Design Scheme of a Docker Container File Isolation against Computer Virus Spreading

With the spread of computers and Internet of Things, the destructive power of viruses gradually becomes stronger, which threaten the daily life of people. In order to effectively restrain the virus spreading and reduce economic losses, humans need to hold the law and control of the virus distribution. Docker has obtained significant attention as a lightweight virtualization container technology. Compared to traditional virtualization technologies, docker possesses the advantages of fast deployment, low resource consumption, and high migration capability. Given that the differences between various virtualization technologies and combining the characteristics in electric power systems, this paper designs a scheme of the file isolation system based on docker containers. The isolation scheme could reduce the highly dependence on the underlying operating system in the current application deployment of electric power systems and facilitate the security access to the file system between containers.