Why are containers uniquely suitable for whitelist-based runtime security?

Developers typically define the processes used in their containers within the Dockerfile

Docker has a built-in runtime analysis capability to aid in whitelisting.

Containers typically have only a few defined processes that should ever be executed.

Operations teams typically know what processes are used within a container