Lic-Sec: An enhanced AppArmor Docker security profile generator

Along with the rapid development of cloud computing technology, containerization technology has drawn much attention from both industry and academia. In this paper, we perform a comparative measurement analysis Docker-sec, which is Linux Security Module proposed in 2018, new AppArmor profile generator called Lic-Sec, combines Docker-sec modified version LiCShield, also 2015. LiCShield can be used to enhance Docker container security based on mandatory access control allows protection without manual configurations. Lic-Sec brings together their strengths provides stronger protection. We evaluate effectiveness performance by testing them real-world attacks. generate an exploit database 40 exploits effective containers selected latest 400 Exploit-DB. launch these spawned separately. Our evaluations show that for demanding images, gives all privilege escalation attacks failed give