Experimenting with docker: Linux container and base OS attack surfaces
Virtualization vs Containerization to Support PaaS