Endre søk
RefereraExporteraLink to record
Permanent link

Direct link
Referera
Referensformat
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Annet format
Fler format
Språk
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Annet språk
Fler språk
Utmatningsformat
  • html
  • text
  • asciidoc
  • rtf
Static Vulnerability Analysis of Docker Images
Blekinge Tekniska Högskola, Fakulteten för datavetenskaper, Institutionen för datalogi och datorsystemteknik.
Blekinge Tekniska Högskola, Fakulteten för datavetenskaper, Institutionen för datalogi och datorsystemteknik.
2017 (engelsk)Independent thesis Advanced level (professional degree), 20 poäng / 30 hpOppgave
Abstract [en]

Docker is a popular tool for virtualization that allows for fast and easy deployment of applications and has been growing increasingly popular among companies. Docker also include a large library of images from the repository Docker Hub which mainly is user created and uncontrolled. This leads to low frequency of updates which results in vulnerabilities in the images. In this thesis we are developing a tool for determining what vulnerabilities that exists inside Docker images with a Linux distribution. This is done by using our own tool for downloading and retrieving the necessary data from the images and then utilizing Outpost24's scanner for finding vulnerabilities in Linux packages. With the help of this tool we also publish statistics of vulnerabilities from the top downloaded images of Docker Hub. The result is a tool that can successfully scan a Docker image for vulnerabilities in certain Linux distributions. From a survey over the top 1000 Docker images it has also been shown that the amount of vulnerabilities have increased in comparison to earlier surveys of Docker images.

sted, utgiver, år, opplag, sider
2017. , s. 39
Emneord [en]
Docker, Containerization, Vulnerability analysis, Vulnerability scanning
HSV kategori
Identifikatorer
URN: urn:nbn:se:bth-14794OAI: oai:DiVA.org:bth-14794DiVA, id: diva2:1118087
Eksternt samarbeid
Outpost24 AB
Fag / kurs
Degree Project in Master of Science in Engineering 30.0
Utdanningsprogram
DVACD Master of Science in Computer Security
Veileder
Examiner
Tilgjengelig fra: 2017-06-30 Laget: 2017-06-29 Sist oppdatert: 2025-09-30bibliografisk kontrollert

Open Access i DiVA

fulltext(327 kB)4828 nedlastinger
Filinformasjon
Fil FULLTEXT02.pdfFilstørrelse 327 kBChecksum SHA-512
801372d3cd89938099c67a7927d6644d2ced58adbf0996d98d1dfb00351dc324dc8588755df263e61792251108fc02a9d58823d4f8d315f81de106d55d67f5c3
Type fulltextMimetype application/pdf

Av organisasjonen

Søk utenfor DiVA

GoogleGoogle Scholar
Totalt: 4833 nedlastinger
Antall nedlastinger er summen av alle nedlastinger av alle fulltekster. Det kan for eksempel være tidligere versjoner som er ikke lenger tilgjengelige

urn-nbn

Altmetric

urn-nbn
Totalt: 5016 treff
RefereraExporteraLink to record
Permanent link

Direct link
Referera
Referensformat
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Annet format
Fler format
Språk
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Annet språk
Fler språk
Utmatningsformat
  • html
  • text
  • asciidoc
  • rtf