Research on Multi-level Container Security Mechanism Based on Lightweight Virtualization Environment
Lu Chen, Yuanyuan Ma, Zhipeng Shao, Mu Chen · 2020
As an increasingly popular virtualization technology in recent years, Docker technology has attracted more and more attention due to its light weight, low resource consumption, and rapid deployment. However, due to the limitations of Docker's own mechanism, the container lacks the boundaries owned by traditional virtual machines, and there are security risks such as horizontal expansion of permissions and data leakage during operation. This paper has designed a multi-level based on lightweight virtualization environment The container security mechanism applies multi-level security access control technology to the security protection of the container, thereby effectively controlling the flow of information in the container, Establish a container-based security access control boundary.