Nice benchmarks and whitepaper about making Docker containers more secure!

Read the complete article (with links to the whitepapers) on Docker blog : Understanding Docker Security and Best Practices

On the same topic, there's nice news from SDTimes about the new Twistlock Docker work. Quote below. Read the full article here: Twistlock takes on enterprise Docker container security

Twistlock approaches container security on several fronts:

• Host and container image layer static hardening: The solution implements best practices such as disabling unused OS capabilities and validating containers being pushed into production, checking that static hardening measures have been applied.
• Dynamic inspection and enforcement: Twistlock authenticates authorization and auditing of container actions during runtime, and it offers Audit Trail and Container Insights services for real-time vulnerability detection on running container instances.

• Central security management: The suite includes a virtual grid security configuration across the “container farm,” with alerts to the main management console based on specified security baselines.