Kernel-Based Container File Access Control Architecture to Protect Important Application Information

Container platforms ease the deployment of applications and respond to failures. The advantages container have promoted their use in information services. However, is accompanied by associated security risks. For instance, malware uploaded users can leak important information, malicious operators cause unauthorized modifications files create service errors. These threats degrade quality services reduce reliability. To overcome these issues, should be protected file-access control functions. legacy techniques, such as umask SecureOS, do not support platforms. address this problem, we propose a novel kernel-based architecture study access files. proposed comprises three components. functionality performance were assessed implementing it on Linux platform. Our analysis confirmed that adequately controls users’ performs par with techniques.