Container security
Container security is about making sure that a container-based system or workload is protected by using different security methods and technologies. This includes securing the container image during creation, securing the deployment of the image, and making sure that the container environment is secure during runtime.
Let us look at threats and risks in containers.
Threats and risks in containers
NIST defines cybersecurity risks as relating to the loss of confidentiality, integrity, and availability of information and data and its potential adverse impact on an organization or business. The NIST definition of container security risks includes the following:
- Image risks: Image configuration defects, embedded malware, embedded clear text secrets, the use of untrusted images
- Registry risks: Insecure registry connections, stale images, and inadequate authentication and authorization to the registry are common risks
- Orchestrator risks: Unrestricted...
