A survey on security issues in services communication of Microservices-enabled fog applications

Concurrency and Computation: Practice and Experience

Volumn 31, Issue 22, 2019, Pages

  Yu, Dongjin ^a   Jin, Yike ^a   Zhang, Yuqun ^b   Zheng, Xi ^c  

^a HANGZHOU DIANZI UNIVERSITY   (China)

^b SOUTHERN UNIVERSITY OF SCIENCE AND TECHNOLOGY   (China)

^c MACQUARIE UNIVERSITY   (Australia)

Author keywords

container; data; Microservices; network; permission; security

Indexed keywords

APPLICATION PROGRAMS; CONTAINERS; FOG; FOG COMPUTING; NETWORK ARCHITECTURE; NETWORKS (CIRCUITS); SURVEYS;

COMPUTING PARADIGM; DATA; DISTRIBUTED INTERFACES; EMERGING APPLICATIONS; MICROSERVICES; OPERATIONAL ENVIRONMENTS; PERMISSION; SECURITY;

NETWORK SECURITY;

EID: 85042033766     PISSN: 15320626     EISSN: 15320634     Source Type: Journal    
DOI: 10.1002/cpe.4436     Document Type: Conference Paper

References (121)

1. Hao Z, Novak E, Yi S, Li Q. Challenges and software architecture for fog computing. IEEE Internet Comput. 2017;21(2):44-53.
2. More P. Review of implementing fog computing. Int J Res Eng Technol. 2015.
3. Tao M, Ota K, Dong M. Foud: integrating fog and cloud for 5G-enabled V2G networks. IEEE Netw. 2017;31(2):8-13.
4. Sill A. The design and architecture of microservices. IEEE Cloud Comput. 2016;3(5):76-80.
5. Dong M, Ota K, Liu A. Preserving source-location privacy through redundant fog loop for wireless sensor networks. Paper presented at: 2015 IEEE International Conference on Computer and Information Technology; Ubiquitous Computing and Communications; Dependable, Autonomic and Secure Computing; Pervasive Intelligence and Computing (CIT/IUCC/DASC/PICOM); 2015; Liverpool, UK.
6. boot2dockerio. Boot2Docker by Boot2docker. 2017. http://boot2docker.io/
7. Rancher. RancherOS. 2017. http://rancher.com/rancher-os/
8. Shi W, Dustdar S. The promise of edge computing. Computer. 2016;49(5):78-81.
9. Bonomi F, Milito R, Zhu J, Addepalli S. Fog computing and its role in the internet of things. Paper presented at: Proceedings of the First Edition of the MCC Workshop on Mobile Cloud Computing, ACM; 2012; Helsinki, Finland.
10. Zheng X, Pan L, Yilmaz E. Security analysis of modern mission critical android mobile applications. Paper presented at: Proceedings of the Australasian Computer Science Week Multiconference; 2017; Geelong, Australia.
11. Lea G. Microservices security: all the questions you should be asking. 2015. http://www.grahamlea.com/2015/07/microservices-security-questions/
12. Linthicum DS. Practical use of microservices in moving workloads to the cloud. IEEE Cloud Comput. 2016;3(5):6-9.
13. Anthes G. Security in the cloud. Commun ACM. 2010;53(11):16-18.
14. Patanjali S, Truninger B, Harsh P, Bohnert TM. Cyclops: a micro service based approach for dynamic rating, charging and billing for cloud. Paper presented at: 2015 13th International Conference on Telecommunications (ConTEL); 2015; Graz, Austria.
15. Aliyu AL, Bull P, Abdallah A. A trust management framework for network applications within an SDN environment. Paper presented at: International Conference on Advanced Information Networking and Applications Workshops; 2017; Cracow, Poland.
16. Malavalli D, Sathappan S. Scalable microservice based architecture for enabling DMTF profiles. Paper presented at: International Conference on Network and Service Management; 2015; Barcelona, Spain.
17. Pathania N. Setting up Jenkins on Docker and Cloud. Pro Continuous Delivery. Berkeley, CA: Apress; 2017:115-143.
18. Wilde N, Gonen B, El-Sheikh E, Zimmermann A. Approaches to the evolution of SOA systems. In: Wilde N, Gonen B, El-Sheikh E, Zimmermann A, eds. Emerging Trends in the Evolution of Service-Oriented and Enterprise Architectures. Cham, Switzerland: Springer International Publishing; 2016;11:5-21.
