Container Based On-Premises Cloud Security Framework

Abstract

Securing a cloud orchestration framework is the need of the hour, as more attacks on cloud infrastructure are reported in recent times. Orchestration of cloud with the help of container is one of the design strategies which is being employed lately. Containers are lighter than Virtual Machines, significantly reduces start-up and processing time and incurs less storage overhead as well. Our aim in this research work is to explore container based on-premise cloud orchestration, analyse its security scenario, study current research efforts, and propose a secure framework for container based cloud orchestration to minimize the vulnerability if any. To achieve this goal, sample deployment set of container images for risk assessment is identified, vulnerability or risk analysis is performed on the set of images with the help of image scanning tool. Based on the risk analysis, parameters are defined. With these parameters, the best image suitable for completing client request is selected from the pool of images and that image is deployed in our secure container based cloud infrastructure.