Sign-In
Cart
Container Security Engineering: Rootless Containers, Supply-Chain Integrity, and Runtime Defense for Modern DevSecOps
Paperback
Technology & EngineeringComputer SecuritySystem Administration
Please select the version of book you would like to purchase.
ISBN13: 9798279346400
Publisher: Independently Published
Published: Dec 21 2025
Pages: 276
Weight: 1.42
Height: 0.58 Width: 8.50 Depth: 11.00
Language: English
Publisher: Independently Published
Published: Dec 21 2025
Pages: 276
Weight: 1.42
Height: 0.58 Width: 8.50 Depth: 11.00
Language: English
Container Security Engineering Rootless Containers, Supply-Chain Integrity, and Runtime Defense for Modern DevSecOps Containers power the world's most critical infrastructure-but most container platforms are still deployed with implicit trust, excessive privileges, and fragile supply chains. As attacks shift from applications to build pipelines, registries, and runtimes, traditional container security basics are no longer enough.
Container Security Engineering is the definitive, modern guide for building hardened, verifiable, and continuously defended container platforms from the kernel up. Written for today's DevSecOps reality and tomorrow's threat landscape, this book moves beyond theory to deliver practical, production-ready security engineering for Linux containers.
This is a systems-level security playbook for engineers responsible for protecting real workloads in hostile environments. What You'll Learn
This book walks you through the entire container security lifecycle, combining deep technical foundations with hands-on implementation:
✔ Threat modeling containers with MITRE ATT&CK, shared-kernel risks, and real escape vectors
✔ Rootless container architectures using Podman and Docker with secure UID/GID mappings and user namespaces
✔ Host and kernel hardening with seccomp, SELinux, AppArmor, sysctl controls, and No New Privileges
✔ Supply-chain security with reproducible builds, vulnerability scanning, and SBOM generation using Trivy and Syft
✔ Image signing, provenance, and trust enforcement with cosign, registries, and policy gates
✔ CI/CD security automation using GitHub Actions, Open Policy Agent (OPA), and release controls
✔ Runtime defense and isolation across networking, filesystem access, and process boundaries
✔ eBPF-driven detection and observability with Falco and Tetragon for real-time threat visibility
✔ Zero-Trust container platforms, workload identity, micro-segmentation, and continuous validation
✔ A capstone project that builds a fully secured, monitored, and policy-enforced container platform from scratch Who This Book Is For
This book is designed for professionals who need security guarantees, not assumptions:
- DevSecOps engineers securing CI/CD pipelines and production clusters
- Platform engineers building rootless, least-privilege container runtimes
- SREs and system administrators hardening Linux hosts and container platforms
- Security engineers and analysts seeking runtime visibility and detection
- Architects designing compliant, auditable, and zero-trust container environments
A working knowledge of Linux and containers is helpful-but this book teaches the security engineering mindset . Modern, Practical, and Enterprise-Ready
All configurations, policies, and workflows have been validated on real Linux environments, including Fedora, Ubuntu, RHEL, and Rocky Linux. The book emphasizes open-source, vendor-neutral tooling and aligns with industry standards such as:
- CIS Benchmarks
- NIST SP 800-190
- MITRE ATT&CK for Containers
Appendices provide ready-to-use reference material, including rootless configuration guides, seccomp and SELinux cheat sheets, CI/CD templates, runtime detection rules, attack simulations, and a detailed glossary of container security terms. Why This Book Matters
Container security has entered a new era-defined by rootless execution, verified supply chains, and continuous runtime defense. Organizations that fail to adapt will continue to ship insecure platforms by default.
Container Security Engineering gives you the knowledge, patterns, and confidence to build container platforms that are provably secure, operationally sound, and resilient by design.