19. Chappell D. Enterprise Service Bus. Paper presented at: 2007 Free and Open Source Software Conference; 2007; Skopje, Macedonia.
20. Singleton A. The Economics of microservices. IEEE Cloud Comput. 2016;3(5):16-20.
21. Zhu L, Bass L, Champlin-Scharff G. DevOps and its practices. IEEE Softw. 2016;33(3):32-34.
22. Savchenko DI, Radchenko GI, Taipale O. Microservices validation: Mjolnirr platform case study. Paper presented at: 38th International Convention on Information and Communication Technology, Electronics and Microelectronics (MIPRO); 2015; Opatija, Croatia.
23. Villamizar M, Garcés O, Castro H, et al. Evaluating the monolithic and the microservice architecture pattern to deploy web applications in the cloud. Paper presented at: 10th Computing Colombian Conference (10CCC); 2015; Bogota, Colombia.
24. Villamizar M, Zambrano A, Lang M, et al. Infrastructure cost comparison of running web applications in the cloud using AWS lambda and monolithic and microservice architectures. Paper presented at: 2016 16th IEEE/ACM International Symposium on Cluster, Cloud and Grid Computing (CCGrid); 2016; Cartagena, Colombia.
25. Sun L, Li Y, Memon RA. An open IoT framework based on microservices architecture. China Commun. 2017;14(2):154-162.
26. Krylovskiy A, Jahn M, Patti E. Designing a smart city internet of things platform with microservice architecture. Paper presented at: 2015 3rd IEEE International Conference on Future Internet of Things and Cloud (FiCloud); 2015; Rome, Italy.
27. Bao K, Mauser I, Kochanneck S, Xu H, Schmeck H. A microservice architecture for the intranet of things and energy in smart buildings. Paper presented at: Proceedings of the 1st International Workshop on Mashups of Things and APIs; 2016; Trento, Italy.
28. Alrawais A, Alhothaily A, Hu C, Cheng X. Fog computing for the internet of things: security and privacy issues. IEEE Internet Comput. 2017;21(2): 34-42.
29. Zimmermann A, Bogner J, Schmidt R, Jugel D, Schweda C, Möhring M. Digital enterprise architecture with micro-granular systems and services. Paper presented at: BIR Workshops; 2016; Prague, Czech Republic.
30. Bak P, Melamed R, Moshkovich D, Nardi Y, Ship H, Yaeli A. Location and context-based microservices for mobile and internet of things workloads. Paper presented at: 2015 IEEE International Conference on Mobile Services; 2015; New York, NY.
31. Gadea C, Trifan M, Ionescu D, Cordea M, Ionescu B. A microservices architecture for collaborative document editing enhanced with face recognition. Paper presented at: 2016 IEEE International Symposium on Applied Computational Intelligence and Informatics (SACI); 2016; Timisoara, Romania.
32. Peinl R, Holzschuher F, Pfitzer F. Docker cluster management for the cloud-survey results and own solution. J Grid Comput. 2016;14(2):265-282.
33. Pahl C, Jamshidi P. Microservices: a systematic mapping study. Paper presented at: Proceedings of the 6th International Conference on Cloud Computing and Services Science (CLOSER); 2016; Rome, Italy.
34. Kratzke N, Quint PC. Understanding cloud-native applications after 10 years of cloud computing-a systematic mapping study. J Syst Softw. 2017;126:1-16.
35. Vase T. Integrating Docker to a Continuous Delivery Pipeline: A Pragmatic Approach. [Master's thesis]. 2016.
36. Bacis E, Mutti S, Capelli S, Paraboschi S. DockerPolicyModules: mandatory access control for docker containers. Paper presented at: 2015 IEEE Conference on Communications and Network Security (CNS); 2015; Florence, Italy.
