Awesome-Mirrors/awesome-container-security
1
0
Fork 0
mirror of https://github.com/kai5263499/awesome-container-security.git synced 2025-03-12 17:16:34 -04:00
Code Issues Packages Projects Releases Wiki Activity

add several resources for sandboxing containers

Browse Source
This commit is contained in:
Wes Widner 2017-11-04 15:36:52 -04:00
parent d64c832fbc
commit 4eb6025556
1 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
README.md
View File

@ -127,6 +127,9 @@ A collection of container related security resources
### [Whispers in the Hyper-space: High-speed Covert Channel Attacks in the Cloud](https://www.youtube.com/watch?v=d2TU_Q4U9DA) ### [Whispers in the Hyper-space: High-speed Covert Channel Attacks in the Cloud](https://www.youtube.com/watch?v=d2TU_Q4U9DA)
* An exploration of covert channels * An exploration of covert channels
### [Setting the Record Straight: containers vs. Zones vs. Jails vs. VMs](https://blog.jessfraz.com/post/containers-zones-jails-vms/)
* Contains an interesting point about how contains that share network namespaces can snoop on eachother's traffic
### Commercial solutions ### Commercial solutions
* [StakRox](https://www.stackrox.com/product/) - Container security solution with adaptive threat protection * [StakRox](https://www.stackrox.com/product/) - Container security solution with adaptive threat protection
* [Netsil](https://netsil.com/) - Operations dashboard for Kubernetes * [Netsil](https://netsil.com/) - Operations dashboard for Kubernetes
@ -169,6 +172,13 @@ A collection of container related security resources
### [Falco](https://www.sysdig.org/falco/) ### [Falco](https://www.sysdig.org/falco/)
* Open source container security monitoring * Open source container security monitoring
### [Getting towards real sandbox containers](https://blog.jessfraz.com/post/getting-towards-real-sandbox-containers/)
### [Bubblewrap](https://github.com/projectatomic/bubblewrap)
### [Subgraph](https://subgraph.com/)
* Bills itself as an adversary resistant computing platform. Under the hood the idea is to run containers in user space
------------------------------------------------------------------------------------------ ------------------------------------------------------------------------------------------
## Exploits ## Exploits