This is a systems-level security playbook for engineers responsible for protecting real workloads in hostile environments. What You'll Learn
This book walks you through the entire container security lifecycle, combining deep technical foundations with hands-on implementation:
✔ Threat modeling containers with MITRE ATT&CK, shared-kernel risks, and real escape vectors
✔ Rootless container architectures using Podman and Docker with secure UID/GID mappings and user namespaces
✔ Host and kernel hardening with seccomp, SELinux, AppArmor, sysctl controls, and No New Privileges
✔ Supply-chain security with reproducible builds, vulnerability scanning, and SBOM generation using Trivy and Syft
✔ Image signing, provenance, and trust enforcement with cosign, registries, and policy gates
✔ CI/CD security automation using GitHub Actions, Open Policy Agent (OPA), and release controls
✔ Runtime defense and isolation across networking, filesystem access, and process boundaries
✔ eBPF-driven detection and observability with Falco and Tetragon for real-time threat visibility
✔ Zero-Trust container platforms, workload identity, micro-segmentation, and continuous validation
✔ A capstone project that builds a fully secured, monitored, and policy-enforced container platform from scratch Who This Book Is For
This book is designed for professionals who need security guarantees, not assumptions:
- DevSecOps engineers securing CI/CD pipelines and production clusters
- Platform engineers building rootless, least-privilege container runtimes
- SREs and system administrators hardening Linux hosts and container platforms
- Security engineers and analysts seeking runtime visibility and detection
- Architects designing compliant, auditable, and zero-trust container environments
A working knowledge of Linux and containers is helpful-but this book teaches the security engineering mindset . Modern, Practical, and Enterprise-Ready
All configurations, policies, and workflows have been validated on real Linux environments, including Fedora, Ubuntu, RHEL, and Rocky Linux. The book emphasizes open-source, vendor-neutral tooling and aligns with industry standards such as:
- CIS Benchmarks
- NIST SP 800-190
- MITRE ATT&CK for Containers
Appendices provide ready-to-use reference material, including rootless configuration guides, seccomp and SELinux cheat sheets, CI/CD templates, runtime detection rules, attack simulations, and a detailed glossary of container security terms. Why This Book Matters
Container security has entered a new era-defined by rootless execution, verified supply chains, and continuous runtime defense. Organizations that fail to adapt will continue to ship insecure platforms by default.
Container Security Engineering gives you the knowledge, patterns, and confidence to build container platforms that are provably secure, operationally sound, and resilient by design.
Also from
Illman, Zak
From Beginner to Pro with Godot 4: Learn Game Design, GDScript, and Real-World 2D & 3D Game Development
Illman, Zak
Paperback
$30.00
eBPF in Practice: From Linux Kernel Internals to Cloud-Native Observability, Networking, and Security
Illman, Zak
Paperback
$30.00
Nmap for Beginners: The Practical Guide to Network Scanning, Ethical Hacking, and Modern Penetration Testing
Illman, Zak
Paperback
$30.00
Also in
Computer Security
Dawn of the Code War: America's Battle Against Russia, China, and the Rising Global Cyber Threat
Graff, Garrett M.
Carlin, John P.
Paperback
From $10.99
CompTIA Network+ Certification All-in-One Exam Guide, Ninth Edition (Exam N10-009)
Weissman, Jonathan S.