37. Checconi F, Cucinotta T, Faggioli D, Lipari G. Hierarchical multiprocessor CPU reservations for the Linux kernel. Paper presented at: 2009 Proceedings of the 5th International Workshop on Operating Systems Platforms for Embedded Real-Time Applications (OSPERT 2009); 2009; Dublin, Ireland.
38. Dua R, Raja AR, Kakadia D. Virtualization vs containerization to support PaaS. Paper presented at: 2014 IEEE International Conference on Cloud Engineering (I2CE); 2014; Boston, MA.
39. Manu AR, Patel JK, Akhtar S, Agrawal VK, Murthy KNBS. A study, analysis and deep dive on cloud PaaS security in terms of docker container security. Paper presented at: 2016 International Conference on Circuit, Power and Computing Technologies (ICCPCT); 2016; Kollam, India.
40. Biederman EW. Multiple instances of the global Linux namespaces. Paper presented at: Proceedings of the Linux Symposium; 2006; Ottawa, Canada.
41. Bui T. Analysis of docker security. arXiv preprint arXiv:1501.02967. 2015.
42. Chelladhurai J, Chelliah PR, Kumar SA. Securing docker containers from denial of service (DoS) attacks. Paper presented at: 2016 IEEE International Conference on Services Computing (SCC); 2016; San Francisco, CA.
43. Soltesz S, Pötzl S, Fiuczynski ME, Bavier A, Peterson L. Container-based operating system virtualization: A scalable, high-performance alternative to hypervisors. Paper presented at: ACM SIGOPS Operating Systems Review; 2007; New York, NY.
44. Gupta U. Comparison between security majors in virtual machine and Linux containers. arXiv preprint arXiv:1507.07816. 2015.
45. Truyen E, Landuyt DV, Reniers V, Rafique A, Lagaisse B, Joosen W. Towards a container-based architecture for multi-tenant SaaS applications. Paper presented at: Proceedings of the 15th International Workshop on Adaptive and Reflective Middleware; 2016; Trento, Italy.
46. Combe T, Martin A, Di Pietro R. To docker or not to docker: a security perspective. IEEE Cloud Computing. 2016;3(5):54-62.
47. Jian Z, Chen L. A defense method against docker escape attack. Paper presented at: Proceedings of the 2017 International Conference on Cryptography, Security and Privacy; 2017; Wuhan, China.
48. Gao X, Gu Z, Kayaalp M, Pendarakis D, Wang H. ContainerLeaks: emerging security threats of information leakages in container clouds. Paper presented at: 2017 47th Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN), IEEE; 2016; Denver, CO.
49. Manu AR, Patel JK, Akhtar S, Agrawal VK, Murthy KNBS. Docker container security via heuristics-based multilateral security-conceptual and pragmatic study. Paper presented at: 2016 International Conference on Circuit Power and Computing Technologies (ICCPCT); 2016; Kollam, India.
50. Dillon T, Wu C, Chang E. Cloud computing: issues and challenges. Paper presented at: 2010 24th IEEE International Conference on Advanced Information Networking and Applications (AINA); 2010; Perth, Australia.
51. Wei Y, Blake MB. Service-oriented computing and cloud computing: challenges and opportunities. IEEE Internet Comput. 2011;14(6):72-75.
52. Gegick M, Barnum S. Reluctance to trust. 2005. https://www.us-cert.gov/bsi/articles/knowledge/principles/reluctance-to-trust
53. Chong F, Carraro G, Wolter R. Multi-tenant data architecture. 2006:14-30. https://msdn.microsoft.com/en-us/library/aa479086.aspx
54. Juels A, Kaliski BS. PORs: proofs of retrievability for large files. Paper presented at: 14th ACM Conference on Computer and Communications Security; 2007; Alexandria, VA.
55. Shah MA, Baker M, Mogul JC, Swaminathan R. Auditing to keep online storage services honest. Paper presented at: Workshop on Hot Topics in Operating Systems (HotOS'07); 2007; San Diego, CA.
56. Wang C, Ren K, Lou W, Li J. Toward publicly auditable secure cloud data storage services. IEEE Netw. 2010;24(4).
