Docker Security - Quick Reference Logo

Docker Security - Quick Reference

0
Free
Visit Website

The security defaults of Docker are established to get you up and running (“just work”) quickly, rather than being the most secure. There are many default configurations that can be improved upon. This book will help you do just that. Covering the risks and countermeasures of Docker security, based on Kim’s own personal experience with Docker environments and discussions with Docker Security Team Lead Diogo Mónica. Type Book Publication Self Hosted and LeanPub Check out Kim’s blog post which goes into some of the detail within this book, along with what others are saying about Docker Security. Please note that the entire content of this book is included in The VPS chapter of Holistic InfoSec for Web Developers F1. Errata (errors, typos, etc.) Submit an issue Open issues Closed issues publication book application-security capabilities control-groups cybersecurity dev-ops dev-sec-ops docker information-security infosec linux lsm namespaces seccomp security security-weaknesses software-security web-application-security Kim Carter Technologist / Engineer, Information Security Professional Technologist / Engineer, Information Security Professional, Entrepreneur and the founder of BinaryM

FEATURES

ALTERNATIVES

A security oriented, feedback-driven, evolutionary, easy-to-use fuzzer with interesting analysis options.

Script to check for artifacts with the same name between repositories to prevent Dependency Confusion Attacks.

Package verification tool for npm with various verification and testing capabilities.

A CLI tool for signing and verifying npm and yarn packages.

A comprehensive collection of security assessment lists for security testers.

A library for validating and accessing environment variables in Node.js programs

A golang utility to spider through a website searching for additional links.

Porting GNU/Linux userland tools to the bionic/Linux userland of Android to provide access to the audit stream for Android applications with minimal overhead.

PINNED