쿠버네티스 API server의 Transport Layer Security 패킷 실시간 복호화 및 시각화 시스템
API Server Transport Layer Security Packets Real-Time Decryption and Visualization System in Kubernetes
1
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
The cloud computing evolution has brought us increasing necessity to manage virtual resources. For this reason, Kubernetes has developed to realize autonomous resource management in a large scale. It provides cloud computing infrastructure to handle cluster creations and deletions in a secure virtual computing environment. In the paper, we provide a monitoring scheme in which users can observe securely encrypted protocols while each Kubernetes component exchanges their packets. Eventually, users can utilize the proposed scheme for debugging as well as monitoring.
Abstract
The cloud computing evolution has brought us increasing necessity to manage virtual resources. For this reason, Kubernetes has developed to realize autonomous resource management in a large scale. It provides cloud computing infrastructure to handle cluster creations and deletions in a secure virtual computing environment. In the paper, we provide a monitoring scheme in which users can observe securely encrypted protocols while each Kubernetes component exchanges their packets. Eventually, users can utilize the proposed scheme for debugging as well as monitoring.
참고문헌 (14)
- Huang, L. S., "An Experimental Study of TLS Forward Secrecy Deployments", IEEE Internet Computing, pp.43~51 (2014)
- Morrissey, P., "A Modular Security Analysis of the TLS Handshake Protocol", International Conference on the Theory and Application of Cryptology and Information Security, pp.55~73 (2008)
- Dierks, T., "The Transport Layer Security (TLS) protocol version 1.2", ~ (2008)
- Enhancing Availability of Microservice Architecture: A Case Study on Kubernetes Security Configurations, "Habbal, N.", ~ (2020)
- He, X., "Authentication and Authorization of end user in Microservice Architecture", Physics : Conference Series, 910 (2017)
- Shamim, M. S. I., "XI Commandments of Kubernetes Security : A Systematization of Knowledge Related to Kubernetes Security Practices", 2020 IEEE Secure Development, pp.58~64 (2020)
- R. Eidenbenz, "Latency-Aware Industrial Fog Application Orchestration with Kubernetes", 2020 Fifth International Conference on Fog and Mobile Edge Computing(FMEC), pp.164~171 (2020)
- Nash, A., "PKI: Implementing and Managing E-security" (2001)
- P. Szalachowski, "PKI Safety Net(PKISN) : Addressing the Too-Big-to-Be-Revoked Problem of the TLS Ecosystem", 2016 IEEE European Symposium on Security and Privacy(EuroS&P), pp.407~422 (2016)
- T. H. Kim, "Virtualization and Kubernetes", OSIA Standards & Technology Review, pp.4~10 (2020)
- Adrian, D., "Imperfect Forward Secrecy : How Diffie-Hellman fails in Practice", 22nd ACM SIGSAC Conference on Computer and Communications Security, pp.5~17 (2015)
- Luby, M., "How to Construct Pseudorandom Permutations from Pseudorandom Functions", SIAM Journal on Computing, pp.373~386 (1988)