{"id":9409,"date":"2020-10-16T07:00:00","date_gmt":"2020-10-16T15:00:00","guid":{"rendered":"http:\/\/formtek.com\/blog\/?p=9409"},"modified":"2020-08-01T12:24:54","modified_gmt":"2020-08-01T20:24:54","slug":"containers-security-isnt-keeping-pace-with-devop-rollouts","status":"publish","type":"post","link":"https:\/\/formtek.com\/blog\/containers-security-isnt-keeping-pace-with-devop-rollouts\/","title":{"rendered":"Containers: Security isn&#8217;t Keeping Pace with Devop Rollouts"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/formtek.com\/blog\/containers-architectural-benefits-but-not-without-issues\/\">Container technologies<\/a>, like Docker, have many advantages over VMs. They are considerably more lightweight and can quickly start up. Depending on the physical server, container start times might be on the order of only 50 milliseconds compared to 30 to 40 seconds for a VM. They are particularly well suited for use with building applications based on microservices.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Only 20 percent of organizations used containers in 2019, but <a href=\"https:\/\/www.gartner.com\/en\/newsroom\/press-releases\/2020-06-25-gartner-forecasts-strong-revenue-growth-for-global-co\">Gartner forecasts<\/a> that 70 percent of organizations will be using containers by 2023.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">But containers may not be the right or best solution for everything. Like most things, one size doesn\u2019t fit all. <a href=\"https:\/\/muckrack.com\/kaya-ismail\/articles\">Kaya Ismail<\/a>, writing on CMSWire, digs in deeper to comparing containerized deployment versus a more traditional monolithic one and noted some problems with containers.<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>Performance <\/strong>\u2013 Applications based on microservices see better performance with containers. But not so with applications not using microservices. Containers with application code larger than several hundred megabytes may not see much gain.<\/li><li><strong>Shared Infrastructure<\/strong> \u2013 Side-by-side deployments in the same shared OS kernel may also expose applications to vulnerabilities. Single-tenant architectures on bare-metal offer the greatest protection.<\/li><li><strong>Security <\/strong>\u2013 Containers are new and often not configured correctly to be secure. Misconfigurations can leave applications vulnerable to threats.<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Security, in particular, is one area where Docker users easily get tripped up.  Docker usage can be complicated and misconfiguration is common.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/go.forrester.com\/blogs\/author\/sandy_carielli\/\">Sandy Carielli<\/a>, principal analyst at Forrester, <a href=\"https:\/\/go.forrester.com\/blogs\/container-adoption-is-on-the-rise-how-can-security-keep-up\/\">said that<\/a> &#8220;the allure of containers is largely to the benefit of the DevOps side of the house. Security pros are brought in later and left with the sub-optimal task of applying existing tools and traditional security mindsets to secure containers \u2014 and discovering that those are ill-equipped to the task.&#8221;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.linkedin.com\/in\/benoithey\/?originalSubdomain=uk\">Benoit Heynderickx<\/a>, principal analyst at the Information Security Forum, <a href=\"https:\/\/media.bitpipe.com\/io_14x\/io_148038\/item_1970834\/How_to_achieve_container_security_best_practice.pdf\">told ComputerWeekly that<\/a>: &#8220;the lightweight nature of containers removes the need for traditional IT infrastructure security controls such as a constant patching cycle and the extreme reliance on the firewall for protecting a network-based perimeter. But it brings new types of risks due to the rapid lifetime of containers, while adding increased networking complexities and placing emphasis on the need to apply secure design principles early on, such as secure coding practices. This is a paradigm shift from traditional security models and can only be addressed by deploying it in a phased and defined manner, focusing on specific groups of applications, such as the most sensitive ones for a start.&#8221;<\/p>\n<div class=\"lightsocial_container\"><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/digg.com\/submit?url=https%3A%2F%2Fformtek.com%2Fblog%2Fcontainers-security-isnt-keeping-pace-with-devop-rollouts%2F&amp;title=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/digg.png\" alt=\"Digg This\" title=\"Digg This\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.reddit.com\/submit?url=https%3A%2F%2Fformtek.com%2Fblog%2Fcontainers-security-isnt-keeping-pace-with-devop-rollouts%2F&amp;title=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/reddit.png\" alt=\"Reddit This\" title=\"Reddit This\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.stumbleupon.com\/submit?url=https%3A%2F%2Fformtek.com%2Fblog%2Fcontainers-security-isnt-keeping-pace-with-devop-rollouts%2F&amp;title=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/stumbleupon.png\" alt=\"Stumble Now!