57. Wang C, Wang Q, Ren K, Lou W. Privacy-preserving public auditing for data storage security in cloud computing. Paper presented at: 2010 Proceedings of IEEE INFOCOM; 2010; San Diego, CA.
58. Esposito C, Castiglione A, Choo KKR. Challenges in delivering software in the cloud as microservices. IEEE Cloud Comput. 2016;3(5):10-14.
59. Callegati F, Giallorenzo S, Melis A, Prandini M. Data security issues in MaaS-enabling platforms. Paper presented at: 2016 IEEE 2nd International Forum on Research and Technologies for Society and Industry Leveraging A Better Tomorrow (RTSI); 2016; Bologna, Italy.
60. Subashini S, Kavitha V. A survey on security issues in service delivery models of cloud computing. J Netw Comput Appl. 2011;34(1):1-11.
61. Somani U, Lakhani K, Mundra M. Implementing digital signature with RSA encryption algorithm to enhance the data security of cloud in cloud computing. Paper presented at: 2010 1st International Conference on Parallel Distributed and Grid Computing (PDGC); 2016; Solan, India.
62. Wang G, Liu Q, Wu J. Hierarchical attribute-based encryption for fine-grained access control in cloud storage services. Paper presented at: Proceedings of the 17th ACM Conference on Computer and Communications Security; 2010; Chicago, IL.
63. Agarwal A, Tirumalai SK, Sriramadhesikan K. Data Encryption Service; 2017.
64. Cheung KC, Peel C, Happe S. Method and System for Credential Management and Data Encryption for iOS Based Devices; 2013.
65. Chen X, Li J, Ma J, Tang Q, Lou W. New Algorithms for Secure Outsourcing of Modular Exponentiations. IEEE Trans Parallel Distrib Syst. 2014;25(9):2386-2396.
66. Chen X, Zhang F, Susilo W, Tian H, Li J, Kim K. Identity-based chameleon hashing and signatures without key exposure. Inform Sci. 2014;265:198-210.
67. Chen X, Li J, Huang X, Ma J, Lou W. New publicly verifiable databases with efficient updates. IEEE Trans Dependable Secure Comput. 2015;12(5):546-556.
68. Chen X, Li J, Weng J, Ma J, Lou W. Verifiable computation over large database with incremental updates. IEEE Trans Comput. 2016;65(10):3184-3195.
69. Li J, Chen X, Li M, Li J, Lee PP, Lou W. Secure deduplication with efficient and reliable convergent key management. IEEE Trans Parallel Distrib Syst. 2014;25(6):1615-1625.
70. Li P, Li J, Huang Z, Gao CZ, Chen WB, Chen K. Privacy-preserving outsourced classification in cloud computing. Clust Comput. 2017:1-10.
71. Li J, Zhang Y, Chen X, Xiang Y. Secure attribute-based data sharing for resource-limited users in cloud computing. Comput Secur. 2018;72:1-12.
72. Bu K, Xiao B, Qian Y. High performance and security in cloud computing. Concurr Comput Pract Exp. 2017;29(19).
73. Gegick M, Barnum S. Least privilege. 2005. https://www.us-cert.gov/bsi/articles/knowledge/principles/least-privilege
74. Definition DAP. Lightweight Directory Access Protocol. RFC 2013; 7(89).
75. Murri R. Grid Security Infrastructure; 2005.
76. Pearlman L, Welch V, Foster I, Kesselman C, Tuecke S. A community authorization service for group collaboration. Paper presented at: 2002 Proceedings of the 3rd IEEE International Workshop on Policies for Distributed Systems and Networks; 2002; Monterey, CA.
77. Li W, Mitchell CJ. Analysing the security of Google's implementation of OpenID connect. In: Caballero J, Zurutuza U, Rodriguez R, eds. Detection of Intrusions and Malware, and Vulnerability Assessment. Berlin, Germany: Springer-Verlag; 2015.
78. Thanh TQ, Covaci S, Magedanz T, Gouvas P, Zafeiropoulos A. Embedding security and privacy into the development and operation of cloud applications and services. Paper presented at: 2016 17th Telecommunications Network Strategy and Planning Symposium; 2016; Montréal, Canada.
