NIST Guidance on Application Container Security

Chandramouli, Ramaswamy; Souppaya, Murugiah; Scarfone, Karen

ITL Bulletin

NIST Guidance on Application Container Security

Documentation Topics

Date Published: October 2017

Editor(s)

Ramaswamy Chandramouli (NIST), Murugiah Souppaya (NIST), Karen Scarfone (Scarfone Cybersecurity)

Abstract

This bulletin summarizes the information found in NIST SP 800-190, Application Container Security Guide and NISTIR 8176, Security Assurance Requirements for Linux Application Container Deployments. The bulletin offers an overview of application container technology and its most notable security challenges.

This bulletin summarizes the information found in NIST SP 800-190, Application Container Security Guide and NISTIR 8176, Security Assurance Requirements for Linux Application Container Deployments. The bulletin offers an overview of application container technology and its most notable security... See full abstract

Keywords

application container, container, container registry, container security, virtualization

Control Families

Access Control; Configuration Management; System and Communications Protection; System and Information Integrity

Documentation

Publication:
October 2017 ITL Bulletin

Supplemental Material:
None available

Related NIST Publications:
SP 800-190
NISTIR 8176

Document History:
10/24/17: ITL Bulletin (Final)

Topics

Security and Privacy
assurance; configuration management; security automation; threats; vulnerability management

Technologies
cloud & virtualization