Research on Docker Role Access Control Mechanism Based on DRBAC

Abstract

With the rapid development of virtualization technology, security issues have also become increasingly prominent. All kinds of virtualization platforms use access control mechanisms to prevent illegal or legal entities from illegally accessing unauthorized resources.This paper discusses the access control mechanism adopted in Docker container, analyzes its shortcomings, and proposes a DRBAC based Docker role access control mechanism. This method is based on the role allocation method, dynamically expands the existing model, and adds a role access control mechanism to the Docker container. Through the distributed trust management and access control mechanism of DRBAC, we can solve the hidden danger brought by the main body because of delegated authority to other entities autonomously. When the system accesses Docker resources, this method can effectively control the access management and delegate problem of teh main body. In this way, we improve the access security of Docker container to host resources.