A defense method against docker escape attack

ACM International Conference Proceeding Series

Volumn , Issue , 2017, Pages 142-146

  Jian, Zhiqiang ^a   Chen, Long ^a  

^a CHONGQING UNIVERSITY OF POSTS AND TELECOMMUNICATIONS   (China)

Author keywords

Container escape; Docker security; Namespaces

Indexed keywords

CONTAINERS; CRYPTOGRAPHY; NETWORK SECURITY; VIRTUAL REALITY; VIRTUALIZATION;

CLOUD PLATFORMS; DOCKER SECURITY; ENTIRE SYSTEM; ESCAPE BEHAVIOR; NAMESPACES; SECURITY ISSUES; SECURITY MECHANISM; SYSTEM LEVELS;

DISTRIBUTED COMPUTER SYSTEMS;

EID: 85019082945     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/3058060.3058085     Document Type: Conference Paper

References (10)

1. Ann Mary Joy. 2015. Performance comparison between Linux containers and virtual machines.International Conference on Advances in Computer Engineering and Applications(Ghaziabad, India, 19-20 March 2015).342-346. http://ieeexplore.ieee.org/document/7164727/
2. Jen-Chieh Wang, Wei-Fun Cheng, Han-Chiang Chen and Hung-Li Chien.2015.Benefit of construct information security environment based on lightweight virtualization technology. International Carnahan Conference on Security Technology.(Sept 21-24, 2015). https://doi.org/10.1109/CCST.2015.7389695
3. E. W. Biederman and L. Networx. 2006. Multiple instances of the global linux namespaces. in Proceedings of the Linux Symposium, vol. 1. Citeseer, 101-112.
4. P. B. Menage. 2007. Adding generic process containers to the linux kernel. in Proceedings of the Linux Symposium. Ottawa (Ontario) (June 27-30), vol. 2, 45-57, https://www.kernel.org/doc/ols/2007/ols2007v2-pages-4558.pdf
5. P. Loscocco and S. Smalley. 2001. Integrating flexible support for security policies into the linux operating system. in Proceedings of the FREENIX Track: 2001 USENIX Annual Technical Conference ( Boston, Massachusetts, USA, June 25-30, 2001). C. Cole, Ed. USENIX, 29-42.
6. Si-yao Liu, Qiang Liu, Bin Li. 2015. Research on Isolation of Container Based on Docker Technology. SoftWare.
7. Jeeva Chelladhurai, Pethuru Raj Chelliah, Sathish Alampalayam Kumar. 2016. Securing Docker Container from Denial of Service (DoS) Attacks. IEEE International Conference on Services Computing (San Francisco, USA, June 27-July 2, 2016).856-859. https://doi.org/10.1109/SCC.2016.123
8. Wen-lin Yang. 2016. The Vulnerability Analysis and Security Enhancement of Docker. Information Security and Technology. Jilin University.
9. Theo Combe, Antony Martin and Roberto Di Pietro. 2016. To Docker or not to Docker: A security perspective.IEEE Cloud Computing.54-62. https://doi.org/10.1109/MCC.2016.100
10. Luigi Catuogno, Clemente Galdi. 2016. On The Evaluation of Security Properties of Containerized Systems. 15th International Conference on Ubiquitou Computing and Communications and 8th International Symposium on Cyberspace and Security.(Dec 14-16, 2016). https://doi.org/10.1109/IUCC-CSS.2016.018