DoS Attack Detection with NIDS in Docker Environment

Abstract

In recent years, Docker containers have become very popular due to their interesting properties that lie in isolation, portability, and scalability. Like any technology, Docker containers can be vulnerable to attacks. For this reason, attack simulation is a good practice for testing the security of a system, including Docker containers. In this paper, we show how this attack simulation can be executed using the hping3 tool to launch the attack and official Docker images to run containers. The results show that the Snort container can quickly identify and report the simulated attack.