一句话：研究 Kubernetes 清单安全最佳实践违规如何被用于攻击（如拒绝服务），并提出缓解策略。
Kubernetes 已成为容器化应用自动部署、扩缩容和管理的主流开源系统，被 IBM、Spotify、Capital One 等组织广泛采用。然而，近期的安全事件和从业者调查表明，Kubernetes 部署可能因配置错误和未遵循安全最佳实践而遭受攻击。本文探索恶意用户如何利用 Kubernetes 安全最佳实践违规实施潜在攻击，具体研究针对 Kubernetes 清单中某类最佳实践违规发起拒绝服务攻击的可行性，并进一步探索 Kubernetes 集群中的其他潜在利用方式。在此基础上，本文旨在提出缓解策略，以加固 Kubernetes 集群、降低因最佳实践违规带来的安全风险。该工作属于探索性研究，旨在为实践者提供安全加固方向。
Kubernetes is an open-source software system that helps practitioners in automatically deploying, scaling, and managing containerized applications. Information technology (IT) organizations, such as IBM, Spotify, and Capital One, use Kubernetes to manage their containers and reported benefits in the deployment process. However, recent security breaches and survey results among practitioners suggest that Kubernetes deployment can be vulnerable to attacks due to misconfiguration and not following security best practices. This research explores how malicious users can perform potential security exploits from the violations of Kubernetes security best practices. We explore how attacks can be conducted such as denial of service attacks against one of the security best practices violations in Kubernetes manifests. In addition, we are exploring potential exploits in the Kubernetes cluster to propose mitigation strategies to secure the Kubernetes cluster.
DOI 原文 ·
@inproceedings{paperbot6334,
title = {Mitigating security attacks in kubernetes manifests for security best practices violation},
author = {Shazibul Islam Shamim},
booktitle = {FSE},
year = {2021},
doi = {10.1145/3468264.3473495}
}