Shadowkube: enhancing Kubernetes security with behavioral monitoring and honeypot integration

Qingwang Chen, Yuling Liu, Ru Tan, Ze Jin, Juxin Xiao, Xiao Wang, Fangjiao Zhang, Qixu Liu

Abstract: As cloud-native technologies continue to evolve, containerization and orchestration have become fundamental for deploying microservices. However, this advancement introduces significant security vulnerabilities, particularly due to vulnerabilities and misconfigurations that grant attackers excessive control over clusters. Existing works, including model-based learning and static rule-based approaches, suffer from limitations such as false positives and maintenance overhead, which pose significant challenges to cloud-native security.

External IDs:dblp:journals/cybersec/ChenLTJXWZL25