\" title=\"Stumble Now!\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/buzz.yahoo.com\/buzz?targetUrl=https%3A%2F%2Fformtek.com%2Fblog%2Fcontainers-security-isnt-keeping-pace-with-devop-rollouts%2F&amp;headline=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/yahoo_buzz.png\" alt=\"Buzz This\" title=\"Buzz This\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.dzone.com\/links\/add.html?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fcontainers-security-isnt-keeping-pace-with-devop-rollouts%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/dzone.png\" alt=\"Vote on DZone\" title=\"Vote on DZone\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.facebook.com\/sharer.php?t=&amp;u=https%3A%2F%2Fformtek.com%2Fblog%2Fcontainers-security-isnt-keeping-pace-with-devop-rollouts%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/facebook.png\" alt=\"Share on Facebook\" title=\"Share on Facebook\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/delicious.com\/save?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fcontainers-security-isnt-keeping-pace-with-devop-rollouts%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/delicious.png\" alt=\"Bookmark this on Delicious\" title=\"Bookmark this on Delicious\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.dotnetkicks.com\/kick\/?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fcontainers-security-isnt-keeping-pace-with-devop-rollouts%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/dotnetkicks.png\" alt=\"Kick It on DotNetKicks.com\" title=\"Kick It on DotNetKicks.com\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/dotnetshoutout.com\/Submit?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fcontainers-security-isnt-keeping-pace-with-devop-rollouts%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/dotnetshoutout.png\" alt=\"Shout it\" title=\"Shout it\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.linkedin.com\/shareArticle?mini=true&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fcontainers-security-isnt-keeping-pace-with-devop-rollouts%2F&amp;title=&amp;summary=&amp;source=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/linkedin.png\" alt=\"Share on LinkedIn\" title=\"Share on LinkedIn\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.technorati.com\/faves?add=https%3A%2F%2Fformtek.com%2Fblog%2Fcontainers-security-isnt-keeping-pace-with-devop-rollouts%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/technorati.png\" alt=\"Bookmark this on Technorati\" title=\"Bookmark this on Technorati\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/twitter.com\/home?status=Reading+https%3A%2F%2Fformtek.com%2Fblog%2Fcontainers-security-isnt-keeping-pace-with-devop-rollouts%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/twitter.png\" alt=\"Post on Twitter\" title=\"Post on Twitter\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.google.com\/buzz\/post?url=https%3A%2F%2Fformtek.com%2Fblog%2Fcontainers-security-isnt-keeping-pace-with-devop-rollouts%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/google_buzz.png\" alt=\"Google Buzz (aka. Google Reader)\" title=\"Google Buzz (aka. Google Reader)\" \/><\/a><\/div><\/div>","protected":false},"excerpt":{"rendered":"<p>Container technologies, like Docker, have many advantages over VMs. They are considerably more lightweight and can quickly start up. Depending on the physical server, container start times might be on the order of only 50 milliseconds compared to 30 to<span class=\"ellipsis\">&hellip;<\/span><\/p>\n<div class=\"read-more\"><a href=\"https:\/\/formtek.com\/blog\/containers-security-isnt-keeping-pace-with-devop-rollouts\/\">Read more &#8250;<\/a><\/div>\n<p><!-- end of .read-more --><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[61],"tags":[],"class_list":["post-9409","post","type-post","status-publish","format-standard","hentry","category-containers"],"_links":{"self":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/9409","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/comments?post=9409"}],"version-history":[{"count":2,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/9409\/revisions"}],"predecessor-version":[{"id":10302,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/9409\/revisions\/10302"}],"wp:attachment":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/media?parent=9409"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/categories?post=9409"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/tags?post=9409"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}