Towards a security stress-test for cloud configurations

HIGHLIGHTS

SUMMARY

    Misconfiguration is the most prevalent vulnerability in the cloud, 76% containers are running as root, and 75% of containers are running with critical vulnerabilities (§II). Fig 1 shows the workflow steps of the stress-test on Docker containers, namely, (i) building the knowledge graph from configuration files, (ii) enriching the graph with known vulnerabilities, and_(iii), testing and fixing the system by interacting with the user. Based on the running configuration (infrastructure, container engine, etc.), represented in the knowledge graph, the authors then link the latter to AND/OR graphs assumptions being currently used . . .

     

    Logo ScioWire Beta black

    If you want to have access to all the content you need to log in!

    Thanks :)

    If you don't have an account, you can create one here.

     

Scroll to Top

Add A Knowledge Base Question !

+ = Verify Human or Spambot ?