Sysdig Usage Report Finds Shifting Container Security Left is Not Enough
Sysdig, Inc., the secure DevOps leader, today announced findings from its Sysdig 2021 Container Security and Usage Report. While usage reveals organizations are shifting left by scanning images during the build phase, DevOps teams are still leaving their environments open to attack. The report also looks at trends, finding a 310 percent growth in container density since 2017.
The fourth annual report reveals how global Sysdig customers of all sizes and across industries are using and securing container environments. This real-world, real-time data provides insight into usage of the nearly one billion containers Sysdig customers run yearly, including security risks, container utilization, and services used. Read the Sysdig 2021 Container Security and Usage blog.
Among its findings, the report states that while 74 percent of customers are scanning before deployment, still more than half (58 percent) of containers are running as root. There are some containers that should run as root—security and system daemons for example—but this is a small portion of total containers. These risky configurations leave easy access to potentially compromise the system and access sensitive data. This finding stresses the need for security throughout the lifecycle of a container image—fixing vulnerabilities is not enough.
Highlights From the Report
Container density grows 170% since 2018
Over the past three years, the median number of containers-per-host more than doubled from 15 in 2018 to 41 today, indicating a growth in efficiency and a shift in cost savings as containers mature. This reveals a continued focus on optimization.
Prometheus continues to grow, 35% YoY
Open source adoption is broader than just Kubernetes as organizations are shifting toward Prometheus as the standard approach to monitoring container environments. The use of Prometheus metrics among Sysdig customers grew 35 percent year-over-year.
Docker down, containerd and CRI-O up 4X
In 2017, Docker represented 99 percent of containers in use at that time. Today, that number has fallen to 50 percent, down from 79 percent in October 2019. While Docker revolutionized containers, organizations are rapidly switching to newer runtimes like containerd and CRI-O.
21% of containers live less than 10 seconds
The ephemeral nature of containers is a unique efficiency advantage, yet it can be a challenge in managing issues around security, health, and performance. The short life of containers reaffirms the need for container-specific tools for security and monitoring. For example, organizations need metric collection with intervals of less than 10 seconds and a detailed record of what occurred when the container was alive.
“With the high-profile breaches we are seeing and the accelerated adoption of containers in production, the container security risk is now on the radar of CISOs. Across millions of containers that we have studied, it’s clear that organizations are shifting security left, but they are neglecting critical best practices,” said Suresh Vasudevan, chief executive officer of Sysdig. “Container security has to span the entire software development lifecycle. Until organizations fix risky configurations, protect their runtime environments, and invest in container forensics, we will see an increase in container security breaches. I expect we will see several high-impact breaches before we release our next report.”
Other Interesting Findings
- Falco, the open source runtime project for cloud-native environments created by Sysdig and donated to the CNCF, has seen a 300 percent increase in Docker Hub downloads over the last year.
- The use of golang increased to 66 percent, a 470 percent jump since last year.
- 63 percent of container images are replaced within two weeks or less, signifying a more frequent code deployment rate.
Learn More About this Report
- Download the full Sysdig 2021 Container Security and Usage Report.
- Download the infographic.
- Read the usage report blog.
- Join the webinar Real-World Insights: Dig into Sysdig’s Container Security and Usage Report on Jan. 21 at 10am PST to walk through the report with the author.
Sysdig is driving the secure DevOps movement, empowering organizations to confidently secure containers, Kubernetes, and cloud services. With the Sysdig Secure DevOps Platform, cloud teams secure the build pipeline, detect and respond to runtime threats, continuously validate compliance, and monitor and troubleshoot cloud infrastructure and services. Sysdig is a SaaS platform, built on an open source stack that includes Falco and sysdig OSS, the open standards for runtime threat detection and response. Hundreds of companies rely on Sysdig for container and Kubernetes security and visibility. Learn more at www.sysdig.com.
