AN APPROACH TO IMPROVE ISOLATION AND SECURITY IN CONTAINER BASED CLOUD SYSTEMS

Abstract

Container-based virtualization is a lightweight virtual hosting environment that provides application isolation with less overhead. Containerization enables the creation of isolated, multiple user-space instances and effectual consumption of resources and rapid provisioning. However, container-based virtual environments have a weak isolation due to a shared kernel. This makes the entire system vulnerable to security attacks. This paper investigates various security issues in container based systems and proposes a solution for securing the container using a novel access control model. We also conducted stress test using benchmarking tool to evaluate the enhanced isolation using our proposed model.