To facilitate scalability and resilience, many organizations now run applications in cloud native environments using containers and orchestration. But how do you know if the deployment is secure? This practical book examines key underlying technologies to help developers, operators, and security professionals assess security risks and determine appropriate solutions.

Author Liz Rice, VP of open source engineering at Aqua Security, looks at how the building blocks commonly used in container-based systems are constructed in Linux. You’ll understand what’s happening when you deploy containers and learn how to assess potential security risks that could affect your deployments. If you run container applications with kubectl or docker and use Linux command-line tools such as ps and grep, you’re ready to get started.

• Explore attack vectors that affect container deployments
• Dive into the Linux constructs that underpin containers
• Examine measures for hardening containers
• Understand how misconfigurations can compromise container isolation
• Learn best practices for building container images
• Identify container images that have known software vulnerabilities
• Leverage secure connections between containers

• Use security tooling to prevent attacks on your deployment

为了促进可扩展性和弹性，许多组织现在使用容器和协调在云原生环境中运行应用程序。但你怎么知道部署是否安全？这本实用的书研究了关键的基础技术，以帮助开发人员、运营商和安全专家评估安全风险并确定适当的解决方案。

作者Liz Rice是Aqua Security的开源工程副总裁，他研究了基于容器的系统中常用的构建块是如何在Linux中构建的。你将了解在你部署容器时发生了什么，并学习如何评估可能影响你部署的潜在安全风险。如果你用kubectl或docker运行容器应用程序，并使用ps和grep等Linux命令行工具，你就可以开始了。

- 探索影响容器部署的攻击载体

- 深入研究支撑容器的Linux结构

- 检查加固容器的措施

- 了解错误配置如何影响容器的隔离性

- 学习构建容器镜像的最佳实践

- 识别具有已知软件漏洞的容器镜像

- 利用容器之间的安全连接

- 使用安全工具来防止对你的部署的攻击