158 أسطر
4.8 KiB
Markdown
158 أسطر
4.8 KiB
Markdown
# Security Audit Checklist for Ghaymah Application
|
|
|
|
## 1. Use Trusted Container Images
|
|
|
|
### What is the security control?
|
|
Using trusted and verified container images reduces the risk of deploying images that contain malware, vulnerabilities, or unwanted software.
|
|
|
|
### How to apply it on Ghaymah?
|
|
Use official images from trusted registries and verify images before deployment on Ghaymah Container Hosting. Enable image scanning to detect known vulnerabilities before running containers.
|
|
|
|
---
|
|
|
|
## 2. Scan Container Images for Vulnerabilities
|
|
|
|
### What is the security control?
|
|
Container image scanning identifies vulnerable packages and outdated dependencies before they reach production.
|
|
|
|
### How to apply it on Ghaymah?
|
|
Integrate vulnerability scanning tools into the CI/CD pipeline before pushing images to Ghaymah Container Registry. Block deployment of images with critical vulnerabilities.
|
|
|
|
---
|
|
|
|
## 3. Run Containers as Non-Root Users
|
|
|
|
### What is the security control?
|
|
Running containers with root privileges increases the impact of a container compromise.
|
|
|
|
### How to apply it on Ghaymah?
|
|
Configure Docker images to use a dedicated non-root user and enforce security policies that prevent privileged container execution.
|
|
|
|
---
|
|
|
|
## 4. Limit Container Resources
|
|
|
|
### What is the security control?
|
|
Resource limits prevent one container from consuming excessive CPU or memory and affecting other services.
|
|
|
|
### How to apply it on Ghaymah?
|
|
Configure CPU and memory limits for containers using Ghaymah Container platform settings. This helps prevent resource exhaustion attacks.
|
|
|
|
---
|
|
|
|
## 5. Keep Containers Updated
|
|
|
|
### What is the security control?
|
|
Regular updates fix security vulnerabilities in operating systems, libraries, and application dependencies.
|
|
|
|
### How to apply it on Ghaymah?
|
|
Regularly rebuild container images with updated dependencies and redeploy secure versions through the CI/CD pipeline.
|
|
|
|
---
|
|
|
|
# Network Security
|
|
|
|
## 6. Restrict Exposed Ports
|
|
|
|
### What is the security control?
|
|
Reducing exposed ports minimizes the attack surface available to attackers.
|
|
|
|
### How to apply it on Ghaymah?
|
|
Only expose required application ports and block unnecessary ports using Ghaymah network security rules.
|
|
|
|
---
|
|
|
|
## 7. Apply Firewall Rules
|
|
|
|
### What is the security control?
|
|
Firewalls control incoming and outgoing traffic based on defined security rules.
|
|
|
|
### How to apply it on Ghaymah?
|
|
Configure network access rules to allow only trusted sources and required services.
|
|
|
|
---
|
|
|
|
## 8. Use Network Policies
|
|
|
|
### What is the security control?
|
|
Network policies restrict communication between different services and containers.
|
|
|
|
### How to apply it on Ghaymah?
|
|
Create rules that control which containers can communicate with each other and prevent unauthorized internal access.
|
|
|
|
---
|
|
|
|
## 9. Enable HTTPS/TLS
|
|
|
|
### What is the security control?
|
|
HTTPS encrypts communication between users and applications to protect sensitive information.
|
|
|
|
### How to apply it on Ghaymah?
|
|
Configure SSL/TLS certificates for applications deployed on Ghaymah and enforce HTTPS connections.
|
|
|
|
---
|
|
|
|
# OWASP Security
|
|
|
|
## 10. Prevent SQL Injection
|
|
|
|
### What is the security control?
|
|
SQL injection happens when attackers insert malicious SQL commands through application inputs.
|
|
|
|
### How to apply it on Ghaymah?
|
|
Use prepared statements, input validation, and secure database access configurations for applications hosted on Ghaymah.
|
|
|
|
---
|
|
|
|
## 11. Protect Against Cross-Site Scripting (XSS)
|
|
|
|
### What is the security control?
|
|
XSS protection prevents attackers from injecting malicious scripts into web applications.
|
|
|
|
### How to apply it on Ghaymah?
|
|
Implement input sanitization, output encoding, and proper security headers in applications deployed on Ghaymah.
|
|
|
|
---
|
|
|
|
## 12. Implement Authentication Controls
|
|
|
|
### What is the security control?
|
|
Strong authentication prevents unauthorized users from accessing application resources.
|
|
|
|
### How to apply it on Ghaymah?
|
|
Use strong password policies, multi-factor authentication, and secure session management.
|
|
|
|
---
|
|
|
|
# Data Security
|
|
|
|
## 13. Encrypt Sensitive Data
|
|
|
|
### What is the security control?
|
|
Encryption protects sensitive information from unauthorized access.
|
|
|
|
### How to apply it on Ghaymah?
|
|
Encrypt stored data using secure storage options and use encrypted connections for data transfer.
|
|
|
|
---
|
|
|
|
## 14. Secure Backups
|
|
|
|
### What is the security control?
|
|
Secure backups help recover data after accidental deletion or security incidents.
|
|
|
|
### How to apply it on Ghaymah?
|
|
Store backups securely using Ghaymah storage services and restrict backup access using proper permissions.
|
|
|
|
---
|
|
|
|
# IAM Security
|
|
|
|
## 15. Apply Least Privilege Access
|
|
|
|
### What is the security control?
|
|
Least privilege ensures users only have the permissions required to perform their tasks.
|
|
|
|
### How to apply it on Ghaymah?
|
|
Create role-based access control policies and provide users with only the necessary permissions for managing cloud resources.
|