Projekt per år
Sammanfattning
Along with the rapid development of cloud computing technology, containerization technology has drawn much attention from both industry and academia. In this paper, we perform a comparative measurement analysis of Docker-sec, which is a Linux Security Module proposed in 2018, and a new AppArmor profile generator called Lic-Sec, which combines Docker-sec with a modified version of LiCShield, which is also a Linux Security Module proposed in 2015. Docker-sec and LiCShield can be used to enhance Docker container security based on mandatory access control and allows protection of the container without manual configurations. Lic-Sec brings together their strengths and provides stronger protection. We evaluate the effectiveness and performance of Docker-sec and Lic-Sec by testing them with real-world attacks. We generate an exploit database with 40 exploits effective on Docker containers selected from the latest 400 exploits on Exploit-DB. We launch these exploits on containers spawned with Docker-sec and Lic-Sec separately. Our evaluations show that for demanding images, Lic-Sec gives protection for all privilege escalation attacks for which Docker-sec and LiCShield failed to give protection.
Originalspråk | engelska |
---|---|
Artikelnummer | 102924 |
Tidskrift | Journal of Information Security and Applications |
Volym | 61 |
Nummer | 0 |
DOI | |
Status | Published - 2021 |
Ämnesklassifikation (UKÄ)
- Datavetenskap (Datalogi)
- Datorsystem
Fingeravtryck
Utforska forskningsämnen för ”Lic-Sec: An enhanced AppArmor Docker security profile generator”. Tillsammans bildar de ett unikt fingeravtryck.Projekt
- 2 Avslutade
-
Sec4Factory: Cybersäkerhet för nästa generations fabrik (SEC4FACTORY)
Gehrmann, C. (PI), Kihl, M. (CoPI), Hell, M. (CoI), Fitzgerald, E. (Forskare), Toorani, M. (Forskare), Fitzgerald, E. (Forskare), Tärneberg, W. (Forskare) & Akbarian, F. (Forskare)
Stiftelsen för Strategisk Forskning, SSF
2018/04/01 → 2024/12/31
Projekt: Forskning
-
CloudiFacturing: Cloudification of Production Engineering for Predictive Digital Manufacturing
Gehrmann, C. (PI)
European Commission - Horizon 2020
2017/10/01 → 2021/03/31
Projekt: Forskning