Posts

Showing posts from September, 2017

Security and Docker

1.  Security Test for Application in docker Not many information, but put DUT into docker could be the same thing, 2. Put security test tool in docker. I do not see huge benefit to put security test tool in docker, but there are a few posts mentions that, and major open source test tool already have their own docker image. https://raesene.github.io/blog/2015/08/15/set-up-a-complete-security-test-environment-with-command-and-docker-compose/ https://github.com/enaqx/awesome-pentest#docker-for-penetration-testing 3. Docker Security This is mainly for deployment,  check whether the docker environment is secure enough. https://medium.com/@alexeiled/docker-security-testing-3545e7493843 https://github.com/gaia-adm/docker-bench-test https://github.com/docker/docker-bench-security https://github.com/docker/notary