.png){kind=icon}
.png){kind=icon}
Return
Enhancing Cloud-Native Security Through 4C Architecture: A Comprehensive Analysis
.png){kind=icon}
PRE
AI
DOI：10.1007/978-981-95-2196-8_36.png)
.png){kind=icon}
Original request for help.png){kind=icon}
Share.png){kind=icon}
Save
Abstract
En 中文
This comprehensive study navigates the multifaceted domain of cloud-native security by dissecting the 4C Architecture-Cloud, Container, Cluster, and Code. In addressing cloud-specific challenges, the research underscores the pivotal role of identity and access management, encryption, and network security within the expansive cloud infrastructure. Strategies for safeguarding data at rest and in transit are explored, leveraging cloud provider services for encryption key management, and implementing robust network controls. Shifting focus to containerized applications, the investigation advocates for security measures such as image scanning and runtime protection. The adoption of secure container orchestration platforms is emphasized, alongside the imperative for microservices security and network segmentation to fortify defenses at the container level. The study delves into security considerations at the cluster level, scrutinizing the impact of container arrangement on overall system security. Best practices encompass network segmentation, access controls, and vigilant monitoring for timely threat detection within container clusters. From a development standpoint, the paper highlights the paramount importance of secure coding practices and the integration of security into the software development lifecycle. DevSecOps principles take center stage, advocating for automation in security testing, vulnerability scanning, and compliance checks to ensure a proactive and resilient security posture across the entire cloud-native landscape.
Keywords:
Cloud
Cluster
Container
Code
Security
DevSecOps
Journal
I
IF:
0
Papers:
37
Citations:
0
