{"loaderData":{"bookShellContainer":{"isRouterLoaderQuery":true,"data":{"cardMetadata":{"identifier":"9781492056690","ourn":"urn:orm:book:9781492056690","popularity":0.00014802,"name":"Container Security","type":"book","description":{"text/html":"

Author Liz Rice, Chief Open Source Officer at Isovalent, looks at how the building blocks commonly used in container-based systems are constructed in Linux. You'll understand what's happening when you deploy containers and learn how to assess potential security risks that could affect your deployments. If you run container applications with kubectl or docker and use Linux command-line tools such as ps and grep, you're ready to get started.

Explore attack vectors that affect container deployments
Dive into the Linux constructs that underpin containers
Examine measures for hardening containers
Understand how misconfigurations can compromise container isolation
Learn best practices for building container images
Identify container images that have known software vulnerabilities
Leverage secure connections between containers
Use security tooling to prevent attacks on your deployment

Explore attack vectors that affect container deployments
Dive into the Linux constructs that underpin containers
Examine measures for hardening containers
Understand how misconfigurations can compromise container isolation
Learn best practices for building container images
Identify container images that have known software vulnerabilities
Leverage secure connections between containers
Use security tooling to prevent attacks on your deployment

","text/plain":"To facilitate scalability and resilience, many organizations now run applications in cloud native environments using containers and orchestration. But how do you know if the deployment is secure? This practical book examines key underlying technologies to help developers, operators, and security professionals assess security risks and determine appropriate solutions. Author Liz Rice, Chief Open Source Officer at Isovalent, looks at how the building blocks commonly used in container-based systems are constructed in Linux. You'll understand what's happening when you deploy containers and learn how to assess potential security risks that could affect your deployments. If you run container applications with kubectl or docker and use Linux command-line tools such as ps and grep, you're ready to get started. Explore attack vectors that affect container deployments Dive into the Linux constructs that underpin containers Examine measures for hardening containers Understand how misconfigurations can compromise container isolation Learn best practices for building container images Identify container images that have known software vulnerabilities Leverage secure connections between containers Use security tooling to prevent attacks on your deployment"},"spine":"https://internal-ingress.platform.gcp.oreilly.com/api/v2/epubs/urn:orm:book:9781492056690/spine/","files":"https://internal-ingress.platform.gcp.oreilly.com/api/v2/epubs/urn:orm:book:9781492056690/files/","table_of_contents":"https://internal-ingress.platform.gcp.oreilly.com/api/v2/epubs/urn:orm:book:9781492056690/table-of-contents/","chapters":"https://internal-ingress.platform.gcp.oreilly.com/api/v2/epub-chapters/?epub_identifier=urn:orm:book:9781492056690","tags":[],"language":"en","resources":[{"url":"http://oreilly.com/catalog/0636920273332/errata","type":"Unspecified, see website description","description":"Errata Page"}],"roughcut":false},"tableOfContents":[],"recommendations":[{"apiUrl":"/api/v1/book/9781492096719/","authors":["Jed Salazar","Natalia Reka Ivanko"],"contentFormat":"book","continueUri":"/api/v1/continue/9781492096719/","coverUri":"/library/cover/9781492096719/","description":"Kubernetes has become the de facto cloud operating system, making it a rich target for both passive and direct attackers. In fact, the largest concern most organizations have with Kubernetes is securing their production environments. But Kubernetes doesn't include observability or a default security configuration to discern if your pods or clusters have been attacked or compromised. With this report, authors Jed Salazar and Natalia Reka Ivanko help you discover how secure your Kubernetes environment actually is. Using the new eBPF security observability paradigm, security and DevOps teams, SREs, cloud engineers, and solution architects will gain real-time visibility into Kubernetes security. You'll learn how eBPF provides historical and current metrics to help you track improvements and degradations over time. This report helps you: Learn how pre-cloud network security and threat detection changed with the arrival of Kubernetes, and how you can finally solve them with eBPF Examine the core security observability events you should monitor, and which events translate into actionable signals for your security team Develop prevention policies to block attacks at different stages, rather than retroactively detecting them Learn how eBPF creates an improved prevention policy and framework over traditional security tools","identifier":"9781492096719","issued":"2022-04-25","ourn":"urn:orm:book:9781492096719","model":"recommendations_usage_based","score":0.873288631,"title":"Security Observability with eBPF","uiFormat":"book","uri":"/library/view/-/9781492096719/"},{"apiUrl":"/api/v1/book/9781617296024/","authors":["Neil Madden"],"contentFormat":"book","continueUri":"/api/v1/continue/9781617296024/","coverUri":"/library/cover/9781617296024/","description":"A web API is an efficient way to communicate with an application or service. However, this convenience opens your systems to new security risks. API Security in Action gives you the skills to build strong, safe APIs you can confidently expose to the world. Inside, you’ll learn to construct secure and scalable REST APIs, deliver machine-to-machine interaction in a microservices architecture, and provide protection in resource-constrained IoT (Internet of Things) environments. About the Technology APIs control data sharing in every service, server, data store, and web client. Modern data-centric designs—including microservices and cloud-native applications—demand a comprehensive, multi-layered approach to security for both private and public-facing APIs. About the Book API Security in Action teaches you how to create secure APIs for any situation. By following this hands-on guide you’ll build a social network API while