Docker Security - Quick Reference
The security defaults of Docker are established to get you up and running (“just work”) quickly, rather than being the most secure. There are many default configurations that can be improved upon. This book will help you do just that. Covering the risks and countermeasures of Docker security, based on Kim’s own personal experience with Docker environments and discussions with Docker Security Team Lead Diogo Mónica. Type Book Publication Self Hosted and LeanPub Check out Kim’s blog post which goes into some of the detail within this book, along with what others are saying about Docker Security. Please note that the entire content of this book is included in The VPS chapter of Holistic InfoSec for Web Developers F1. Errata (errors, typos, etc.) Submit an issue Open issues Closed issues publication book application-security capabilities control-groups cybersecurity dev-ops dev-sec-ops docker information-security infosec linux lsm namespaces seccomp security security-weaknesses software-security web-application-security Kim Carter Technologist / Engineer, Information Security Professional Technologist / Engineer, Information Security Professional, Entrepreneur and the founder of BinaryM
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
A lightweight CTF platform with simple setup and difficulty-based scoring that removes timezone advantages from competitions.
An unofficial Python API that enables programmatic searching, browsing, and downloading of Android apps from Google Play Store.
FBCTF is a platform for hosting Jeopardy and King of the Hill style Capture the Flag competitions with support for various scales and participation models.
A command-line tool for downloading Android APK files from the Appland platform via npm installation.
An easy-to-use and lightweight API wrapper for Censys APIs with support for Python 3.8+.
SecGen is an open-source framework that automatically generates vulnerable virtual machines and hacking challenges for cybersecurity education and penetration testing training.
A tool for SSH server auditing with comprehensive analysis capabilities.
Bane is an automated AppArmor profile generator for Docker containers that simplifies the creation of security policies with file globbing support and Docker integration.
PINNED
Proton Pass is a cross-platform password manager that provides encrypted storage, password generation, and security monitoring features with integrated 2FA and dark web monitoring capabilities.
NordVPN is a commercial VPN service that encrypts internet connections and hides IP addresses through a global network of servers, featuring integrated threat protection and multi-device support.
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.