.png){kind=icon}
返回
Secure Inter-Container Communications Using XDP/eBPF
.png){kind=icon}
PRE
AI
DOI：10.1109/TNET.2022.3206781.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
While the use of containerization technologies for virtual application deployment has grown at an astonishing rate, the question of the robustness of container networking has not been well scrutinized from a security perspective, even though inter-container networking is indispensable for microservices. Thus, this paper first analyzes container networks from a security perspective, discussing the implications based on their architectural limitations. Then, it presents Bastion(+), a secure inter-container communication bridge. Bastion(+) introduces (i) a network security enforcement stack that provides fine-grained control per container application and securely isolates intercontainer traffic in a point-to-point manner. Bastion(+) also supports (ii) selective security function chaining, enabling various security functions to be chained between containers for further security inspections (e.g., deep packet inspection) according to the container's network context. Bastion(+) incorporates (iii) a security policy assistant that helps an administrator discover inter-container networking dependencies correctly. Our evaluation demonstrates how Bastion(+) can effectively mitigate several adversarial attacks in container networks while improving the overall performance up to 25.4% within single-host containers and 17.7% for cross-host container communications.
Keyword:
Container security
network sandboxing
policy enforcement
security function chaining
XDP/eBPF
期刊
I
IF:
3.6
论文数:
4.4K
被引数:
9.5K
机构
引用论文
.png){kind=icon}
Visual Responses in FEF, Unlike V1, Primarily Reflect When the Visual Context Renders a Receptive Field Salient与V1不同，FEF中的视觉反应主要反映了视觉环境何时使感受野显着
OAAI
OAAI分享收藏分享收藏Stochastic static fault slip inversion from geodetic data with non-negativity and bound constraints具有非负性和约束约束的大地测量数据的随机静态断层滑动反演OAAI
OAAI分享收藏The Gestational Effects of Maternal Appetite Axis Molecules on Fetal Growth, Metabolism and Long-Term Metabolic Health: A Systematic Review妊娠期母体食欲轴分子对胎儿生长、代谢及长期代谢健康的影响：一项系统综述
OAAI
OAAI分享收藏
查看更多内容