Container Scanning: Anchore Engine vs Aqua Microscanner vs Clair vs Dagda vs Twistlock
In Summary : Containers help solve the “well it worked on my laptop” issue that was quite prevalent in the past. Developers can now defin...
https://updatesinfosec.blogspot.com/2018/10/container-scanning-anchore-engine-vs.html
In Summary :
Containers help solve the “well it worked on my laptop” issue that was quite prevalent in the past. Developers can now define the exact versions of dependencies that have been tested to work alongside their applications. There is however a dark side to this. In the old days you may have had a team of operations and security people responsible for upgrades. Today we have thousands of images with who knows what inside that never get updated.
This security issue became headline news a few years ago when it emerged that a large proportion of the images on Dockerhub contained vulnerabilities. Docker went to great lengths to add new features to try to combat this massively negative publicity. More recently I read an article that said backdoored images on Dockerhub had been downloaded 5 million times before removal. [...]
kindly refer the following link as follow up :
https://ift.tt/2xMrSQ4
Containers help solve the “well it worked on my laptop” issue that was quite prevalent in the past. Developers can now define the exact versions of dependencies that have been tested to work alongside their applications. There is however a dark side to this. In the old days you may have had a team of operations and security people responsible for upgrades. Today we have thousands of images with who knows what inside that never get updated.
This security issue became headline news a few years ago when it emerged that a large proportion of the images on Dockerhub contained vulnerabilities. Docker went to great lengths to add new features to try to combat this massively negative publicity. More recently I read an article that said backdoored images on Dockerhub had been downloaded 5 million times before removal. [...]
kindly refer the following link as follow up :
https://ift.tt/2xMrSQ4
