Linux

Security analysis of Docker-based containerized environments

Operating System (OS) virtualization, also known as container-based virtualization, has gained momentum over the past few years thanks to its lightweight nature and support for agility. However, its compelling features come at the price of a reduced isolation level compared to the traditional host-based virtualization techniques, exposing workloads to various faults, such as container escape. Those faults might be manifested as host OS bugs, container runtime vulnerabilities, and/or poor container deployment choices and profile configuration. The latter aspect is particularly critical as

Monitoring containerized environments for security state error detection

Operating System (OS) virtualization, also known as container-based virtualization, has gained momentum over the past few years thanks to its lightweight nature and support for agility. However, its compelling features come at the price of a reduced isolation level compared to the traditional host-based virtualization techniques, exposing workloads to various threats, such as container escape. In those threats, compromised or rogue containers might exploit existing vulnerabilities or poor container deployment choices to successfully inject security state errors (e.g., breaking out of the

Martins Bruvelis

Senior Information Technology Specialist, Computer, Electrical and Mathematical Sciences and Engineering
Martins is a Tier 3 technical support specialist. He specializes in resolving complex IT infrastructure challenges, provides advanced support, and develops, maintains, and enhances critical software applications and tools. His quantum physics and data science background has refined an investigative, analytical, and data-driven perspective, enabling insightful decision-making and innovative interdisciplinary solutions when addressing complex issues across a broad spectrum of expertise.

Ali Charara

Ali Charara obtained both, his MS Degree and PhD Degree from Computer Science at KAUST in 2011 and 2018 respectively. His master thesis supervisor was Alyn Rockwood and his PhD thesis supervisor was David Keyes. Ali's research interests were in High Performance Computing with a focus on parallel computing and algorithms using multicore and manycore Computer Graphics Units. Education Profile MS Degree, Computer Science, KAUST (2011) PhD Degree, Computer Science, KAUST (2018)