ocker集群安全评估模型

ocker containers that are rapidly being used in cloud computing but recently are subject to security challenges. This paper mainly studies the security of the architecture based on Docker. The paper evaluate the single Docker container by the best practice and propose a cluster security evaluation method based on Bayesian network model. The paper designed and implements a container cluster evaluation tool. Finally, experiments are conducted to assess Docker cluster with different security configurations. By comparing the results, the assessment model can correctly demonstrate the overall security of the container cluster.