본문 바로가기
IT Tech/Cloud

[Container] 이미지/컨테이너 취약점 분석툴, Security Scanner tool

by 웃는 얼굴, 친절한 말, 따뜻한 마음 2021. 8. 27.
728x90

런타임 분석

# Falco

https://falco.org/

 

Falco

Runtime Security

falco.org

 

 

정적인 이미지 파일 분석

#1 Alcide

https://www.alcide.io/

 

Kubernetes Security - Cyber Security Platform | Alcide

Case study TakeAway.com Boosts its Food Delivery Platform with EKS and Alcide Security

www.alcide.io

#2 WhiteSource for Containers

  https://whitesource.atlassian.net/wiki/spaces/WD/pages/710640440/WhiteSource+for+Containers 

 

WhiteSource for Containers - WhiteSource Documentation - WhiteSource documentation

The Motivation The most important aspect of container image security is managing vulnerabilities. Running containers with vulnerabilities exposes the entire system to attacks and compromises. WhiteSource assists its customers to actively manage and scan th

whitesource.atlassian.net

#3 Portshift

https://www.portshift.io/

 

Kubernetes-native security platform | Portshift

Kubernetes-native security platform delivering full visibility, vulnerability & configuration management, compliance and network segmentation. Learn More

www.portshift.io

#4 Anchore Enterprise

https://anchore.com/

 

Anchore • Container Security Solutions For DevSecOps

Anchore helps teams move from DevOps to DevSecOps with solutions that establish high velocity, policy-based container security workflows.

anchore.com

#5 Clair

https://searchitoperations.techtarget.com/tutorial/How-to-scan-Docker-images-for-vulnerabilities-with-Clair

 

How to use Clair to scan Docker images

Scanning Docker images for vulnerabilities can be a complex endeavor, but worthwhile. This tutorial shows admins how to use open source Clair for Docker image scanning via its CLI and a set of simple commands.

searchitoperations.techtarget.com

 

참고 : https://www.whitesourcesoftware.com/resources/blog/top-container-security-tools/

 

Container Security - Top 5 Tools You Should Already Be Using | WhiteSource

Here are 5 DevSecOps tools that help to integrate security into the container development cycle.

www.whitesourcesoftware.com

 

반응형