Appsec Knowledge Base

CONTAINERIZATION

Containerization creates challenges to application security.

Containerization, or container-based virtualization, is a technique for deploying and operating distributed applications without needing to launch an entire virtual machine (VM) for each piece of software. Software containers include everything an application needs to run – code, settings, system libraries, runtime and system tools.

Containerization is potentially much more efficient than running multiple VMs, which each require separate OS instances. Containers can be moved easily between systems without requiring code changes, and they present fewer CPU and storage demands so more containers to be hosted on the same infrastructure. Containerization also makes building microservices and applications faster, allowing organizations to be more agile.

Data security is one potential downside to containerization. Since containers share a host operating system, security threats may have easier access to larger systems. Visibility can also be an issue – IT administrators may not be able to easily identify flaws and vulnerabilities within the code. For this reason, containerization development must include steps to submit containers for security testing before moving into production. The trick is finding highly efficient application security testing solutions that won’t negate the benefits of speed and agility that containerization offers. That’s where CA Veracode can help.

Securing containerization with CA Veracode.

CA Veracode is a leading provider of application security solutions that enable businesses to secure the software they rely on for mission-critical operations. By making it easy and affordable to test applications throughout the development process – from the first snippets of code that are written through deployment and production – we enable developers and IT teams to create secure software without sacrificing time-to-market.

CA Veracode Static Analysis offers an easy to use solution for testing code to secure containerization, as well as securing micro services, desktop, mobile and web applications. Developers can submit code to our Static Analysis service through an online Application Security Platform and receive results within hours – 80% of scans receive results within four hours, and 90% within one day. Results are returned prioritized by severityand accompanied by step-by-step guidance for remediation, enabling developers to work more efficiently. CA Veracode Static Analysis scans binaries rather than source code, making it easy to add security testing to the containerization process. And because our services integrate easily into the C integrated development environment and other IDEs, developers don’t have to open a new environment to submit code for review.

Complete testing solutions for containerization and other development processes.

In addition to Static Analysis for work secure containerization, we offer services that include:

  • Web Application Scanning
  • Software Composition Analysis
  • Runtime Protection
  • Veracode Greenlight, a service that provides immediate contextual feedback as developers write code.

Learn more about securing containerization with Veracode, or visit our AppSec knowledgebase to to learn about preventing a DDoS attack, about the value of an information technology infrastructure library, and to get answers to questions like “What is DLP?

 

 

contact menu