Understanding the Security Implications of Kubernetes Networking

Francesco Minna; Agathe Blaise; Filippo Rebecchi; Balakrishnan Chandrasekaran; Fabio Massacci

doi:10.1109/MSEC.2021.3094726

Understanding the Security Implications of Kubernetes Networking

Francesco Minna
, Agathe Blaise
, Filippo Rebecchi
, Balakrishnan Chandrasekaran
, Fabio Massacci

Research output: Contribution to Journal › Article › Academic › peer-review

Abstract

Container-orchestration software such as Kubernetes make it easy to deploy and manage modern cloud applications based on microservices. Yet, its network abstractions pave the way for "unexpected attacks"if we approach cloud network security with the same mental model of traditional network security.

Original language	English
Article number	9497237
Pages (from-to)	46-56
Number of pages	11
Journal	IEEE Security & Privacy
Volume	19
Issue number	5
Early online date	27 Jul 2021
DOIs	https://doi.org/10.1109/MSEC.2021.3094726
Publication status	Published - 1 Sept 2021

Bibliographical note

Funding Information:
We thank the reviewers and IEEE Security & Privacy’s Editor in Chief Sean Peisert for their comments that greatly helped to improve this article. Any remaining error is our fault. This work has received funding by the European Union under the H2020 grant 952647 (AssureMOSS).

Publisher Copyright:
© 2003-2012 IEEE.

Funding

We thank the reviewers and IEEE Security & Privacy’s Editor in Chief Sean Peisert for their comments that greatly helped to improve this article. Any remaining error is our fault. This work has received funding by the European Union under the H2020 grant 952647 (AssureMOSS).

Funders	Funder number
Horizon 2020 Framework Programme	952647
European Commission

Access to Document

10.1109/MSEC.2021.3094726

Persistent URL (handle)

Persistent link

Cite this

@article{5dedc1a2dd9949a8a5a093f3666cfcdc,

title = "Understanding the Security Implications of Kubernetes Networking",

abstract = "Container-orchestration software such as Kubernetes make it easy to deploy and manage modern cloud applications based on microservices. Yet, its network abstractions pave the way for {"}unexpected attacks{"}if we approach cloud network security with the same mental model of traditional network security.",

author = "Francesco Minna and Agathe Blaise and Filippo Rebecchi and Balakrishnan Chandrasekaran and Fabio Massacci",

note = "Funding Information: We thank the reviewers and IEEE Security \& Privacy{\textquoteright}s Editor in Chief Sean Peisert for their comments that greatly helped to improve this article. Any remaining error is our fault. This work has received funding by the European Union under the H2020 grant 952647 (AssureMOSS). Publisher Copyright: {\textcopyright} 2003-2012 IEEE.",

year = "2021",

month = sep,

day = "1",

doi = "10.1109/MSEC.2021.3094726",

language = "English",

volume = "19",

pages = "46--56",

journal = "IEEE Security \& Privacy",

issn = "1540-7993",

publisher = "Institute of Electrical and Electronics Engineers Inc.",

number = "5",

}

TY - JOUR

T1 - Understanding the Security Implications of Kubernetes Networking

AU - Minna, Francesco

AU - Blaise, Agathe

AU - Rebecchi, Filippo

AU - Chandrasekaran, Balakrishnan

AU - Massacci, Fabio

N1 - Funding Information: We thank the reviewers and IEEE Security & Privacy’s Editor in Chief Sean Peisert for their comments that greatly helped to improve this article. Any remaining error is our fault. This work has received funding by the European Union under the H2020 grant 952647 (AssureMOSS). Publisher Copyright: © 2003-2012 IEEE.

PY - 2021/9/1

Y1 - 2021/9/1

N2 - Container-orchestration software such as Kubernetes make it easy to deploy and manage modern cloud applications based on microservices. Yet, its network abstractions pave the way for "unexpected attacks"if we approach cloud network security with the same mental model of traditional network security.

AB - Container-orchestration software such as Kubernetes make it easy to deploy and manage modern cloud applications based on microservices. Yet, its network abstractions pave the way for "unexpected attacks"if we approach cloud network security with the same mental model of traditional network security.

UR - https://www.scopus.com/pages/publications/85112670741

UR - https://www.scopus.com/pages/publications/85112670741#tab=citedBy

U2 - 10.1109/MSEC.2021.3094726

DO - 10.1109/MSEC.2021.3094726

M3 - Article

SN - 1540-7993

VL - 19

SP - 46

EP - 56

JO - IEEE Security & Privacy

JF - IEEE Security & Privacy

IS - 5

M1 - 9497237

ER -

Understanding the Security Implications of Kubernetes Networking

Abstract

Bibliographical note

Funding

Access to Document

Persistent URL (handle)

Other files and links

Fingerprint

Cite this