Rani Osnat, vice president for strategy at Aqua Security, explained that the concepts behind container security are similar to those used in traditional application security testing technologies like DAST and IAST (interactive application security testing) in development and RASP (runtime application self-protection) in runtime, but the mechanisms are very different.
For example, containers are governed by immutability. That means when you run them, their contents are not supposed to be changed in any way. You make changes at the source of the container—the container image—and that changed image replaces all of the old versions of the image in circulation.
While all applications are increasingly dependent on open source code, containers are especially so.