79. Ebert C, Gallardo G, Hernantes J, Serrano N. DevOps. IEEE Softw. 2016;33(3):94-100.
80. Pan L, Zheng X, Chen HX, Luan T, Bootwala H, Batten L. Cyber security attacks to modern vehicular systems. J Inf Secur Appl. 2017;36:90-100.
81. Liu Z, Dong M, Zhou H, Wang X, Ji Y, Tanaka Y. Device-to-device assisted video frame recovery for picocell edge users in heterogeneous networks. Paper presented at: 2016 IEEE International Conference on Communications (ICC); 2016; Kuala Lumpur, Malaysia.
82. Guo L, Dong M, Ota K, et al. A secure mechanism for big data collection in large scale internet of vehicles. IEEE Internet Things J. 2017;4(2):601-610.
83. Zhang L, Wei L, Huang D, Zhang K, Dong M, Ota K. MEDAPs: secure multientities delegated authentication protocols for mobile cloud computing. Secur Commun Netw. 2016;9(16):3777-3789.
84. Wu J, Ota K, Dong M, Li C. A hierarchical security framework for defending against sophisticated attacks on wireless sensor networks in smart cities. IEEE Access. 2016;4:416-424.
85. Qi H, Dong M. New advances in future network technologies. Concurr Comput Pract Exp. 2017;29(16).
86. Venkataramulu S, Rao DCVG. Various solutions for address resolution protocol spoofing attacks. Int J Sci Res Pub. 2013;3(7):1.
87. Haataja K, Toivanen P. Two practical man-in-the-middle attacks on bluetooth secure simple pairing and countermeasures. IEEE Trans Wirel Commun. 2010;9(1).
88. Tan Z, Jamdagni A, He X, Nanda P, Liu RP. A system for denial-of-service attack detection based on multivariate correlation analysis. IEEE Trans Parallel Distrib Syst. 2014;25(2):447-456.
89. Abad CL, Bonilla RI. An analysis on the schemes for detecting and preventing ARP cache poisoning attacks. Paper presented at: 2007 27th International Conference on Distributed Computing Systems Workshops (ICDCSW'07); 2007; Washington, DC.
90. Hwang H, Jung G, Sohn K, Park S. A study on MITM (man in the middle) vulnerability in wireless network using 802.1 X and EAP. Paper presented at: 2008 International Conference on Information Science and Security (ICISS); 2008; Seoul, South Korea.
91. Meyer U, Wetzel S. A man-in-the-middle attack on UMTS. Paper presented at: Proceedings of the 3rd ACM Workshop on Wireless Security; 2004; Philadelphia, PA.
92. Stasiak M, Glabowski M, Wisniewski A, Zwierzykowski P. Universal mobile telecommunication system. Modelling and Dimensioning of Mobile Wireless Networks: From GSM to LTE; 2013:15-42.
93. Nam SY, Kim D, Kim J. Enhanced ARP: preventing ARP poisoning-based man-in-the-middle attacks. IEEE Commun Lett. 2010;14(2):187-189.
94. Alicherry M, Keromytis AD. Doublecheck: Multi-path verification against man-in-the-middle attacks. Paper presented at: 2009 IEEE Symposium on Computers and Communications, (ISCC); 2009; Sousse, Tunisia.
95. Joshi Y, Das D, Saha S. Mitigating man in the middle attack over secure sockets layer. Paper presented at: 2009 IEEE International Conference on Internet Multimedia Services Architecture and Applications (IMSAA); 2009; Bangalore, India.
96. Ducic D. Features of the Secure Sockets Layer Protocol. [Thesis]. 2016.
97. Boraten T, Kodi A. Mitigation of hardware trojan based denial-of-service attack for secure NoCs. J Parallel Distrib Comput. 2017;111:24-38.
98. Khan S, Gani A, Wahab AWA, Singh PK. Feature selection of denial-of-service attacks using entropy and granular computing. Arabian J Sci Eng. 2018;43:499-508.
99. Chang RKC. Defending against flooding-based distributed denial-of-service attacks: a tutorial. IEEE Commun Mag. 2002;40(10):42-51.
