This is an excellent series on container security fundamentals by Rory McCune who is a bit of an authority in this field: