arrow
返回

System log isolation for containers

delete2024-11-22
delete0
delete
OA
AI
王琨 封面图
王琨 (Kun Wang)
S
Song Wu *
C
Cui, Yanxiang
Z
Zhuo Huang
H
Hao Fan
金
金海 (Hai Jin)
DOI:10.1007/s11704-024-2568-8delete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
Container-based virtualization is increasingly popular in cloud computing due to its efficiency and flexibility. Isolation is a fundamental property of containers and weak isolation could cause significant performance degradation and security vulnerability. However, existing works have almost not discussed the isolation problems of system log which is critical for monitoring and maintenance of containerized applications. In this paper, we present a detailed isolation analysis of system log in current container environment. First, we find several system log isolation problems which can cause significant impacts on system usability, security, and efficiency. For example, system log accidentally exposes information of host and co-resident containers to one container, causing information leakage. Second, we reveal that the root cause of these isolation problems is that containers share the global log configuration, the same log storage, and the global log view. To address these problems, we design and implement a system named private logs (POGs). POGs provides each container with its own log configuration and stores logs individually for each container, avoiding log configuration and storage sharing, respectively. In addition, POGs enables private log view to help distinguish which container the logs belong to. The experimental results show that POGs can effectively enhance system log isolation for containers with negligible performance overhead.
Keyword:
container isolation
system log
cgroup
namespace
cloud computing

期刊

Frontiers of Computer Science 封面图
Frontiers of Computer Science
IF:
4.6
论文数:
1.6K
被引数:
2.8K

机构

暂无机构信息
引用论文

引用论文

Results of the 1960 expedition to Krakatau
err2012-12-07
err0
PREAI
errRobert W. Decker; Djajadi Hadikusumo
err分享
err收藏
Electric-field dependence of absorption spectra of polymer ion-hemicyanine dye complexes
err1990-12-01
err0
PREAI
errS. Nomura; T. Kobayashi; H. Matsuda; S. Okada; H. Nakanishi; H. Tomiyama
err分享
err收藏
err分享
err收藏
err
IF0
err
err0
PREAI
err
err分享
err收藏
New roles of science in society: Different repertoires of knowledge brokering
err2013-02-01
err0
PREAI
errE. Turnhout; M. Stuiver; J. Klostermann; B. Harms; C. Leeuwis
err分享
err收藏
Urinary Diversions After Radiation for Prostate Cancer: Indications and Treatment
err2014-09-01
err0
PREAI
errSarah Fraumann Faris; Douglas F. Milam; Roger R. Dmochowski; Melissa R. Kaufman
err分享
err收藏
学者 查看更多内容