100. Hussain A, Heidemann J, Papadopoulos C. A framework for classifying denial of service attacks. Paper presented at: Proceedings of the 2003 Conference on Applications, Technologies, Architectures, and Protocols for Computer Communications; 2003; Karlsruhe, Germany.
101. Gerlach S, Lebert D. Mitigating Denial of Service Attacks; 2017.
102. Anderson T, Roscoe T, Wetherall D. Preventing Internet denial-of-service with capabilities. ACM SIGCOMM Comput Commun Rev; 2004;34(1):39-44.
103. Ahmadvand M, Ibrahim A. Requirements reconciliation for scalable and secure microservice (de)composition. Paper presented at: 2016 24th IEEE International Requirements Engineering Conference Workshops; 2016; Beijing, China.
104. Radhappa H, Pan L, Zheng JX, Wen S. Practical overview of security issues in wireless sensor network applications. Int J Comput Appl. 2017:1-12.
105. Jiang J, Wen S, Yu S, Xiang Y, Zhou W. Identifying propagation sources in networks: state-of-the-art and comparative studies. IEEE Commun Surv Tutorials. 2017;19(1):465-481.
106. Wang Y, Wen S, Xiang Y, Zhou W. Modeling the propagation of worms in networks: a survey. IEEE Commun Surv Tutorials. 2014;16(2):942-960.
107. Stojmenovic I, Wen S, Huang X, Luan H. An overview of fog computing and its security issues. Concurr Comput Pract Exp. 2016;28(10):2991-3005.
108. Wen S, Haghighi MS, Chen C, Xiang Y, Zhou W, Jia W. Sword with two edges: propagation studies on both positive and negative information in online social networks. IEEE Trans Comput. 2015;64(3):640-653.
109. Wen S, Zhou W, Zhang J, Xiang Y, Zhou W, Jia W. Modeling propagation dynamics of social network worms. IEEE Trans Parallel Distrib Syst. 2013;24(8):1633-1643.
110. Sun Y, Nanda S, Jaeger T. Security-as-a-service for microservices-based cloud applications. Paper presented at: 2015 7th IEEE International Conference on Cloud Computing Technology and Science (CloudCom); 2015; Vancouver, Canada.
111. Barnum S, Gegick M, Michael C. Defense in depth. 2005. https://www.us-cert.gov/bsi/articles/knowledge/principles/defense-in-depth
112. Gegick M, Barnum S. Never assuming that your secrets are safe. 2005. https://www.us-cert.gov/bsi/articles/knowledge/principles/never-assuming-that-your-secrets-are-safe
113. Gegick M, Barnum S. Securing the weakest link. 2005. https://www.us-cert.gov/bsi/articles/knowledge/principles/securing-the-weakest-link
114. Callegati F, Cerroni W, Ramilli M. Man-in-the-middle attack to the HTTPS protocol. IEEE Secur Priv. 2009;7(1):78-81.
115. Spring. Spring Cloud Security. 2017. https://cloud.spring.io/spring-cloud-security/
116. Barik RC, Changder S, Sahu SS. Image texture-based new cryptography scheme using advanced encryption standard. In: Behera H, Mohapatra D, eds. Computational Intelligence in Data Mining. Singapore: Springer; 2017.
117. Zheng X, Julien C, Kim M, Khurshid S. Perceptions on the state of the art in verification and validation in cyber-physical systems. IEEE Syst J. 2015;11.
118. Zheng X, Julien C, Podorozhny R, Cassez F, Rakotoarivelo T. Efficient and scalable runtime monitoring for cyber-physical system. IEEE Syst J. 2016.
119. Zheng X, Julien C, Chen H, Podorozhny R, Cassez F. Real-Time Simulation Support for Runtime Verification of Cyber-Physical Systems. ACM Trans Embed Comput Syst (TECS). 2017;16(4):106.
120. Zheng X, Julien C, Podorozhny R, Cassez F. Braceassertion: runtime verification of cyber-physical systems. Paper presented at: 2015 IEEE 12th International Conference on Mobile Ad Hoc and Sensor Systems (MASS), IEEE; 2015; Dallas, Texas.
121. Zheng X, Pan L, Chen H, Di Pietro R, Batten L. A testbed for security analysis of modern vehicle systems. Paper presented at: 2017 IEEE Trustcom/BigDataSE/ICESS, IEEE; 2017; Sydney, Australia.