Opening book details…
Can I read Longitudinal Risk-based Security Assessment of Docker Software Container Images on EtoBox?
Longitudinal Risk-based Security Assessment of Docker Software Container Images by Alan Mills; Jonathan White; Phil Legg is a Computer Science article available to read on EtoBox.
What is Longitudinal Risk-based Security Assessment of Docker Software Container Images about?
As the use of software containerisation has increased, so too has the need for security research on their usage, with various surveys and studies conducted to assess the overall security posture of software container images. To date, there has been very little work that has taken a longitudinal view of container security to observe whether vulnerabilities are being resolved over time, as well as understanding the real-world implications of reported vulnerabilities, to assess the evolving security posture. In this work, we study the evolution of 380 software container images across 3 analysis periods between July 2022 and January 2023 to analyse maintenance and vulnerabilities factors over time. We sample across the 3 DockerHub categories: Official, Verified and OSS (Sponsored) Open Source Software. We found that the number of vulnerabilities present increased over time despite many containers receiving regular updates by providers. We also found that the choice of container OS can dramatically impact the number of reported vulnerabilities present over time, with Debian-based images typically having many more vulnerabilities that other Linux distributions, and with some containers s
Who reads Longitudinal Risk-based Security Assessment of Docker Software Container Images?
It is typically read by researchers, students, and practitioners in Computer Science.
- Author
- Alan Mills; Jonathan White; Phil Legg
- Publisher
- Elsevier BV
- Published
- 2023
- Language
- EN
- Field
- Computer Science (Physical Sciences)