Docker technology is widely used for software deployment and cloud infrastructure. For Docker-specific security testing, the Docker Bench defines several security best practices and configurations for Docker containers deployment. The "CIS Docker Community Edition Benchmark" defines a security recommendation on the Docker host, daemon, container images, and container runtime. Generally speaking, there are three kinds of Docker security tools that do one of three different things:
- Scan for Docker security best practices based on CIS (Docker Bench, Actuary)
- Scan for known common vulnerabilities and exposures (CVEs) (Claire, Anchor Engine)
- Runtime threat analysis (Falco, Dagda)
Here are the open source security testing tools for Docker security:
|
Docker security tools |
Purpose and reference |
|
Docker Bench |
Docker Bench is an automated... |