Paperback
$57.00
5 Habits of the Tech-Ready Family: Raising Wise Kids in a Wild Digital World
McKenna, Chris
Paperback
$18.99
Spies, Lies, and Cybercrime: Cybersecurity Tactics to Outsmart Hackers and Disarm Scammers
O'Neill, Eric
Hardcover
$28.50
Comptia A+ Complete Study Guide, 2-Volume Set: Volume 1 Core 1 Exam 220-1201 and Volume 2 Core 2 Exam 220-1202
Docter, Quentin
Buhagiar, Jon
Paperback
$61.75
Isc2 Cissp Certified Information Systems Security Professional Official Study Guide & Practice Tests Bundle
Stewart, James Michael
Gibson, Darril
Chapple, Mike
Paperback
$120.00
Linux Basics for Hackers, 2nd Edition: Getting Started with Networking, Scripting, and Security in Kali
Occupytheweb
Paperback
$37.99
Comptia Security+ Study Guide with Over 500 Practice Test Questions: Exam Sy0-701
Chapple, Mike
Seidl, David
Paperback
$52.25
Isc2 Cissp Certified Information Systems Security Professional Official Study Guide
Gibson, Darril
Chapple, Mike
Stewart, James Michael
Paperback
$70.30
Password Logbook (Hip Floral): Keep Track of Usernames, Passwords, Web Addresses in One Easy and Organized Location
Editors of Rock Point
Hardcover
$10.44
Don't Trust Your Gut: Using Data to Get What You Really Want in Life
Stephens-Davidowitz, Seth
Paperback
$18.99
Blown to Bits: Your Life, Liberty, and Happiness After the Digital Explosion
Ledeen, Ken
Lewis, Harry
Abelson, Hal
Paperback
$23.74
Digital Ethics in the Age of AI: Navigating the ethical frontier today and beyond
Mehan, Julie
Paperback
$47.99
From Heatmaps to Histograms: A Practical Guide to Cyber Risk Quantification
Martin-Vegue, Tony
Paperback
$37.99
Hacking & Tor: The Complete Beginners Guide To Hacking, Tor, & Accessing The Deep Web & Dark Web
Jones, Jack
Paperback
$35.99
Sandworm: A New Era of Cyberwar and the Hunt for the Kremlin's Most Dangerous Hackers
Greenberg, Andy
Paperback
$19.00
Cult of the Dead Cow: How the Original Hacking Supergroup Might Just Save the World
Menn, Joseph
Paperback
$18.04
The Cybernetic Society: How Humans and Machines Will Shape the Future Together
Husain, Amir
Hardcover
$28.50
Comptia A+ Complete Certification Kit: Core 1 Exam 220-1201 and Core 2 Exam 220-1202
Docter, Quentin
Buhagiar, Jon
McMillan, Troy
Paperback
$114.00
Comptia A+ Complete Review Guide: Core 1 Exam 220-1201 and Core 2 Exam 220-1202
McMillan, Troy
Paperback
$33.25
Container Security: Fundamental Technology Concepts That Protect Cloud Native Applications
Rice, Liz
Paperback
$53.19
Cyber War: The Next Threat to National Security and What to Do about It
Clarke, Richard A.
Knake, Robert
Paperback
$19.99
Chasing Shadows: Cyber Espionage, Subversion, and the Global Fight for Democracy
Deibert, Ronald J.
Paperback
$15.20
Countdown to Zero Day: Stuxnet and the Launch of the World's First Digital Weapon
Zetter, Kim
Paperback
$19.00
Humorous Cryptograms: 300 Large Print Puzzles To Keep You Entertained (Large Print Edition)
Nest, Game
Paperback
$12.25
The Future of Hacking: The Rise of Cybercrime and the Fight to Keep Us Safe
Scherling, Laura S.
Hardcover
$49.30
Home Assistant for Beginners: Build a private smart home without relying on the cloud
Haagenrud, Thom
Paperback
$20.39
Data Engineering for Cybersecurity: Build Secure Data Pipelines with Free and Open-Source Tools
Bonifield, James
Paperback
$47.49
Mobile Forensic Investigations: A Guide to Evidence Collection, Analysis, and Presentation, Second Edition
Reiber, Lee
Paperback
$77.00
Serious Cryptography, 2nd Edition: A Practical Introduction to Modern Encryption
Aumasson, Jean-Philippe
Paperback
$56.99
The Secure Board: How To Be Confident That Your Organisation Is Cyber Safe
Leibel, Anna
Pales, Claire
Paperback
$21.24
The Book of Pf, 4th Edition: A No-Nonsense Guide to the OpenBSD Firewall
Hansteen, Peter N. M.
