Quantitative risk assessment of container based cloud platform
Ehsan Mostajeran, Mohd Nizam Mohd Mydin, Mohammad Fairus Khalid, Bukhary Ikhwan Ismail, Rajendar Kandan, Ong Hong Hoe · 2017
Container virtualization technology has changed cloud computing service deployment, and enabled it to support many of today's emerging technologies. However security of cloud infrastructure and service has been one of the main challenges of adopting containerized platform. In this paper we explain about integration of vulnerability detection (in three main stages) during container deployment, with risk assessment methods to provide possibility of quantitative assessment of containerized cloud platform. For this purpose we introduce security metrics and explain how they are aggregated using the underlying framework. The proposed framework uses these metrics and measures security risk level of specific container deployment, which could assist system administrator for making decision related to mitigation of security risks.