• Ch.Ramya

Currently organizations are looking forward to make a shift towards digital transformation which includes adaption of technologies cloud computing and virtualization. The demand for containers are constantly growing in virtualization area since they cause fundamentally less overhead than Virtual Machines,the old hypervisor based counterparts while having better performance.But containers have security issues as they interact directly with hosts kernel which makes attackers to easily enter into a host system. Present security methods based on the implementation of Mandatory Access Control rules,which permits only needed functions.However this needs indetail knowledge about container working and manual intervention to install. To overcome these limitations, we present Docker-sec,user-friendly mechanism for the protection of Docker containers throughout their lifetime via the enforcement of access policies that correspond to the anticipated (and legitimate) activity of the applications they enclose. Docker-sec employs two mechanisms:(a) Upon container creation, it constructs an initial, static setof access rules based on container configuration parameters;(b) During container runtime, the initial set is enhanced withadditional rules that further restrict the container’s capabilities, reflecting the actual application operations. Through a richinteraction with our system the audience will experience firsthandhow Docker-sec can successfully protect containers from zero-day vulnerabilities in an automatic manner, with minimal overhead on the application performance.

Virtualization,Security,container,Docker-sec.

"A Fully Automated Container Security Mechanism : Docker-sec", International Journal of Emerging Technologies and Innovative Research (www.jetir.org), ISSN:2349-5162, Vol.6, Issue 4, page no.28-31, April-2019, Available :http://www.jetir.org/papers/JETIRAZ06005.pdf

"A Fully Automated Container Security Mechanism : Docker-sec", International Journal of Emerging Technologies and Innovative Research (www.jetir.org | UGC and issn Approved), ISSN:2349-5162, Vol.6, Issue 4, page no. pp28-31, April-2019, Available at : http://www.jetir.org/papers/JETIRAZ06005.pdf