Jolak, RodiRodiJolakRosenstatter, ThomasThomasRosenstatterMohamad, MazenMazenMohamadStrandberg, KimKimStrandbergSangchoolie, BehroozBehroozSangchoolieNowdehi, NasserNasserNowdehiScandariato, RiccardoRiccardoScandariato2022-02-112022-02-112022-04Journal of Systems and Software 186: 111158 (2022-04)http://hdl.handle.net/11420/11657Context: Container-based virtualization is gaining popularity in different domains, as it supports continuous development and improves the efficiency and reliability of run-time environments. Problem: Different techniques are proposed for monitoring the security of containers. However, there are no guidelines supporting the selection of suitable techniques for the tasks at hand. Objective: We aim to support the selection and design of techniques for monitoring container-based virtualization environments. Approach:: First, we review the literature and identify techniques for monitoring containerized environments. Second, we classify these techniques according to a set of categories, such as technical characteristic, applicability, effectiveness, and evaluation. We further detail the pros and cons that are associated with each of the identified techniques. Result: As a result, we present CONSERVE, a multi-dimensional decision support framework for an informed and optimal selection of a suitable set of container monitoring techniques to be implemented in different application domains. Evaluation: A mix of eighteen researchers and practitioners evaluated the ease of use, understandability, usefulness, efficiency, applicability, and completeness of the framework. The evaluation shows a high level of interest, and points out to potential benefits.en0164-12122022Elsevierhttps://creativecommons.org/licenses/by/4.0/Attack analysisContainer monitoringIntrusion detectionSecuritySoftware and systems engineeringVirtualizationTechnikJournal Article10.15480/882.413910.1016/j.jss.2021.11115810.15480/882.4139Journal Article