Skip to main content
U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Application Container Security Guide



Murugiah P. Souppaya, John Morello, Karen Scarfone


Application container technologies, also known as containers, are a form of operating system virtualization combined with application software packaging. Containers provide a portable, reusable, and automatable way to package and run applications. This publication explains the potential security concerns associated with the use of containers and provides recommendations for addressing these concerns.
Special Publication (NIST SP) - 800-190
Report Number


application, application container, application software packaging, container, container security, isolation, operating system virtualization, virtualization


Souppaya, M. , Morello, J. and Scarfone, K. (2017), Application Container Security Guide, Special Publication (NIST SP), National Institute of Standards and Technology, Gaithersburg, MD, [online], (Accessed April 24, 2024)
Created September 25, 2017, Updated May 4, 2021