Malicious investigation of Docker images on basis of vulnerability databases
Ryota Yoshizaki, Atsushi Kanai · 2022 IEEE 11th Global Conference on Consumer Electronics (GCCE) · 2022
The market for cloud services is continuing to expand, and with it the use of virtualization has grown remarkably. Virtualization using containers has been increasing and is expected to become more widely used, replacing conventional virtualization technologies. Although the use of virtualization is increasing, the awareness of security is generally low, and there are problems such as the use of virtualization by attackers and the use of applications that are vulnerable due to not being updated. We investigated the vulnerability of images inside a Docker container, one of the leading container technologies, and found differences in the number of vulnerabilities in official images and other images and in their threat levels.