Docker: Security Solutions - what the safest way to secure Docker?

CJM — Tue, 10 May 2022 11:32:24 GMT

Hi All,

I work for a tech start up where VM and Docker are used for development purposes.

In a security review we were discussing how Docker could pose a serious threat if developers are using uncertified images as part of trials and testing.

Trying to balance the risk against innovation is always a risk balanced decision; however, 1 scenario which has been discussed is:

An image is download containing malicious code to enable network sniffing, i.e. setting a network card outside the container, which is part of the native Windows/Linux build, to monitor/promiscuous mode, which then sends traffic to a malicious actor.

Acknowledging native end point monitoring software will detect some suspicious activity, what are the collective thoughts around securing Docker as much as reasonably practicable without stifling innovation?

Grateful as always for your contributions.

Re: Docker: Security Solutions - what the safest way to secure Docker?

Caute_cautim — Tue, 10 May 2022 21:38:55 GMT

@CJMHere are a few suggestions:

https://developer.ibm.com/articles/ibm-best-practices-for-the-kubernetes-cicd-secure-container-image-pipeline/

https://www.ibm.com/cloud/blog/kubernetes-vs-docker

https://www.ibm.com/cloud/architecture/content/course/containers-and-docker/docker-containers/

https://www.ibm.com/docs/en/cloud-private/3.2.0?topic=images-enforcing-container-image-security

https://www.ibm.com/docs/en/sscfcp/1.1.0?topic=overview-security-secure-service-container-cloud-private

https://info.aquasec.com/ebook-container-security-ten-things-devops-need-to-do-sem?utm_source=adwords&utm_medium=ppc&utm_campaign=Secure_Docker&utm_term=secure%20docker&utm_device=c&utm_content=345683197164&gclid=Cj0KCQjwmuiTBhDoARIsAPiv6L_nJRC32dLJPocNqhb_Q4aFFr74sYY6cju13GOMNNEUm9Yy-D3KD3saAqylEALw_wcB

https://cheatsheetseries.owasp.org/cheatsheets/Docker_Security_Cheat_Sheet.html

https://www.stackrox.io/blog/docker-security-101/

Try these and see if they help you set you on the right path with the appropriate policies.

Regards

Caute_Cautim

topic Re: Docker: Security Solutions - what the safest way to secure Docker? in Threats

Docker: Security Solutions - what the safest way to secure Docker?

Re: Docker: Security Solutions - what the safest way to secure Docker?