APPARATUS AND METHOD FOR DIAGNOSING DOCKER IMAGE VULNERABILITY

摘要

The present invention relates to an apparatus for diagnosing Docker image vulnerabilities in a Docker system-based client and remote storage, and includes a vulnerability detection module and a vulnerability diagnosis module. When uploading/downloading a Docker image to/from the remote repository and the client, the vulnerability of the package existing in the Docker image is detected and output through the Docker image vulnerability detection module, and this is delivered to the vulnerability diagnosis module. The vulnerability diagnosis module receiving the image vulnerability detection result parses and counts the severity from the image vulnerability detection result, and calculates the image vulnerability score according to the defined score for each severity. If it exceeds the calculated image vulnerability score and image vulnerability threshold score, it establishes a secure Docker system between the client and remote storage by disallowing upload/download of images.