Linux

Security analysis of Docker-based containerized environments

Operating System (OS) virtualization, also known as container-based virtualization, has gained momentum over the past few years thanks to its lightweight nature and support for agility. However, its compelling features come at the price of a reduced isolation level compared to the traditional host-based virtualization techniques, exposing workloads to various faults, such as container escape. Those faults might be manifested as host OS bugs, container runtime vulnerabilities, and/or poor container deployment choices and profile configuration. The latter aspect is particularly critical as

Monitoring containerized environments for security state error detection

Operating System (OS) virtualization, also known as container-based virtualization, has gained momentum over the past few years thanks to its lightweight nature and support for agility. However, its compelling features come at the price of a reduced isolation level compared to the traditional host-based virtualization techniques, exposing workloads to various threats, such as container escape. In those threats, compromised or rogue containers might exploit existing vulnerabilities or poor container deployment choices to successfully inject security state errors (e.g., breaking out of the

Martins Bruvelis

Senior Information Technology Specialist, Computer, Electrical and Mathematical Sciences and Engineering
Martins is a Tier 3 IT Specialist with a background in quantum engineering and data science. He leverages analytical, multidisciplinary, and data-driven approaches to drive innovation and efficiency within the IT infrastructure. He excels at full-stack development, identifying complex problems' root causes and developing impactful long-term solutions within a broad area of competence.

Junshu Jiang

Ph.D. Student, Statistics

Ali Charara

Ali Charara obtained both, his MS Degree and PhD Degree from Computer Science at KAUST in 2011 and 2018 respectively. His master thesis supervisor was Alyn Rockwood and his PhD thesis supervisor was David Keyes. Ali's research interests were in High Performance Computing with a focus on parallel computing and algorithms using multicore and manycore Computer Graphics Units. Education Profile MS Degree, Computer Science, KAUST (2011) PhD Degree, Computer Science, KAUST (2018)