February 2021
Beginner to intermediate
252 pages
5h 36m
Korean
Content preview from 컨테이너 보안: 컨테이너화된 응용 프로그램의 보안을 위한 개념, 이론, 대응법과 모범 관행까지
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
7.8 스캐닝 도구들
139
점이 발견될 가능성이 있다.
따라서 최신 취약점 정보(
NVD
나 기타 보안 권고 출처들에서 얻은)로 컨테이너 이미지를
다시 스캐닝하는 작업을 정기적으로 수행할 필요가 있다. 아주 흔히 쓰이는 접근 방식은, 새 이
미지를 구축할 때마다 스캐닝하는 것과 함께 배치된 모든 이미지를
24
시간마다 한 번씩 다시
스캐닝하는 것을 자동화된
CI
/
CD
파이프라인의 일부로 두는 것이다.
7.8
스캐닝 도구들
컨테이너 이미지 스캐닝 도구는
Trivy
(
https
://
oreil
.
ly
/
SxKQT
)나
Clair
(
https
://
oreil
.
ly
/
avK
-
2
),
Anchore
(
https
://
oreil
.
ly
/
7rFFt
) 같은 오픈소스 구현들에서부터
JFrog
나
Palo
Alto
,
Aqua
같은 회사의 상용 솔루션들까지 아주 다양하다. 또한,
Docker
Trusted
Registry
(
https
://
docs
.
docker
.
com
/
ee
/
dtr
)나
CNCF
프로젝트
Harbor
(
https
://
goharbor
.
io
)
같은 여러 컨테이너 이미지 솔루션과 주요 공용 클라우드가 제공하는 레지스트리들도 스캐닝
기능을 제공한다.
안타깝게도, 같은 이미지에 대해 이런 스캐너들은 상당히 다른 결과를 낸다. 그 원인을 알아
두면 스캐닝 결과를 적절히 적용하는 데 도움이 되므로, 주요 원인 몇 가지를 차례로 살펴보자.
7.8.1
정보의 출처
이번 장에서 언급했듯이, 취약점 정보의 출처는 다양하다.
NVD
가 있고, 또 배포판마다 보
안 권고 사항들이 있다.
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.