Public container images are riddled with vulnerabilities. We've analyzed the top 100 official Docker images present on DockerHub and found thousands of vulnerabilities and misconfigurations. Many of these vulnerabilities lie not within the application itself but in dependencies, binaries, and file/user/network permissions that are not required for the application to run.

By Azzedine Benameur, Jay Chien-An Chen, Lei Ding & Michalis Polychronakis

Full Abstract & Presentation Materials: [ Ссылка ]

свернуть