security issues associated with them; 2. Conduct a comparative analysis of container and orchestrator security scanning tools; 3. Develop an expert system to help select the best tool for analyzing the security of containers and orchestrators. During the work, the basic principles of operation of containerization and orchestration technologies, problems and security analysis tools associated with the use of containers and orchestrators were explored. As a result of the work, an expert system was developed that allows you to select the most appropriate tool for scanning and analyzing the security of containers and orchestrators, which will help ensure security in modern information systems. The results obtained can be used as recommendations for information security specialists and information system administrators.