容器安全:一个广泛的路线图

Suganthi Subramanian, Prasad B. Honnavalli, S. Shylaja
{"title":"容器安全:一个广泛的路线图","authors":"Suganthi Subramanian, Prasad B. Honnavalli, S. Shylaja","doi":"10.2991/ahis.k.210913.053","DOIUrl":null,"url":null,"abstract":"The containers play a crucial role in the cloud environment during application deployment as it shares same OS kernel. It reduces resource requirements and start-up time for deploying applications by an individual organizations or users. Even though containers provide light-weight virtualization, it generates a security bottleneck for the number of dedicated resources, libraries, and applications since the container isolation is comparatively weak to the legacy VMs. In the general architec ture of container, attackers can perform privilege escalation by exploiting the kernel vulnerabilities to gain the root privilege and leaks the critical information of a system. To address the present security concerns in the container, a better security based solution is essential. In this work, an extensive analysis is performed to predict the various existing access control mechanisms used for security purposes and the challenges encountered during the architecture modeling. Some use cases are considered to ensure the fulfilment of security requirements such as container protection, inter-container protection, and host protection, and it needs to provide both software and hardware solutions. This work also includes the research problems, research gaps, and further research extensions to provide security to the containers.","PeriodicalId":417648,"journal":{"name":"Proceedings of the 3rd International Conference on Integrated Intelligent Computing Communication & Security (ICIIC 2021)","volume":"83 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"1900-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":"{\"title\":\"Container Security: An Extensive Roadmap\",\"authors\":\"Suganthi Subramanian, Prasad B. Honnavalli, S. Shylaja\",\"doi\":\"10.2991/ahis.k.210913.053\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"The containers play a crucial role in the cloud environment during application deployment as it shares same OS kernel. It reduces resource requirements and start-up time for deploying applications by an individual organizations or users. Even though containers provide light-weight virtualization, it generates a security bottleneck for the number of dedicated resources, libraries, and applications since the container isolation is comparatively weak to the legacy VMs. In the general architec ture of container, attackers can perform privilege escalation by exploiting the kernel vulnerabilities to gain the root privilege and leaks the critical information of a system. To address the present security concerns in the container, a better security based solution is essential. In this work, an extensive analysis is performed to predict the various existing access control mechanisms used for security purposes and the challenges encountered during the architecture modeling. Some use cases are considered to ensure the fulfilment of security requirements such as container protection, inter-container protection, and host protection, and it needs to provide both software and hardware solutions. This work also includes the research problems, research gaps, and further research extensions to provide security to the containers.\",\"PeriodicalId\":417648,\"journal\":{\"name\":\"Proceedings of the 3rd International Conference on Integrated Intelligent Computing Communication & Security (ICIIC 2021)\",\"volume\":\"83 1\",\"pages\":\"0\"},\"PeriodicalIF\":0.0000,\"publicationDate\":\"1900-01-01\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"0\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"Proceedings of the 3rd International Conference on Integrated Intelligent Computing Communication & Security (ICIIC 2021)\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/10.2991/ahis.k.210913.053\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"\",\"JCRName\":\"\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"Proceedings of the 3rd International Conference on Integrated Intelligent Computing Communication & Security (ICIIC 2021)","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.2991/ahis.k.210913.053","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
引用次数: 0

摘要

在应用程序部署期间,容器在云环境中起着至关重要的作用,因为它共享相同的操作系统内核。它减少了单个组织或用户部署应用程序的资源需求和启动时间。尽管容器提供了轻量级虚拟化,但由于容器隔离相对于遗留vm较弱,因此它为专用资源、库和应用程序的数量产生了安全瓶颈。在容器的一般体系结构中,攻击者可以利用内核漏洞进行权限升级,获得根权限,从而泄露系统的关键信息。为了解决容器中当前的安全性问题,一个更好的基于安全性的解决方案是必不可少的。在这项工作中,执行了广泛的分析,以预测用于安全目的的各种现有访问控制机制以及在体系结构建模期间遇到的挑战。考虑一些用例以确保满足安全需求,例如容器保护、容器间保护和主机保护,并且需要同时提供软件和硬件解决方案。这项工作还包括研究问题、研究差距以及为容器提供安全性的进一步研究扩展。
本文章由计算机程序翻译,如有差异,请以英文原文为准。
Container Security: An Extensive Roadmap
The containers play a crucial role in the cloud environment during application deployment as it shares same OS kernel. It reduces resource requirements and start-up time for deploying applications by an individual organizations or users. Even though containers provide light-weight virtualization, it generates a security bottleneck for the number of dedicated resources, libraries, and applications since the container isolation is comparatively weak to the legacy VMs. In the general architec ture of container, attackers can perform privilege escalation by exploiting the kernel vulnerabilities to gain the root privilege and leaks the critical information of a system. To address the present security concerns in the container, a better security based solution is essential. In this work, an extensive analysis is performed to predict the various existing access control mechanisms used for security purposes and the challenges encountered during the architecture modeling. Some use cases are considered to ensure the fulfilment of security requirements such as container protection, inter-container protection, and host protection, and it needs to provide both software and hardware solutions. This work also includes the research problems, research gaps, and further research extensions to provide security to the containers.
求助全文
通过发布文献求助,成功后即可免费获取论文全文。 去求助
来源期刊
自引率
0.00%
发文量
0
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
确定
请完成安全验证×
copy
已复制链接
快去分享给好友吧!
我知道了
右上角分享
点击右上角分享
0
联系我们:info@booksci.cn Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。 Copyright © 2023 布克学术 All rights reserved.
京ICP备2023020795号-1
ghs 京公网安备 11010802042870号
Book学术文献互助
Book学术文献互助群
群 号:604180095
Book学术官方微信