Arkadiusz Maruszczak, M. Walkowski, Sławomir Sujecki
{"title":"Docker容器的基础系统。安全性分析","authors":"Arkadiusz Maruszczak, M. Walkowski, Sławomir Sujecki","doi":"10.23919/softcom55329.2022.9911523","DOIUrl":null,"url":null,"abstract":"Docker based containerization is currently one of the most popular methods of delivering and creating of a software. It allow multiple teams to standarize their work, but also to reduce disadvantages of virtual machines that can impact performance and usability. This work concerns security of base systems, focusing on distroless. Base container images are one of the critical parts of a cloud environment. The results of analysis presented here allow for independent and objective comparison of advantages and disadvantages of various containers' base systems which are widely used in orchestration platforms such as Kubernetes and OpenShift.","PeriodicalId":261625,"journal":{"name":"2022 International Conference on Software, Telecommunications and Computer Networks (SoftCOM)","volume":"303 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2022-09-22","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":"{\"title\":\"Base Systems for Docker Containers - Security Analysis\",\"authors\":\"Arkadiusz Maruszczak, M. Walkowski, Sławomir Sujecki\",\"doi\":\"10.23919/softcom55329.2022.9911523\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"Docker based containerization is currently one of the most popular methods of delivering and creating of a software. It allow multiple teams to standarize their work, but also to reduce disadvantages of virtual machines that can impact performance and usability. This work concerns security of base systems, focusing on distroless. Base container images are one of the critical parts of a cloud environment. The results of analysis presented here allow for independent and objective comparison of advantages and disadvantages of various containers' base systems which are widely used in orchestration platforms such as Kubernetes and OpenShift.\",\"PeriodicalId\":261625,\"journal\":{\"name\":\"2022 International Conference on Software, Telecommunications and Computer Networks (SoftCOM)\",\"volume\":\"303 1\",\"pages\":\"0\"},\"PeriodicalIF\":0.0000,\"publicationDate\":\"2022-09-22\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"0\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"2022 International Conference on Software, Telecommunications and Computer Networks (SoftCOM)\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/10.23919/softcom55329.2022.9911523\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"\",\"JCRName\":\"\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"2022 International Conference on Software, Telecommunications and Computer Networks (SoftCOM)","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.23919/softcom55329.2022.9911523","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
Base Systems for Docker Containers - Security Analysis
Docker based containerization is currently one of the most popular methods of delivering and creating of a software. It allow multiple teams to standarize their work, but also to reduce disadvantages of virtual machines that can impact performance and usability. This work concerns security of base systems, focusing on distroless. Base container images are one of the critical parts of a cloud environment. The results of analysis presented here allow for independent and objective comparison of advantages and disadvantages of various containers' base systems which are widely used in orchestration platforms such as Kubernetes and OpenShift.