mastering techniques for flexible multi-user security, cloud key management, and lightweight cryptography. When you’re done, you’ll be able to create APIs that stand up to complex threat models and hostile environments. What's Inside Authentication Authorization Audit logging Rate limiting Encryption About the Reader For developers with experience building RESTful APIs. Examples are in Java. About the Author Neil Madden has in-depth knowledge of applied cryptography, application security, and current API security technologies. He holds a Ph.D. in Computer Science. Quotes A comprehensive guide to designing and implementing secure services. A must-read book for all API practitioners who manage security. - Gilberto Taccari, Penta Anyone who wants an in-depth understanding of API security should read this. - Bobby Lin, DBS Bank I highly recommend this book to those developing APIs. - Jorge Bo, Naranja X The best comprehensive guide about API security I have read. - Marc Roulleau, GIRO","identifier":"9781617296024","issued":"2021-01-03","ourn":"urn:orm:book:9781617296024","model":"recommendations_usage_based","score":0.812603474,"title":"API Security in Action","uiFormat":"book","uri":"/library/view/-/9781617296024/"},{"apiUrl":"/api/v1/book/9781098127459/","authors":["BK Sarthak Das","Virginia Chu"],"contentFormat":"book","continueUri":"/api/v1/continue/9781098127459/","coverUri":"/library/cover/9781098127459/","description":"DevOps engineers, developers, and security engineers have ever-changing roles to play in today's cloud native world. In order to build secure and resilient applications, you have to be equipped with security knowledge. Enter security as code. In this book, authors BK Sarthak Das and Virginia Chu demonstrate how to use this methodology to secure any application and infrastructure you want to deploy. With Security as Code, you'll learn how to create a secure containerized application with Kubernetes using CI/CD tooling from AWS and open source providers. This practical book also provides common patterns and methods to securely develop infrastructure for resilient and highly available backups that you can restore with just minimal manual intervention. Learn the tools of the trade, using Kubernetes and the AWS Code Suite Set up infrastructure as code and run scans to detect misconfigured resources in your code Create secure logging patterns with CloudWatch and other tools Restrict system access to authorized users with role-based access control (RBAC) Inject faults to test the resiliency of your application with AWS Fault Injector or open source tooling Learn how to pull everything together into one deployment","identifier":"9781098127459","issued":"2023-01-03","ourn":"urn:orm:book:9781098127459","model":"recommendations_usage_based","score":0.801278591,"title":"Security as Code","uiFormat":"book","uri":"/library/view/-/9781098127459/"},{"apiUrl":"/api/v1/book/9781838981778/","authors":["Donald A. Tevault"],"contentFormat":"book","continueUri":"/api/v1/continue/9781838981778/","coverUri":"/library/cover/9781838981778/","description":"Dive into the world of Linux security with 'Mastering Linux Security and Hardening', a practical guide to fortify your systems against potential cyber threats. Learn to implement advanced protection techniques, set up secure configurations, and mitigate vulnerabilities step by step. By the end, you'll have the confidence to secure your Linux environments like a pro. What this Book will help me do Learn to create secured accounts and implement strong password policies, ensuring user access is controlled and monitored. Understand how to configure firewalls using tools like iptables and UFW to shield your system from intrusions. Master techniques to encrypt sensitive data, using modern encryption technologies to safeguard information. Harden secure shell configurations and use advanced access control mechanisms to effectively prevent breaches. Optimize Linux kernel parameters and audit mechanisms to reinforce system integrity. Author(s) Donald A. Tevault is a seasoned Linux expert with years of experience in system administration and information security. He has taught countless professionals how to protect and optimize Linux environments. Donald believes in a hands-on approach, empowering readers to learn through practice and practical examples. Who is it for? This book is perfect for Linux administrators seeking advanced security techniques. It's also suitable for system administrators and network engineers eager to protect higher-security environments. Working knowledge of the Linux command line and package management is recommended to fully engage with the topics presented.","identifier":"9781838981778","issued":"2020-02-21","ourn":"urn:orm:book:9781838981778","model":"recommendations_usage_based","score":0.794188857,"title":"Mastering Linux Security and Hardening - Second Edition","uiFormat":"book","uri":"/library/view/-/9781838981778/"}],"titleOurn":"urn:orm:book:9781492056690","productServiceData":{"data":[{"approvedToAnnounceBy":"cindy","asin":"1492056707","brands":[],"businessUnit":{"businessEntity":{"code":"ORM","id":1,"name":"O'Reilly Media, Inc.","type":{"code":"Publisher","id":1}},"code":"VEL","id":70,"name":"Web Ops","status":{"id":1,"name":"Active"}},"categories":[{"categoryType":{"id":0,"name":"primary"},"id":216,"lastUpdatedBy":"vwilson","name":"System Admin & Ops"},{"categoryType":{"id":1,"name":"additional"},"id":264,"lastUpdatedBy":"vwilson","name":"Computer Security"}],"contributors":[{"email":"mary@oreilly.com","emailTypeId":2,"firstName":"Mary","id":2113,"lastName":"Treseler","role":{"id":3,"name":"Executive Editor"}},{"allocationPercent":50,"email":"vwilson@oreilly.com","emailTypeId":2,"firstName":"Virginia","id":36222,"lastName":"Wilson","role":{"id":2,"name":"Editor"}},{"email":"vwilson@oreilly.com","emailTypeId":2,"firstName":"Virginia","id":36222,"lastName":"Wilson","lastUpdatedBy":"cindy","role":{"id":22,"name":"Project Manager"}},{"biography":"Liz Rice is Chief Open Source Officer at Isovalent, the eBPF and network security specialists behind the Cilium project. Previously, she was Vice President of Open Source Engineering with Aqua Security, where she looked after cloud native security projects including Trivy, Tracee, kube-hunter, and kube-bench. She is chair of CNCF’s Technical Oversight Committee and was cochair of the KubeCon + CloudNativeCon 2018 events in Copenhagen, Shanghai, and Seattle.\n

