基于Docker的容器化应用程序的安全性研究
On Security Measures for Containerized Applications Imaged with Docker
摘要：
在过去的几年里，Linux容器越来越受欢迎，正在进入商业IT服务产品（如PaaS），应用程序部署和各种开发团队中的持续交付/集成管道。随着Docker的广泛采用，安全漏洞和担忧也浮出水面。在本调查中，我们研究了目前最流行的容器系统的安全状态：Docker。我们还将研究其起源于操作系统本身内置的Linux技术;检查固有的漏洞，例如Docker Image实现;并分析该领域使用的当前工具和现代方法，以评估和增强其安全性。对于每一部分，我们都指出了感兴趣的指标，因为它们是由该领域的研究人员和专家揭示的，并总结了他们的发现，以描绘出这些发现背后的努力的全貌。最后，我们看看行业中用于简化Docker安全扫描和分析的工具，这些工具提供了关键指标的内置聚合。
英文摘要：
Linux containers have risen in popularity in the last few years, making their way to commercial IT service offerings (such as PaaS), application deployments, and Continuous Delivery/Integration pipelines within various development teams. Along with the wide adoption of Docker, security vulnerabilities and concerns have also surfaced. In this survey, we examine the state of security for the most popular container system at the moment: Docker. We will also look into its origins stemming from the Linux technologies built into the OS itself; examine intrinsic vulnerabilities, such as the Docker Image implementation; and provide an analysis of current tools and modern methodologies used in the field to evaluate and enhance its security. For each section, we pinpoint metrics of interest, as they have been revealed by researchers and experts in the domain and summarize their findings to paint a holistic picture of the efforts behind those findings. Lastly, we look at tools utilized in the industry to streamline Docker security scanning and analytics which provide built-in aggregation of key metrics.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
