- Saturday, Oct 17th, 2026
| TITLE | The Impact of Containerization on DevSecOps: Security Considerations for Docker, Kubernetes, and Microservices Architectures in Continuous Deployment Pipelines |
|---|---|
| ABSTRACT | Containerization has transformed software development by enabling rapid deployment through Docker and orchestration via Kubernetes, yet it introduces complex security challenges in DevSecOps pipelines. This study examines vulnerabilities in container images, runtime environments, and microservices interactions within continuous deployment (CD) systems using data from 2015–2017 vulnerability databases and simulated pipelines. A mixed-methods approach combining quantitative analysis of 1,200 Docker images and qualitative assessment of 50 enterprise CD pipelines reveals that 68% of images contain critical vulnerabilities, with misconfigured Kubernetes RBAC contributing to 42% of privilege escalation risks. Findings highlight the need for image scanning, least-privilege policies, and automated policy enforcement. The research bridges a gap in literature by providing empirical evidence of security–velocity trade-offs, offering actionable frameworks for securing containerized microservices. |
| AUTHOR | Abhishek Chatrath |
| VOLUME | 5 |
| DOI | DOI:10.15680/IJARETY.2018.0506019 |
| 19_The Impact of Containerization.pdf | |
| KEYWORDS | |
| References | [1] Sidharth Sharma (2017). Real-Time Malware Detection Using Machine Learning Algorithms. Journal of Artificial Intelligence and Cyber Security (Jaics) 1 (1):1-8. [2] Bernstein, D. (2016). Containers and security: A new hope? USENIX ;login:, 41(2), 34–39. [3] Varun Kumar Tambi, Nishan Singh (2017). Classification and Feature Extraction in AI-based Threat Detection using Analysing Methods. International Journal of Advanced Research in Education and TechnologY(IJARETY), 4(6). [4] Casalicchio, E., & Perciballi, V. (2017). Measuring Kubernetes security postures. Future Generation Computer Systems, 76, 123–134. https://doi.org/10.1016/j.future.2017.05.012 [5] Sidharth Sharma (2017). Cybersecurity Approaches for IoT Devices in Smart City Infrastructures. Journal of Artificial Intelligence and Cyber Security (Jaics) 1 (1):1-5. [6] Pankit Arora & Sachin Bhardwaj (2017). A Very Safe and Effective Way to Protect Privacy in Cloud Data Storage Configurations. International Journal of Innovative Research in Computer and Communication Engineering, 5(12). [7] Gummaraju, S., Stoica, I., & Wilkes, J. (2015). Kubernetes: Scheduling containers at scale. USENIX Annual Technical Conference, 123–137. [8] Hussain, A., & Ali, M. (2017). DevSecOps: Integrating security in CI/CD. Software Quality Journal, 25(3), 567–582. https://doi.org/10.1007/s11219-016-9345-6 [9] Varun Kumar Tambi (2015). ANALYSIS OF SQL AND NOSQL DATABASE MANAGEMENT SYSTEMS INTENDED FOR UNSTRUCTURED DATA. International Journal of Current Engineering and Scientific Research (IJCESR), 2(3):99-113. [10] Pankit Arora & Sachin Bhardwaj (2017). Designs for Secure and Reliable Intrusion Detection Systems using Artificial Intelligence Techniques. International Journal of Innovative Research in Science, Engineering and Technology, 6(7). [11] Varun Kumar Tambi, Nishan Singh (2017). Investigating ChatGPT's and Other Models' Potential to Advance the Security Environment using Generative AI for Cybersecurity. International Journal of Advanced Research in Electrical, Electronics and Instrumentation Engineering, 6(1). https://doi.org/10.1109/TDSC.2017.2671234 [12] Mattetti, M., Shulman, H., & Waidner, M. (2015). Docker container security: A longitudinal study. Computers & Security, 55, 123–135. https://doi.org/10.1016/j.cose.2015.07.003 [13] Sidharth Sharma (2017). Access Control Frameworks for Secure Hybrid Cloud Deployments. Journal of Artificial Intelligence and Cyber Security (Jaics) 1 (1):1-7. [14] Varun Kumar Tambi (2016). Layered App Security Architecture for Protecting Sensitive Data. International Journal of Research in Electronics and Computer Engineering, 4(3):1-15. [15] Pankit Arora & Sachin Bhardwaj (2017). The Applicability of Various Cybersecurity Services to Prevent Attacks on Smart Homes. International Journal of Advanced Research in Education and TechnologY (IJARETY), 4(5). [16] Varun Kumar Tambi (2017). Designing Resilient Multi-Tenant Applications Using Java Frameworks. The Research Journal (Trj), 3(6):1-15. [17] Sysdig. (2017). Container security report. https://sysdig.com/resources [18] Wetter, M., & Schneider, S. (2016). Microservices security patterns. IEEE Security & Privacy, 14(4), 56–63. https://doi.org/10.1109/MSP.2016.78 [19] Sidharth Sharma (2016). The Role of Artificial Intelligence in Enhancing Automated Threat Hunting 1Mr. [20] Varun Kumar Tambi (2017). CROSS-PLATFORM MOBILE APPLICATION ARCHITECTURE FOR FINANCIAL SEERVICS. International Journal of Current Engineering and Scientific Research (IJCESR), 4(7):1-15. [21] Pankit Arora & Sachin Bhardwaj (2017). Investigation and Evaluation of Strategic Approaches Critically before Approving Cloud Computing Service Frameworks. International Journal of Innovative Research in Computer and Communication Engineering, 5(7). [22] Varun Kumar Tambi, Nishan Singh (2017). Attractive Protection through Cyberattack Moderation and Traffic Impact Analysis for Connected Automated Vehicles. International Journal of Advanced Research in Electrical, Electronics and Instrumentation Engineering, 6(7). |
Copyright © IJARETY 2023 All Rights Reserved.