English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Plus monthly

Global: Zendy Tools annual

Global: Zendy Tools monthly

Global: Zendy Free Plan

Container technology, (e.g., Docker) is being widely adopted for deployingsoftware infrastructures or applications in the form of container images.Security vulnerabilities in the container images are a primary concern fordeveloping containerized software. Exploitation of the vulnerabilities couldresult in disastrous impact, such as loss of confidentiality, integrity, andavailability of containerized software. Understanding the exploitability andimpact characteristics of vulnerabilities can help in securing theconfiguration of containerized software. However, there is a lack of researchaimed at empirically identifying and understanding the exploitability andimpact of vulnerabilities in container images. We carried out an empiricalstudy to investigate the exploitability and impact of security vulnerabilitiesin base-images and their prevalence in open-source containerized software. Weconsidered base-images since container images are built from base-images thatprovide all the core functionalities to build and operate containerizedsoftware. We discovered and characterized the exploitability and impact ofsecurity vulnerabilities in 261 base-images, which are the origin of 4,681actively maintained official container images in the largest containerregistry, i.e., Docker Hub. To characterize the prevalence of vulnerablebase-images in real-world projects, we analysed 64,579 containerized softwarefrom GitHub. Our analysis of a set of $1,983$ unique base-image securityvulnerabilities revealed 13 novel findings. These findings are expected to helpdevelopers to understand the potential security problems related to base-imagesand encourage them to investigate base-images from security perspective beforedeveloping their applications.

Well Begun is Half Done: An Empirical Study of Exploitability & Impact of Base-Image Vulnerabilities