An overview of best practices
In the following chapters, we will be delving into techniques to ensure your containers are secure. You'll be happy to know that there are a number of best practices that you can use off the bat to ensure that you are thinking about and implementing security at the most basic level.
The first thing to understand, and that you may have already picked up on, is that Docker containers, compared to VMs, do not provide the same level of security. We gave an example earlier of how a VM can be used for malware analysis due to its sandboxed environment. Therefore, from a security perspective, you should approach containers as a mechanism that is used to optimally package system resources and applications for development and delivery (with some very useful security built in) but not treat them as a micro-VM.
With this in mind, let's look at some best practices we can apply when using Docker.
Keeping Docker patched
As with any application you...