Sysdig Usage Report Finds Shifting Container Security Left is Not Enough
Sysdig, Inc., the secure DevOps leader, today announced findings from its Sysdig 2021 Container Security and Usage Report. While usage reveals organizations are shifting left by scanning images during the build phase, DevOps teams are still leaving their environments open to attack. The report also looks at trends, finding a 310 percent growth in container density since 2017.
The fourth annual report reveals how global Sysdig customers of all sizes and across industries are using and securing container environments. This real-world, real-time data provides insight into usage of the nearly one billion containers Sysdig customers run yearly, including security risks, container utilization, and services used. Read the Sysdig 2021 Container Security and Usage blog.
Among its findings, the report states that while 74 percent of customers are scanning before deployment, still more than half (58 percent) of containers are running as root. There are some containers that should run as root—security and system daemons for example—but this is a small portion of total containers. These risky configurations leave easy access to potentially compromise the system and access sensitive data. This finding stresses the need for security throughout the lifecycle of a container image—fixing vulnerabilities is not enough.
Highlights From the Report
Container density grows 170% since 2018
Over the past three years, the median number of containers-per-host more than doubled from 15 in 2018 to 41 today, indicating a growth in efficiency and a shift in cost savings as containers mature. This reveals a continued focus on optimization.
Prometheus continues to grow, 35% YoY
Open source adoption is broader than just Kubernetes as organizations are shifting toward Prometheus as the standard approach to monitoring container environments. The use of Prometheus metrics among Sysdig customers grew 35 percent year-over-year.
Docker down, containerd and CRI-O up 4X
In 2017, Docker represented 99 percent of containers in use at that time. Today, that number has fallen to 50 percent, down from 79 percent in October 2019. While Docker revolutionized containers, organizations are rapidly switching to newer runtimes like containerd and CRI-O.
21% of containers live less than 10 seconds
The ephemeral nature of containers is a unique efficiency advantage, yet it can be a challenge in managing issues around security, health, and performance. The short life of containers reaffirms the need for container-specific tools for security and monitoring. For example, organizations need metric collection with intervals of less than 10 seconds and a detailed record of what occurred when the container was alive.
“With the high-profile breaches we are seeing and the accelerated adoption of containers in production, the container security risk is now on the radar of CISOs. Across millions of containers that we have studied, it’s clear that organizations are shifting security left, but they are neglecting critical best practices,” said Suresh Vasudevan, chief executive officer of Sysdig. “Container security has to span the entire software development lifecycle. Until organizations fix risky configurations, protect their runtime environments, and invest in container forensics, we will see an increase in container security breaches. I expect we will see several high-impact breaches before we release our next report.”
Other Interesting Findings
- Falco, the open source runtime project for cloud-native environments created by Sysdig and donated to the CNCF, has seen a 300 percent increase in Docker Hub downloads over the last year.
- The use of golang increased to 66 percent, a 470 percent jump since last year.
- 63 percent of container images are replaced within two weeks or less, signifying a more frequent code deployment rate.
Learn More About this Report
- Download the full Sysdig 2021 Container Security and Usage Report.
- Download the infographic.
- Read the usage report blog.
- Join the webinar Real-World Insights: Dig into Sysdig’s Container Security and Usage Report on Jan. 21 at 10am PST to walk through the report with the author.
Sysdig is driving the secure DevOps movement, empowering organizations to confidently secure containers, Kubernetes, and cloud services. With the Sysdig Secure DevOps Platform, cloud teams secure the build pipeline, detect and respond to runtime threats, continuously validate compliance, and monitor and troubleshoot cloud infrastructure and services. Sysdig is a SaaS platform, built on an open source stack that includes Falco and sysdig OSS, the open standards for runtime threat detection and response. Hundreds of companies rely on Sysdig for container and Kubernetes security and visibility. Learn more at www.sysdig.com.
Amanda McKinney Smith
About Business Wire
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
GPD Companies, Inc. to Acquire Distrupol22.1.2021 14:33:00 CET | Press release
GPD Companies, Inc., an affiliate of One Rock Capital Partners, LLC (“One Rock”), today announced that it has entered into a definitive agreement to acquire Distrupol, a subsidiary of Univar Solutions Inc. (NYSE: UNVR) and a leading European distributor of thermoplastics to the polymer processing industry. Terms of the transaction, which is expected to close in the first half of 2021, were not disclosed. Headquartered in Surrey, England, with broad geographic reach across Europe, Distrupol has provided value-added sales and application development of thermoplastic resins for over 50 years. Through its decades-long relationships with world class supply partners, the company offers a robust array of superior performance products and solutions that meet the needs of diverse end users from leading and emerging industries, such as the consumer, medical, automotive, and electrical sectors, among others. Distrupol caters to over 1,300 customers across 13 countries with a portfolio of over 4,0
Schlumberger Announces Fourth-Quarter and Full-Year 2020 Results22.1.2021 12:50:00 CET | Press release
