Secrets Revealed in Container Images: An Internet-wide Study on Occurrence and Impact
Markus Dahlmanns, Constantin Sander, R Decker, Klaus Wehrle
Abstract
Containerization allows bundling applications and their dependencies into a single image. The containerization framework Docker eases the use of this concept and enables sharing images publicly, gaining high momentum. However, it can lead to users creating and sharing images that include private keys or API secrets—either by mistake or out of negligence. This leakage impairs the creator’s security and that of everyone using the image. Yet, the extent of this practice and how to counteract it remains unclear.
Topics & Concepts
Computer securityComputer scienceThe InternetConfidentialityAuthentication (law)CertificateInternet privacyPublic key infrastructurePublic-key cryptographyWorld Wide WebEncryptionAlgorithmAdvanced Malware Detection TechniquesSecurity and Verification in ComputingDigital and Cyber Forensics