A Literature Review on Cloud Computing and Container Security

Abstract

Docker has gained significant traction among software developers due to the portability, scalability, and versatility provided by container technology. However, as application security increasingly relies on the integrity of the images used as foundational components, concerns over vulnerabilities in these images have grown. With more development workflows transitioning to cloud environments, ensuring the security of images sourced from various repositories becomes crucial. This paper presents a CI/CD (Continuous Integration and Continuous Deployment) system designed to validate Docker image security throughout the software development lifecycle. We deliberately introduce vulnerable images to evaluate the system's ability to detect these issues. Additionally, we incorporate dynamic analysis to examine the runtime behaviour of Docker containers, demonstrating how this approach complements the static analysis methods commonly employed in security evaluations.