Schlumberger Limited (NYSE: SLB) today reported results for the fourth-quarter and full-year 2020. Fourth-Quarter Results(Stated in millions, except per share amounts)Three Months EndedChangeDec. 31, 2020Sept. 30, 2020Dec. 31, 2019SequentialYear-on-yearRevenue $5,532 $5,258 $8,228 5% -33%Income (loss) before taxes - GAAP basis $471 $(54) $452 n/m 4%Net income (loss) - GAAP basis $374 $(82) $333 n/m 12%Diluted EPS (loss per share) - GAAP basis $0.27 $(0.06) $0.24 n/m 12% Adjusted EBITDA* $1,112 $1,018 $1,648 9% -33%Adjusted EBITDA margin* 20.1% 19.4% 20.0% 73 bps 6 bpsPretax segment operating income* $654 $575 $1,006 14% -35%Pretax segment operating margin* 11.8% 10.9% 12.2% 90 bps -40 bpsNet income, excluding charges & credits* $309 $228 $545 35% -43%Diluted EPS, excluding charges & credits* $0.22 $0.16 $0.39 37% -44% Revenue by Geography International $4,343 $4,210 $5,834 3% -26%North America 1,167 1,034 2,339 13% -50%Other 22 14 55 n/m n/m $5,532 $5,258 $8,228 5% -33% *These are non-
JEOL: Release of a New Cold Field Emission Cryo-Electron Microscope CRYO ARM™ 300 II (JEM-3300)22.1.2021 07:00:00 CET | Press release
JEOL Ltd. (TOKYO:6951) (President & COO Izumi Oi) announces the release of a new cold field emission cryo-electron microscope (cryo-EM), the CRYO ARM™ 300 II (JEM-3300), to be released in January 2021. This new cryo-EM has been developed based on the concept of "Quick and easy to operate and get high-contrast and high-resolution images". This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20210121005316/en/ Cold Field Emission Cryo-Electron Microscope CRYO ARM(TM) 300 II (JEM-3300) (Photo: Business Wire) Development Background Recent dramatic improvement of resolution in single particle analysis (SPA) using cryo-EM has led to SPA as an essential method for structural analysis of proteins. To address this market, JEOL released the CRYO ARM™ 300 in 2017. Equipped with a cold field emission gun (Cold FEG) for enhanced resolution and a cryo-stage for loading multiple samples, the CRYO ARM™ 300 has continued to achieve best-in-class res
ViiV Healthcare announces FDA approval of Cabenuva (cabotegravir, rilpivirine), the first and only complete long-acting regimen for HIV treatment21.1.2021 23:12:00 CET | Press release
ViiV Healthcare, the global specialist HIV company majority owned by GlaxoSmithKline plc (“GSK”), with Pfizer Inc. and Shionogi Limited as shareholders, today announced that the US Food and Drug Administration (FDA) approved Cabenuva, the first and only complete long-acting regimen for the treatment of HIV-1 infection in adults. Cabenuva is provided as a co-pack with two injectable medicines — ViiV Healthcare’s cabotegravir and Janssen’s rilpivirine— dosed once monthly, as an option to replace the current antiretroviral (ARV) regimen in those who are virologically suppressed (HIV-1 RNA less than 50 copies per milliliter [mL]) on a stable regimen, with no history of treatment failure, and with no known or suspected resistance to either cabotegravir or rilpivirine. Prior to initiating treatment of Cabenuva, oral dosing of cabotegravir and rilpivirine should be administered for approximately one month to assess the tolerability of each therapy.1 Lynn Baxter, Head of North America, ViiV He
Incyte Announces Acceptance and Priority Review of BLA for Retifanlimab as a Potential Treatment for Patients with Squamous Cell Carcinoma of the Anal Canal (SCAC)21.1.2021 22:30:00 CET | Press release
Incyte (Nasdaq:INCY) today announced that the U.S. Food and Drug Administration (FDA) has accepted for Priority Review its Biologics License Application (BLA) for retifanlimab, an intravenous PD-1 inhibitor, as a potential treatment for adult patients with locally advanced or metastatic squamous cell carcinoma of the anal canal (SCAC) who have progressed on, or who are intolerant of, platinum-based chemotherapy. The BLA submission is based on data from the Phase 2 POD1UM-202 trial evaluating retifanlimab in previously treated patients with locally advanced or metastatic SCAC who have progressed on, or are intolerant of, standard platinum-based chemotherapy. The trial enrolled 94 patients, including several with well-controlled human immunodeficiency virus (HIV) infection. The study, which was recently presented at the European Society for Medical Oncology (ESMO) Virtual Congress 2020, resulted in an objective response rate (ORR) of 14% for retifanlimab monotherapy as determined by inde
Wistron and Kalray Announce FURIO1200™ Storage Appliance21.1.2021 17:45:00 CET | Press release
Wistron, a leader in ICT (Information and communications technology) products, and Kalray (Paris:ALKAL) (Euronext Growth Paris: ALKAL), a leading provider in new generation of processors specialized in Intelligent Data Processing from Cloud to Edge, announce the availability of FURIO1200™, a 24-Flash-Drive NVMe-oF based storage node appliance, integrating Kalray’s NVMe-oF K200™ smart storage adapter, powered by its MPPA® Coolidge™ intelligent processor, and Wistron LYMMA chassis. FURIO1200™ is a new type of hyper-fast disaggregated storage solution delivering ultra-high throughput and reliability. It is the ideal solution for Cloud Service Providers and Enterprises running applications with intensive AI and Data Analytics workloads as well as to optimize their next generation storage. Data Centers are undergoing a very important revolution due to the explosion of usages, the surge of data to be processed and the exponential growth of the number of machines to be managed to support this
NumAlim Selects Dawex and Orange Business Services for its Data and Services Exchange Platform21.1.2021 17:40:00 CET | Press release
NumAlim announced an agreement with Dawex, the leader in Data Exchange technology, and Orange Business Services, a network-native digital services company, to deploy its agri-food digital exchange platform. By relying on these two leading players, NumAlim chose secure technological solutions guaranteeing the sovereignty of French food data. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20210121005722/en/ (Photo: Dawex) As early as Q1 2021, the NumAlim data and services exchange "Hub" will offer 18,000 companies in the food industry the opportunity to valorize, acquire and enrich all types of data: production, consumption, traceability, consumer opinions and research, as well as a wide range of services based on data (trend analysis, reformulation, regulatory watch…). "NumAlim is the answer to the needs for transparency, value creation and trust expressed by the food industry, consumers, and public authorities.” says Jérôme Fr
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.Visit our pressroom