4.8 KiB
Security Audit Checklist for Ghaymah Application
1. Use Trusted Container Images
What is the security control?
Using trusted and verified container images reduces the risk of deploying images that contain malware, vulnerabilities, or unwanted software.
How to apply it on Ghaymah?
Use official images from trusted registries and verify images before deployment on Ghaymah Container Hosting. Enable image scanning to detect known vulnerabilities before running containers.
2. Scan Container Images for Vulnerabilities
What is the security control?
Container image scanning identifies vulnerable packages and outdated dependencies before they reach production.
How to apply it on Ghaymah?
Integrate vulnerability scanning tools into the CI/CD pipeline before pushing images to Ghaymah Container Registry. Block deployment of images with critical vulnerabilities.
3. Run Containers as Non-Root Users
What is the security control?
Running containers with root privileges increases the impact of a container compromise.
How to apply it on Ghaymah?
Configure Docker images to use a dedicated non-root user and enforce security policies that prevent privileged container execution.
4. Limit Container Resources
What is the security control?
Resource limits prevent one container from consuming excessive CPU or memory and affecting other services.
How to apply it on Ghaymah?
Configure CPU and memory limits for containers using Ghaymah Container platform settings. This helps prevent resource exhaustion attacks.
5. Keep Containers Updated
What is the security control?
Regular updates fix security vulnerabilities in operating systems, libraries, and application dependencies.
How to apply it on Ghaymah?
Regularly rebuild container images with updated dependencies and redeploy secure versions through the CI/CD pipeline.
Network Security
6. Restrict Exposed Ports
What is the security control?
Reducing exposed ports minimizes the attack surface available to attackers.
How to apply it on Ghaymah?
Only expose required application ports and block unnecessary ports using Ghaymah network security rules.
7. Apply Firewall Rules
What is the security control?
Firewalls control incoming and outgoing traffic based on defined security rules.
How to apply it on Ghaymah?
Configure network access rules to allow only trusted sources and required services.
8. Use Network Policies
What is the security control?
Network policies restrict communication between different services and containers.
How to apply it on Ghaymah?
Create rules that control which containers can communicate with each other and prevent unauthorized internal access.
9. Enable HTTPS/TLS
What is the security control?
HTTPS encrypts communication between users and applications to protect sensitive information.
How to apply it on Ghaymah?
Configure SSL/TLS certificates for applications deployed on Ghaymah and enforce HTTPS connections.
OWASP Security
10. Prevent SQL Injection
What is the security control?
SQL injection happens when attackers insert malicious SQL commands through application inputs.
How to apply it on Ghaymah?
Use prepared statements, input validation, and secure database access configurations for applications hosted on Ghaymah.
11. Protect Against Cross-Site Scripting (XSS)
What is the security control?
XSS protection prevents attackers from injecting malicious scripts into web applications.
How to apply it on Ghaymah?
Implement input sanitization, output encoding, and proper security headers in applications deployed on Ghaymah.
12. Implement Authentication Controls
What is the security control?
Strong authentication prevents unauthorized users from accessing application resources.
How to apply it on Ghaymah?
Use strong password policies, multi-factor authentication, and secure session management.
Data Security
13. Encrypt Sensitive Data
What is the security control?
Encryption protects sensitive information from unauthorized access.
How to apply it on Ghaymah?
Encrypt stored data using secure storage options and use encrypted connections for data transfer.
14. Secure Backups
What is the security control?
Secure backups help recover data after accidental deletion or security incidents.
How to apply it on Ghaymah?
Store backups securely using Ghaymah storage services and restrict backup access using proper permissions.
IAM Security
15. Apply Least Privilege Access
What is the security control?
Least privilege ensures users only have the permissions required to perform their tasks.
How to apply it on Ghaymah?
Create role-based access control policies and provide users with only the necessary permissions for managing cloud resources.