面向容器云的综合安全增强策略研究及试验验证

Comprehensive Research and Test Verification on Security Enhancement Strategy of Container Cloud

容器云由于采用共享宿主机操作系统的模式,使得其面临更为复杂的安全问题,为提升容器云的安全防护水平,开展综合安全增强策略研究,分析了容器云所面临的风险,提出了容器云在基础设施、编排系统、镜像文件、容器运行时、微服务等的安全增强策略,并通过搭建安全检测平台,证明该策略能够有效地提升容器云的安全防护水平。

Container cloud is faced with more complex security problems because it adopts the mode of shared host OS.In order to improve the security protection level of contain cloud,this paper makes research on comprehensive security enhancement strategy,gives analysis of the risks existing in container cloud,and presents security enhancement strategies of infrastructure,orchestration management system,image files,container runtime,microservice and etc.And it is proved to improve the security protection levels of container cloud efficiently by building verification test.