Assessment of Docker images vulnerability analysis tools: an AHP approach

Abstract

In this study, we evaluated the performance of vulnerability analysis tools for Docker images. We used the Analytic Hierarchy Process (AHP) as a multi-criteria decision-making methodology. Given the growing use of Docker containers and the risks associated with vulnerabilities present in their images, which are available on Docker Hub, this research aims to compare and rank the main tools for identifying these weaknesses. We applied the AHP methodology in two stages: initially, in each study individually and, later, in the results of all the studies. The results indicated that the choice of tool should take into account not only overall effectiveness but also contextual factors and the possibility of using multiple tools for more accurate detection. This work also highlights the need for continuous evaluations, especially regarding dynamic analysis approaches and their comparison with static analysis tools.