Amanda McKinney Smith
About Business Wire
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
Kyoto Semiconductor Signs Supply and Reseller Agreement With CEL13.4.2021 03:00:00 CEST | Press release
Kyoto Semiconductor Co., Ltd., a leading optical device solution manufacturer with world-class technologies and Japanese quality, has announced that it has entered into an agreement with California Eastern Laboratories (CEL) to be a multinational reseller of Kyoto Semiconductor’s optical device solutions. The partnership extends Kyoto Semiconductor’s sales and support network not only to North America but to countries such as India and Israel while it enhances CEL’s product offering with Kyoto Semiconductor’s high-quality photodiodes for optical communication and sensing equipment “Kyoto Semiconductor is pleased to collaborate with CEL, one of the best suppliers of compound and silicon semiconductors, known for its superior customer support and technological expertise. With this partnership, we extend our customer reach worldwide, ranging from North America to India or Israel”, said Tsuneo Takahashi, CEO at Kyoto Semiconductor. “Our products are critical for the 5G and beyond-5G wirele
Bentley Systems Brings Infrastructure Digital Twins to NVIDIA Omniverse12.4.2021 19:00:00 CEST | Press release
GTC21 – Bentley Systems, Incorporated (Nasdaq: BSY), the infrastructure engineering software company, today announced that it is developing applications using the NVIDIA Omniverse platform for photorealistic, real-time visualization and simulation of digital twins of massive-scale industrial and civil infrastructure projects. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20210412005214/en/ Image courtesy of Houston Waterworks Team (a Joint Venture of Jacobs Engineering Group, Inc. and CDM Constructors, Inc.) Bentley Systems has extended the Bentley iTwin platform to integrate with NVIDIA Omniverse to provide a graphics pipeline for AI-enhanced, real-time visualization, and simulation of infrastructure digital twins. This integration allows engineering-grade, millimeter-accurate digital content to be visualized with photorealistic lighting and environmental effects on multiple devices including web browsers, workstations, tabl
QCT Unveils Optimized Accelerated Server to Boost High-Performance Workloads12.4.2021 19:00:00 CEST | Press release
Quanta Cloud Technology (QCT), a global data center solution provider, today announced a new addition to its broad portfolio of NVIDIA-Certified SystemsTM with its QuantaGrid D43N-3U. This server complements QCT’s existing high-performance QuantaGrid and QuantaPlex family of servers, while enabling customers the ability to leverage the latest next-generation NVIDIA Tensor Core GPUs for advanced AI workloads, including those that run on virtualized infrastructure with the NVIDIA AI Enterprise software suite. NVIDIA Tensor Core GPUs on QCT systems are built on the rich ecosystem of AI frameworks from the NVIDIA NGC catalog, CUDA-X libraries, over 2.3 million developers, and over 1,800 GPU-optimized applications to help enterprises solve the most critical challenges in their business. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20210412005024/en/ QuantaGrid_D43N-3U (Photo: Business Wire) “Utilizing NVIDIA accelerated computing
Mavenir Launches 5G Hyperconverged Edge AI Solution for Enterprise & Telco Market Based on NVIDIA Platforms12.4.2021 19:00:00 CEST | Press release
Mavenir, the industry’s only end-to-end cloud-native Network Software Provider and a leader in accelerating software network transformation for communications service providers (CSPs), announced today the launch of an AI-on-5G Hyper Converged Edge solution working in close collaboration with NVIDIA. Mavenir has developed this unique solution, based on NVIDIA’s hardware and software technologies, enabling Enterprises & Telcos to implement AI-on-5G applications for many promising verticals such as Manufacturing, Mining, and Healthcare that cover Industry 4.0 applications, including Industrial Internet of Things (IIoT), Intelligent Video Analytics (IVA) and Extended Reality (XR) and Gaming use cases. The use cases can be around remote and immersive collaboration, precision robotics control, people safety, intrusion detection, smart connected factories, real-time manufacturing component defect detection and proactive maintenance using near real-time analytics of sensor data. 5G enables an
Merck Advances ATR Inhibitor Berzosertib in Small Cell Lung Cancer With New Published Data and Initiation of Phase II Trial With Registrational Intent12.4.2021 17:04:00 CEST | Press release
Merck, a leading science and technology company, today announced key clinical advancements for berzosertib (M6620), an investigational, potent and selective ataxia telangiectasia and Rad3-related (ATR) inhibitor. Berzosertib is the leading asset in the company’s DNA damage response (DDR) inhibitor program and one of the most advanced ATR inhibitors in oncology clinical development industry-wide. Results from a Phase II proof-of-concept study conducted by the US National Cancer Institute (NCI) (NCT02487095)* and published in Cancer Cell showed that berzosertib in combination with the chemotherapy topotecan resulted in an objective response rate (ORR) of 36% among patients with relapsed small cell lung cancer (SCLC), including durable responses among a majority of responding patients with platinum-resistant disease.1 The NCI is also conducting a separate Phase II trial of berzosertib in combination with topotecan versus topotecan monotherapy in SCLC that has relapsed (NCT03896503)* which
Loomis Sayles Welcomes Susan Sieker as Chief Financial Officer12.4.2021 16:15:00 CEST | Press release
Loomis, Sayles & Company, an affiliate of Natixis Investment Managers, announced today that Susan Sieker has joined Loomis Sayles as executive vice president and chief financial officer (CFO). She also joins the Loomis Sayles Board of Directors. Susan reports to Kevin Charleston, chairman and chief executive officer of Loomis Sayles, and will oversee the finance organization. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20210412005613/en/ Susan joins Loomis Sayles from Cambridge Associates, where she was the chief financial officer and oversaw financial planning and analysis, treasury, accounting operations, financial reporting, payroll and taxes. Prior to joining Cambridge Associates in 2012, Susan served in a variety of finance and risk leadership roles at Brinker International, including vice president and treasurer, vice president of global infrastructure, vice president of benefits, vice president of business assurance
Alira Health Strengthens Its Growth Strategy With a $35M Funding, Led by Creadev12.4.2021 15:00:00 CEST | Press release
Alira Health (www.alirahealth.com), a leading international advisory firm dedicated to advancing healthcare and life sciences, announced it has closed a $35M equity financing led by Creadev, an evergreen investment company backed by the Mulliez family. This new partnership will help accelerate the firm’s growth strategy, focused on merging pharmaceutical, medical and digital technologies development with medical care through a patient-centric approach. “I would like to thank our team of investors for joining our mission to enable healthcare transformation. Their investment positions us to change the way life sciences advisory services are delivered,” said Gabriele Brambilla, Chief Executive Officer and Co-Founder of Alira Health. “We are building a powerful continuum of services that spans the product and solutions development life cycle, supported by the recent additions of our patient engagement, real-world evidence and advanced analytics practices. This financing allows us to advanc
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.Visit our pressroom