HARDENING Aplicado a la Virtualización Mediantes Contenedores
No hay miniatura disponible
Fecha
2016-08
Título de la revista
ISSN de la revista
Título del volumen
Editor
Universidad de Guayaquil. Facultad de Ciencias Matemáticas y Físicas. Carrera de Ingeniería en Networking y Telecomunicaciones
Resumen
Las técnicas de virtualización han sido ampliamente adoptadas por la industria tecnológica, principalmente por sus características que permiten aprovechar los recursos de hardware, brindando flexibilidad para crear varias máquinas virtuales con distintas características funcionando dentro de una misma máquina física, docker es una herramienta que se utiliza para trabajar bajo la plataforma de Linux la cual permite construir y distribuir aplicaciones en formato de contenedores Linux; el objetivo principal del proyecto es fortalecer la seguridad en contenedores Linux aplicando técnicas para mitigar las vulnerabilidades en el uso y desarrollo de esta tecnología. La modalidad de investigación del presente proyecto es de tipo Descriptivo lo cual consistirá en la búsqueda de información referente a los contenedores de Linux para encontrar las fallas en la arquitectura y diseño del software que lo vuelven vulnerables a ciertos ataques informáticos, se utilizara recopilación de información en foros, escenarios virtuales utilizando contenedores y software para auditar los contenedores .Se analizará los contenedores de Linux, su estructura, sus métodos de instalación y sus vulnerabilidades, se recabara información de los foros oficiales de Docker en los cuales se publican información acerca de los bugs o problemas que generalmente se presentan al usar o desplegar contenedores con la finalidad de aplicar hardening a los contendores Linux para de esta manera reducir los riesgos presentes en los cores, adicionalmente se realizará un manual de procesos para el fortalecimiento de seguridad en donde se explican las medidas necesarias para obtener un servidor con un alto grado de seguridad.
Virtualization techniques have been widely adopted by the technology industry, mainly for their features to take advantage of hardware resources, providing flexibility to create multiple virtual machines with different characteristics operating within the same physical machine. Docker is a tool used to work under Linux platform which allows to build and deploy applications on Linux format containers; this project aims to strengthen security in Linux containers applying techniques to mitigate vulnerabilities in the use and development of this technology. The research field of this project is descriptive which consists in finding information regarding containers Linux for identifying gaps in the architecture and design of the software that make it vulnerable to certain computer attacks ; forum information gathering is used, virtual scenarios using containers and software to audit the containers besides, containers Linux will be analyzed within its structure, installation methods and vulnerabilities, information will be collected from official forums Docker in which information is published about bugs or problems that usually occur when using or deploy containers in order to apply hardening the Linux containers to thereby reduce the present risks in the cores; moreover, a manual processes to strengthen security will be done explain the necessary requirements to get a server with a high degree of security.
Virtualization techniques have been widely adopted by the technology industry, mainly for their features to take advantage of hardware resources, providing flexibility to create multiple virtual machines with different characteristics operating within the same physical machine. Docker is a tool used to work under Linux platform which allows to build and deploy applications on Linux format containers; this project aims to strengthen security in Linux containers applying techniques to mitigate vulnerabilities in the use and development of this technology. The research field of this project is descriptive which consists in finding information regarding containers Linux for identifying gaps in the architecture and design of the software that make it vulnerable to certain computer attacks ; forum information gathering is used, virtual scenarios using containers and software to audit the containers besides, containers Linux will be analyzed within its structure, installation methods and vulnerabilities, information will be collected from official forums Docker in which information is published about bugs or problems that usually occur when using or deploy containers in order to apply hardening the Linux containers to thereby reduce the present risks in the cores; moreover, a manual processes to strengthen security will be done explain the necessary requirements to get a server with a high degree of security.
Descripción
ADOBE
Palabras clave
Hardening, Virtualización, Contenedores, Linux, Maquinas Virtuales