Paperback
$56.99
Hackers Underground Knowledge: Quick and easy way to learn secret hacker techniques
Kohler, Martin
Paperback
$8.82
Hacking and Security: The Comprehensive Guide to Penetration Testing and Cybersecurity
Kloep, Peter
Kofler, Michael
Gebeshuber, Klaus
Paperback
$56.95
Cilium: Up and Running: Cloud Native Networking, Security, and Observability
Laverack, James
Vibert, Nico
Nikolic, Filip
Paperback
$75.99
Comptia A+ Complete Practice Tests: Core 1 Exam 220-1201 and Core 2 Exam 220-1202
O'Shea, Audrey
Paperback
$42.75
Privacy and Security for Large Language Models: Hands-On Privacy-Preserving Techniques for Personalized AI
Lin, Baihan
Paperback
$75.99
Raising Humans in a Digital World: Helping Kids Build a Healthy Relationship with Technology
Graber, Diana
Paperback
$19.99
Shit I Can't Remember: Keep track of usernames, passwords, web addresses in one easy & organized location
Books, Family's
Paperback
$7.19
The Art of Deception: Controlling the Human Element of Security
Simon, William L.
Mitnick, Kevin D.
Paperback
$20.90
A Hacker's Mind: How the Powerful Bend Society's Rules, and How to Bend Them Back
Schneier, Bruce
Paperback
$18.99
Dissecting the Dark Web: Reverse Engineering the Tools of the Underground Economy
Kaye, Lindsay
Paperback
$56.99
Meshtastic: A Comprehensive Guide to Off-Grid Mesh Communication: Second Edition
Rodgers, David A., Jr.
Paperback
$17.72
Learning Serverless Security: Hacking and Securing Serverless Cloud Applications on Aws, Azure, and Google Cloud
Lat, Joshua Arvin
Paperback
$66.49
Chasing Shadows: Cyber Espionage, Subversion, and the Global Fight for Democracy
Deibert, Ronald J.
Hardcover
$28.49
The Web Application Hacker's Handbook: Finding and Exploiting Security Flaws
Pinto, Marcus
Stuttard, Dafydd
Paperback
$49.40
Crypto Conned My 200K Nightmare: And 10 Key Steps To Safeguard Your Future
Holliday, Ed Doc
Paperback
$14.24
Cisa Certified Information Systems Auditor Study Guide and Practice Tests Bundle: Covers 2024 Exam Objectives
Chapple, Mike
Gregory, Peter H.
Paperback
$12.30
AWS Certified Security Study Guide: Specialty (Scs-C02) Exam
Goldfarb, Dario Lucas
Mu¿oz, Mauricio
Moraes, Alexandre M. S. P.
Paperback
$9.49
Cybersecurity - Attack and Defense Strategies - Third Edition: Improve your security posture to mitigate risks and prevent attackers from infiltrating
Diogenes, Yuri
Ozkaya, Erdal
Paperback
$54.99
Learn Computer Forensics - Second Edition: Your one-stop guide to searching, analyzing, acquiring, and securing digital evidence
Oettinger, William
Paperback
$62.49
Industrial Cybersecurity - Second Edition: Efficiently monitor the cybersecurity posture of your ICS environment
Ackerman, Pascal
Paperback
$68.74
Scams, Hacking, and Cybersecurity: The Ultimate Guide to Online Safety and Privacy
Brooks-Kempler, May
Paperback
$20.89
Web Application Security: Exploitation and Countermeasures for Modern Web Applications
Hoffman, Andrew
Paperback
$62.69
Zero Trust Networks: Building Secure Systems in Untrusted Networks
Rais, Razi
Morillo, Christina
Gilman, Evan
Paperback
$62.69
Evasion Engineering: Building Custom Red Team Tools for Modern Defenses
Chow, Dennis
Lasalvia, Michael
Paperback
$56.99
Nmap Network Scanning: The Official Nmap Project Guide to Network Discovery and Security Scanning
Fyodor
Lyon, Gordon
Paperback
$47.45
Identity Attack Vectors: Strategically Designing and Implementing Identity Security, Second Edition
Haber, Morey J.
Rolls, Darran
Paperback
$56.99
Red Team Engineering: The Art of Building Offensive Tools and Infrastructure
Erdmann, Casey
Paperback
$75.99
AI Governance Playbook: How to Secure, Control, and Optimize Artificial Intelligence Initiatives
Smallwood, Robert F.
