Exploiting and Securing Docker containers and Kubernetes pods from a MitM attack

2026-09-14

AI Summary

研究探讨了保护Docker容器和Kubernetes Pod免受中间人攻击的方法，通过使用通信和加密原语的概念模型、AnBxJ Java安全库及七层防火墙，并基于系统性审查提出了零信任架构。

Abstract

PURPOSE - Workloads in containers, such as Docker containers and Kubernetes pods, are vulnerable to many of the same attacks as workloads in non-container environments, including phishing, application exploits and network intrusions. This systematic review and design-and-creation study explores techniques for securing containerised-based operating systems against Man-in-the-Middle (MitM) attacks. The proposed framework uses a conceptual model for representing communication and cryptographic primitives, together with the AnBxJ Java security library and container firewalls operating at layer 7 of the OSI model. The study addresses the question: How can containerised-based operating systems be effectively secured from Man-in-the-Middle attacks? It aims to support practitioners in protecting Docker and Kubernetes deployments by systematising security practices and applying a zero trust architecture. METHODOLOGY - The research uses a Systematic Review (SR) based on the Preferred Reporting Items for Systematic Reviews and Meta-Analyses (PRISMA), bringing together evidence from studies addressing the same research topic. FINDINGS - Success factors were identified, and a security mechanism was successfully implemented in a containerised-based operating system scenario. VALUE - The findings may help practitioners protect Kubernetes and Docker installations by systematising container security practices and providing a zero trust architecture for containerised-based operating systems.

Problem

• Docker containers
• Kubernetes pods
• Man-in-the-Middle attacks
• containerised-based operating systems

Innovation

• Man-in-the-Middle Attacks
• Zero Trust Architecture
• Container Security