Digital Library

Security of containerization platforms: threat modelling, vulnerability analysis, and risk mitigation

• Andrzej Mycek
• Maryna Lukaczyk

(2024). ECMS 2024, 38th Proceedings
Edited by: Daniel Grzonka, Natalia Rylko, Grazyna Suchacka, Vladimir Mityushev, European Council for Modelling and Simulation.
DOI: http://doi.org/10.7148/2024
ISSN: 2522-2422 (ONLINE)
ISSN: 2522-2414 (PRINT)
ISSN: 2522-2430 (CD-ROM)
ISBN: 978-3-937436-84-5
ISBN: 978-3-937436-83-8 (CD) Communications of the ECMS Volume 38, Issue 1, June 2024, Cracow, Poland June 4th – June 7th, 2024

https://doi.org/10.7148/2024-0585

Andrzej mycek, Maryna lukaczyk (2024). Security of Containerization Platforms: Threat Modelling, Vulnerability Analysis, and Risk Mitigation, ECMS 2024, Proceedings Edited by: Daniel Grzonka, Natalia Rylko, Grazyna Suchacka, Vladimir Mityushev, European Council for Modelling and Simulation. doi:10.7148/2024-0585

In every modern organization, the DevOps methodology carries out the process of creating, testing, implementing, and maintaining applications. This methodology significantly shortens the application delivery time, reduces costs, and limits the risks associated with creating and developing applications. Docker and Kubernetes are the tools without which it is impossible to work in this methodology. These two most popular container technologies have several advantages, such as the ease of developing our products, but like any tool, they are susceptible to threats.
This work comprehensively addresses the security issues of container platforms. It highlights the security concerns related to the host and the Docker and Kubernetes platforms. The most critical vulnerabilities on these platforms have been analyzed, and methods have been presented that significantly enhance the security level of environments, reduce potential risks, and eliminate the most severe threats.