The Securing and Hardening of Software Containers

Anchore is a software scanning engine that thoroughly analyzes software container images to find issues with OS packages, libraries, licenses, binaries, credentials, secrets, and metadata. Specifically designed to understand the unique characteristics of software containers, it allows organizations to define and enforce policy and harden software containers, reducing threats from both internal and outside sources. Our phase II proposal will implement some key feature enhancement to the software. These will further secure and harden the mechanisms by which software containers are made available for reuse across Air Force programs in addition to the security and compliance of the actual contents of the software containers. Anchore's existing codebase is widely deployed and used by open-source users and commercial customers; it gives us a strong foundation on which to base our Phase II efforts. With a highly experienced engineering and product team, we are confident in our ability to assist the Air Force in securing and hardening of containers in automated or portable ways.