A Fault and Intrusion Tolerance Framework for Containerized Environments: A Specification-Based Error Detection Approach

Abstract
Container-based virtualization has gained momentum over the past few years thanks to its lightweight nature and support for agility. However, its appealing features come at the price of a reduced isolation level compared to the traditional host-based virtualization techniques, exposing workloads to various faults, such as co-residency attacks like container escape. In this work, we propose to leverage the automated management capabilities of containerized environments to derive a Fault and Intrusion Tolerance (FIT) framework based on error detection-recovery and fault treatment. Namely, we aim at deriving a specification-based error detection mechanism at the host level to systematically and formally capture security state errors indicating breaches potentially caused by malicious containers. Although the paper focuses on security side use cases, results are logically extendable to accidental faults. Our aim is to immunize the target environments against accidental and malicious faults and preserve their core dependability and security properties.

Citation
Madi, T., & Esteves-Verissimo, P. (2022). A Fault and Intrusion Tolerance Framework for Containerized Environments: A Specification-Based Error Detection Approach. 2022 International Workshop on Secure and Reliable Microservices and Containers (SRMC). https://doi.org/10.1109/srmc57347.2022.00005

Publisher
IEEE

Conference/Event Name
2022 International Workshop on Secure and Reliable Microservices and Containers (SRMC)

DOI
10.1109/srmc57347.2022.00005

Additional Links
https://ieeexplore.ieee.org/document/9973124/

Permanent link to this record