\nShe has a wealth of software development, team, and product management experience from working on network protocols and distributed systems, and in digital technology sectors such as VOD, music, and VoIP. When not writing code or talking about it, Liz loves riding bikes in places with better weather than her native London, and competing in virtual races on Zwift.","companyName":"","email":"liz@lizrice.com ","emailTypeId":2,"firstName":"Liz","id":37317,"lastName":"Rice","middleName":"","penName":"","role":{"id":1,"name":"Author"},"viewOrder":1},{"email":"cindy@oreilly.com","emailTypeId":2,"firstName":"Cindy","id":37538,"lastName":"LaNier","lastUpdatedBy":"cindy","role":{"id":4,"name":"Assistant Editor"}},{"allocationPercent":50,"companyName":"O'Reilly Media","email":"jdevins@oreilly.com","emailTypeId":2,"firstName":"John","id":39302,"janrainUuid":"bd8b4181826a4f00b7dd883397686c0e","lastName":"Devins","penName":"John Devins","role":{"id":2,"name":"Editor"}}],"created":"2019-03-01T08:00:00.000Z","discountable":true,"edition":1,"editionLabel":"1st Edition","enhancedQuiz":false,"enhancedSandbox":false,"estimatedReleaseDate":"2020-04-25","groupIdentifier":"0636920273332","id":200165,"imprint":{"code":"ORM","id":1,"name":"O'Reilly Media","publisher":{"code":"ORM","id":1,"name":"O'Reilly Media, Inc.","type":{"code":"Publisher","id":1}}},"isbn13":"9781492056706","lastUpdated":"2025-10-16T20:40:04.000Z","lastUpdatedBy":"kristen","legacyVideo":{"productId":null,"videoToc":null,"videoPreview":null,"videoPubProfile":null,"lastUpdatedBy":"cindy","videoDuration":null,"earlyReleaseDuration":null},"longDescription":"

