FC-353

(Operating System Security)

Project Proposal

Project Title
Enhancing Docker Container Security with AppArmor

Students Names Students ID

Sultan Alkhamshi 4020077
Atif Alanazi 4211596
Ali Alsharif 4020045
Adel Alanazi 4020127

Instructor: Syed Sadiq

Department of Forensic Computing and Cyber Security

College of Computer Science and Information Technology

Semester: Fall 2023
I. Executive Summary
In the contemporary computing environment, containerization, led by technologies
like Docker, has become instrumental in the deployment of applications. While
Docker ensures application portability and consistency, security within containers
is a growing concern. This project aims to address this challenge by enhancing
Docker container security using AppArmor. AppArmor (Application Armor) is a
Linux kernel security module that allows the system administrator to restrict
programs' capabilities with per-program profiles.

II. Objectives
Primary Objective: To enhance the security of Docker containers by implementing
and configuring AppArmor security profiles, thereby reducing the attack surface
and potential security threats.

Department of Forensic Computing and Cyber Security

College of Computer Science and Information Technology

Semester: Fall 2023
Secondary Objectives:

To gain hands-on experience with Docker and understand the intricacies of

container security.
To explore, implement, and evaluate AppArmor security profiles in a Dockerized
environment.

Department of Forensic Computing and Cyber Security

College of Computer Science and Information Technology

Semester: Fall 2023
III. Methodology
Literature Review:

Conduct a comprehensive review of existing literature on Docker security and

AppArmor to gather insights and best practices.
Environment Setup:

Install and configure Docker on a test environment and deploy sample applications
in containers.
AppArmor Implementation:

Install and configure AppArmor, create custom security profiles tailored to the
specific needs of the deployed Docker containers.
Security Evaluation:

Evaluate the effectiveness of AppArmor security profiles in mitigating and

preventing security threats.
Documentation and Reporting:

Document the process, findings, and recommendations, and prepare a

comprehensive report.

Department of Forensic Computing and Cyber Security

College of Computer Science and Information Technology

Semester: Fall 2023
IV. Expected Outcomes
Enhanced security of Docker containers through the implementation of AppArmor
security profiles.
A comprehensive report detailing the methodology, implementation, findings, and
recommendations for Docker container security enhancement.
A practical understanding of Docker and AppArmor, contributing to our skill
development in operating system security.

V. Resources Required
A test environment (virtual or physical machine) with Docker installed.
Access to AppArmor documentation and resources.
Sample applications to be deployed in Docker containers for testing purposes.

Department of Forensic Computing and Cyber Security

College of Computer Science and Information Technology

Semester: Fall 2023
VII. Conclusion
The project will offer invaluable insights into the realm of Docker container
security, providing practical experience in mitigating security threats in
containerized environments. By integrating AppArmor, we aim to showcase a
tangible improvement in Docker container security, contributing to the broader
conversation on enhancing security in the era of containerization.

Sultan Alkhamshi
Atif Alanazi
Adel Alanazi
Ali Alsharif

Department of Forensic Computing and Cyber Security

College of Computer Science and Information Technology

Semester: Fall 2023