Linux

Security analysis of Docker-based containerized environments

Operating System (OS) virtualization, also known as container-based virtualization, has gained momentum over the past few years thanks to its lightweight nature and support for agility. However, its compelling features come at the price of a reduced isolation level compared to the traditional host-based virtualization techniques, exposing workloads to various faults, such as container escape. Those faults might be manifested as host OS bugs, container runtime vulnerabilities, and/or poor container deployment choices and profile configuration. The latter aspect is particularly critical as

Monitoring containerized environments for security state error detection

Operating System (OS) virtualization, also known as container-based virtualization, has gained momentum over the past few years thanks to its lightweight nature and support for agility. However, its compelling features come at the price of a reduced isolation level compared to the traditional host-based virtualization techniques, exposing workloads to various threats, such as container escape. In those threats, compromised or rogue containers might exploit existing vulnerabilities or poor container deployment choices to successfully inject security state errors (e.g., breaking out of the

Ali Charara

Ali Charara obtained both, his MS Degree and PhD Degree from Computer Science at KAUST in 2011 and 2018 respectively. His master thesis supervisor was Alyn Rockwood and his PhD thesis supervisor was David Keyes. Ali's research interests were in High Performance Computing with a focus on parallel computing and algorithms using multicore and manycore Computer Graphics Units. Education Profile MS Degree, Computer Science, KAUST (2011) PhD Degree, Computer Science, KAUST (2018)