\nAuthor Liz Rice, Chief Open Source Officer at Isovalent, looks at how the building blocks commonly used in container-based systems are constructed in Linux. You'll understand what's happening when you deploy containers and learn how to assess potential security risks that could affect your deployments. If you run container applications with kubectl or docker and use Linux command-line tools such as ps and grep, you're ready to get started.\n

Explore attack vectors that affect container deployments\n
Dive into the Linux constructs that underpin containers \n
Examine measures for hardening containers\n
Understand how misconfigurations can compromise container isolation \n
Learn best practices for building container images\n
Identify container images that have known software vulnerabilities\n
Leverage secure connections between containers\n
Use security tooling to prevent attacks on your deployment\n

","marketliveGoLiveDate":"2019-12-02","okToAnnounce":true,"oracleId":"9781492056706.BOOK","platformEnhanced":false,"practiceArea":{"code":"Web Ops","id":2,"uri":"http://purl.oreilly.com/practice-area/Velocity"},"prices":[{"country":{"country":"Canada","currencyCode":"CAD","id":"CAN"},"lastUpdated":"2023-02-14T00:03:41.000Z","lastUpdatedBy":"cindy","price":69.99,"priceType":{"id":"01","priceTypeDesc":"RRP excluding tax"}},{"country":{"country":"United Kingdom of Great Britain and Northern Ireland","currencyCode":"EUR","id":"GBE"},"lastUpdated":"2023-02-14T00:03:41.000Z","lastUpdatedBy":"cindy","price":51,"priceType":{"id":"01","priceTypeDesc":"RRP excluding tax"}},{"country":{"country":"United Kingdom of Great Britain and Northern Ireland","currencyCode":"GBP","id":"GBR"},"lastUpdated":"2023-02-14T00:03:41.000Z","lastUpdatedBy":"cindy","price":44.99,"priceType":{"id":"01","priceTypeDesc":"RRP excluding tax"}},{"country":{"country":"United States of America","currencyCode":"USD","id":"USA"},"lastUpdated":"2023-02-14T00:03:41.000Z","lastUpdatedBy":"cindy","price":55.99,"priceType":{"id":"01","priceTypeDesc":"RRP excluding tax"}}],"productType":{"id":1,"name":"Tech Book","oracleSuffix":"BOOK"},"publicationDate":"2020-04-06","publiclyVisible":true,"restrictedAccess":false,"royaltyBearing":true,"safariAvailabilityDate":"2019-12-02","safariFpi":"9781492056690","safariIdentifier":"9781492056690","shortDescription":"

To facilitate scalability and resilience, many organizations now run applications in cloud native environments using containers and orchestration. But how do you know if the deployment is secure? This practical book examines key underlying technologies to help developers, operators, and security professionals assess security risks and determine appropriate solutions.","status":{"id":5,"name":"Out of Print"},"subtitle":"Fundamental Technology Concepts that Protect Containerized Applications","title":"Container Security"}],"message":"OK","status":"OK","totalResultCount":1}},"query":{"queryKey":["commonData","9781492056690"]}}},"actionData":null,"errors":{"0-0-1-1":{"status":404,"statusText":"","data":"Content not found","internal":false,"__type":"RouteErrorResponse"}}}

404

Not Found