NIST Guidance on Application Container Security

Chandramouli, Ramaswamy; Souppaya, Murugiah; Scarfone, Karen

July 19, 2023: URLs for CSRC publication details pages have changed. Legacy URLs should automatically redirect to the new URLs. However, links to the actual publications have NOT changed (e.g., DOIs and PDFs on nvlpubs.nist.gov). Please send inquiries to csrc-inquiry@nist.gov. [12:20 pm ET - If you received "Page Not Found" errors recently, please retry accessing those files. File synchronization should now be complete.]

ITL Bulletin

NIST Guidance on Application Container Security

Documentation Topics

Date Published: October 2017

Editor(s)

Ramaswamy Chandramouli (NIST), Murugiah Souppaya (NIST), Karen Scarfone (Scarfone Cybersecurity)

Abstract

This bulletin summarizes the information found in NIST SP 800-190, Application Container Security Guide and NISTIR 8176, Security Assurance Requirements for Linux Application Container Deployments. The bulletin offers an overview of application container technology and its most notable security challenges.

This bulletin summarizes the information found in NIST SP 800-190, Application Container Security Guide and NISTIR 8176, Security Assurance Requirements for Linux Application Container Deployments. The bulletin offers an overview of application container technology and its most notable security... See full abstract

Keywords

application container, container, container registry, container security, virtualization

Control Families

Access Control; Configuration Management; System and Communications Protection; System and Information Integrity

Documentation

Publication:
October 2017 ITL Bulletin (pdf)

Supplemental Material:
None available

Related NIST Publications:
SP 800-190
IR 8176

Document History:
10/24/17: ITL Bulletin (Final)

Topics

Security and Privacy

assurance, configuration management, security automation, threats, vulnerability management

Technologies

cloud & virtualization