NDLI: A Study of Security Vulnerabilities on Docker Hub

Please wait, while we are loading the content...

Research Issues and Approaches for Connected and Automated Vehicles

Ghostbuster: A Fine-grained Approach for Anomaly Detection in File System Accesses

Canonical Completeness in Lattice-Based Languages for Attribute-Based Access Control

Privacy-Preserving HMM Forward Computation

Achieving Differential Privacy in Secure Multiparty Data Aggregation Protocols on Star Networks

Sound and Static Analysis of Session Fixation Vulnerabilities in PHP Web Applications

The Human Capital Model for Security Research: New Insights into Technology Transition

PT-CFI: Transparent Backward-Edge Control Flow Violation Detection Using Intel Processor Trace

Panel: Trustworthy Data Science

Detecting ROP with Statistical Learning of Program Characteristics

All Your VMs are Disconnected: Attacking Hardware Virtualized Network

Ripple: Reflection Analysis for Android Apps in Incomplete Information Environments

Aegis: Automatic Enforcement of Security Policies in Workflow-driven Web Applications

Mining Attributed Graphs for Threat Intelligence

Classifying and Comparing Attribute-Based and Relationship-Based Access Control

Share a pie?: Privacy-Preserving Knowledge Base Export through Count-min Sketches

"If You Can't Beat them, Join them": A Usability Approach to Interdependent Privacy in Cloud Apps

A New Bloom Filter Structure for Searchable Encryption Schemes

Detecting Patching of Executables without System Calls

Large-Scale Identification of Malicious Singleton Files

SGXIO: Generic Trusted I/O Path for Intel SGX

Detecting Mobile Application Spoofing Attacks by Leveraging User Visual Similarity Perception

Discovering Browser Extensions via Web Accessible Resources

Decompression Quines and Anti-Viruses

SAMPAC: Socially-Aware collaborative Multi-Party Access Control

Efficient Commodity Matching for Privacy-Preserving Two-Party Bartering

Seamless and Secure Bluetooth LE Connection Migration

Fault Attacks on Encrypted General Purpose Compute Platforms

Scalable Function Call Graph-based Malware Classification

A Study of Security Vulnerabilities on Docker Hub

Deep Android Malware Detection

Graph Automorphism-Based, Semantics-Preserving Security for the Resource Description Framework (RDF)

Statistical Security Incident Forensics against Data Falsification in Smart Grid Advanced Metering Infrastructure

Differentially-Private Big Data Analytics for High-Speed Research Network Traffic Measurement

Analysis of Exception-Based Control Transfers

DroidSieve: Fast and Accurate Classification of Obfuscated Android Malware

Secure Free-Floating Car Sharing for Offline Cars

Comprehensive Method for Detecting Phishing EmailsUsing Correlation-based Analysis and User Participation

Identifying HTTPS-Protected Netflix Videos in Real-Time

Prioritized Analysis of Inter-App Communication Risks

The Authorization Policy Existence Problem

Towards Practical Privacy-Preserving Life Cycle Assessment Computations

A Study of Security Vulnerabilities on Docker Hub

Content Provider	ACM Digital Library
Author	Enck, William Gu, Xiaohui Shu, Rui
Abstract	Docker containers have recently become a popular approach to provision multiple applications over shared physical hosts in a more lightweight fashion than traditional virtual machines. This popularity has led to the creation of the Docker Hub registry, which distributes a large number of official and community images. In this paper, we study the state of security vulnerabilities in Docker Hub images. We create a scalable Docker image vulnerability analysis (DIVA) framework that automatically discovers, downloads, and analyzes both official and community images on Docker Hub. Using our framework, we have studied 356,218 images and made the following findings: (1) both official and community images contain more than 180 vulnerabilities on average when considering all versions; (2) many images have not been updated for hundreds of days; and (3) vulnerabilities commonly propagate from parent images to child images. These findings demonstrate a strong need for more automated and systematic methods of applying security updates to Docker images and our current Docker image analysis framework provides a good foundation for such automatic security update.
Starting Page	269
Ending Page	280
Page Count	12
File Format	PDF
ISBN	9781450345231
DOI	10.1145/3029806.3029832
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2017-03-22
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Vulnerability propagation Security vulnerabilities Docker images
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Vulnerability Analysis of 2500 Docker Hub Images

A framework for vulnerability minimization — Object oriented design perspective

A Study on ROS Vulnerabilities and Countermeasure

DIVDS: Docker Image Vulnerability Diagnostic System

Study of Car Dash Cam Security Vulnerabilities

EVALUATION OF USERS ’ PERSPECTIVE ON VOIP’S SECURITY VULNERABILITIES

Benchmarking the Security of Web Serving Systems Based on Known Vulnerabilities

A Study on Software Vulnerabilities and Weaknesses of Embedded Systems in Power Networks

Building a Commit-level Dataset of Real-world Vulnerabilities

A Study of Security Vulnerabilities on Docker Hub

Similar Documents

Vulnerability Analysis of 2500 Docker Hub Images

A framework for vulnerability minimization — Object oriented design perspective

A Study on ROS Vulnerabilities and Countermeasure

DIVDS: Docker Image Vulnerability Diagnostic System

Study of Car Dash Cam Security Vulnerabilities

EVALUATION OF USERS ’ PERSPECTIVE ON VOIP’S SECURITY VULNERABILITIES

Benchmarking the Security of Web Serving Systems Based on Known Vulnerabilities

A Study on Software Vulnerabilities and Weaknesses of Embedded Systems in Power Networks

Building a Commit-level Dataset of Real-world Vulnerabilities

A Study of Security Vulnerabilities on Docker Hub