Surdak, Chris
Paperback
$50.68
Comptia A+ Certmike: Prepare. Practice. Pass the Test! Get Certified!: Core 1 Exam 220-1201
Chapple, Mike
Paperback
$47.50
Linux Basics for Hackers: Getting Started with Networking, Scripting, and Security in Kali
Occupytheweb
Paperback
$37.99
Building a Career in Cybersecurity: The Strategy and Skills You Need to Succeed
Diogenes, Yuri
Paperback
$33.24
Isc2 Ccsp Certified Cloud Security Professional Official Study Guide & Practice Tests Bundle
Chapple, Mike
Seidl, David
Paperback
$90.25
Locksport: A Hackers Guide to Lockpicking, Impressioning, and Safe Cracking
Burrough, Matt
Belgers, Walter
Weyers, Jos
Paperback
$52.24
Cisco ASA for Accidental Administrators: An Illustrated Step-by-Step ASA Learning and Configuration Guide
Crawley, Don R.
Paperback
$42.75
Cybersecurity for Everyone: Securing your home or small business network
Sadler, Terence L.
Paperback
$20.99
Cism Certified Information Security Manager All-In-One Exam Guide [With CD (Audio)]
Gregory, Peter H.
Paperback
$57.00
Wireless Exploits And Countermeasures: Kali Linux Nethunter, Aircrack-NG, Kismet, And Wireshark
Botwright, Rob
Paperback
$49.94
Hands-On Network Forensics: Investigate network attacks and find evidence using common network forensic tools
Jaswal, Nipun
Paperback
$57.49
The Mathematics of Secrets: Cryptography from Caesar Ciphers to Digital Encryption
Holden, Joshua
Paperback
$18.00
Operation Carder Kaos: How One Agent Penetrated the Underground Economy
Latulip, Richard K.
Paperback
$48.99
Cybersecurity Myths and Misconceptions: Avoiding the Hazards and Pitfalls That Derail Us
Dykstra, Josiah
Spafford, Eugene
Metcalf, Leigh
Paperback
$56.24
Certificate of Cloud Security Knowledge (Ccsk V5) Study Guide: In-Depth Guidance and Practice
Thompson, Graham
Paperback
$56.99
Mastering Linux Security and Hardening - Third Edition: A practical guide to protecting your Linux system from cyber attacks
Tevault, Donald a.
Paperback
$62.49
Digital Life Without the Stress: The Complete Beginner's Guide to Computers, Smartphones, and Internet for Seniors who want Independence
Valentini, Giovannijohnny
Paperback
$19.19
Software Security for Developers: With Examples in Java and Spring
Spilca, Laurentiu
Saikali, Adib
Paperback
$74.99
Ethical Hacking for Beginners: A Step by Step Guide for you to Learn the Fundamentals of CyberSecurity and Hacking
Nastase, Ramon Adrian
Paperback
$12.34
Comptia A+ Certmike: Prepare. Practice. Pass the Test! Get Certified!: Core 2 Exam 220-1202
Chapple, Mike
Paperback
$37.95
Engineering Trustworthy Systems: Get Cybersecurity Design Right the First Time
Saydjari, O. Sami
Paperback
$73.15
Het Kleine Bitcoinboekje: Waarom Bitcoin belangrijk is voor je vrijheid, financiën en toekomst
Vranova, Alena
Ajiboye, Timi
Buenaventura, Luis
Paperback
$13.97
Network Programmability and Automation: Skills for the Next-Generation Network Engineer
Adell, Christian
Lowe, Scott S.
Oswalt, Matt
Paperback
$56.99
Learning Ransomware Response & Recovery: Stopping Ransomware One Restore at a Time
Preston, W. Curtis
Saylor, Michael
Paperback
$56.99
Malware Development for Ethical Hackers: Learn how to develop various types of malware to strengthen cybersecurity
Zhussupov, Zhassulan
Paperback
$68.74