Security of containerization platforms: threat modelling, vulnerability analysis, and risk mitigation

In every modern organization, the DevOps methodology carries out the process of creating, testing, implementing, and maintaining applications. This methodology significantly shortens the application delivery time, reduces costs, and limits the risks associated with creating and developing applications. Docker and Kubernetes are the tools without which it is impossible to work in this methodology. These two most popular container technologies have several advantages, such as the ease of developing our products, but like any tool, they are susceptible to threats. This work comprehensively addresses the security issues of container platforms. It highlights the security concerns related to the host and the Docker and Kubernetes platforms. The most critical vulnerabilities on these platforms have been analyzed, and methods have been presented that significantly enhance the security level of environments, reduce potential risks, and eliminate the most severe threats.