Exploit Mitigation in Docker Containers Using Plain Text Files

Docker containers are a lightweight, flexible, and much faster solution compared to traditional virtualization, this infrastructure can be deployed in combination with virtual machines or as a replacement of these with fewer resources for the same purpose, the expansion of this technology leads to a new and different layer of security compared to the legacy architecture. This research analyzed the causes and effects of Docker exploits published in Common Vulnerabilities and Exposures (CVE), on two scenarios of an ecosystem with Docker containers, one without and the other with the application of security safeguards against 17 vulnerabilities identified by the OWASP Docker(/Container) methodology, for the mitigation of vulnerabilities three Raw Text Files were developed: kernel profiles, Docker-compose and Dockerfile with which an improvement in the level of security was achieved by 40.33% compared to before its implementation evaluated using a static and dynamic approach.