Docker Security - Quick Reference Logo

Docker Security - Quick Reference

0
Free
Visit Website

The security defaults of Docker are established to get you up and running (“just work”) quickly, rather than being the most secure. There are many default configurations that can be improved upon. This book will help you do just that. Covering the risks and countermeasures of Docker security, based on Kim’s own personal experience with Docker environments and discussions with Docker Security Team Lead Diogo Mónica. Type Book Publication Self Hosted and LeanPub Check out Kim’s blog post which goes into some of the detail within this book, along with what others are saying about Docker Security. Please note that the entire content of this book is included in The VPS chapter of Holistic InfoSec for Web Developers F1. Errata (errors, typos, etc.) Submit an issue Open issues Closed issues publication book application-security capabilities control-groups cybersecurity dev-ops dev-sec-ops docker information-security infosec linux lsm namespaces seccomp security security-weaknesses software-security web-application-security Kim Carter Technologist / Engineer, Information Security Professional Technologist / Engineer, Information Security Professional, Entrepreneur and the founder of BinaryM

FEATURES

ALTERNATIVES

Protect against Prototype Pollution vulnerabilities in your application by freezing JavaScript objects.

Certificate Transparency Monitor that alerts you when an SSL/TLS certificate is issued for your domains.

Real-time capture the flag (CTF) scoring engine for computer wargames with a fun game-like environment for learning cybersecurity skills.

A Python library for querying ThreatCrowd's API for email, IP, domain, and antivirus reports

A tool to easily automate and multithread your pentesting and bug bounty workflow without any coding

Custom AppArmor profile generator for Docker containers with file globbing.

A comprehensive platform for software developers to learn, create, and optimize applications for Arm-based processors

A tool for adding new lines to files, skipping duplicates.