Security Consideration of Each Layers in a Cloud-Native Environment

Abstract

With the advent of 5G environments, the importance of ‘Cloud Native’ is increasing. Cloud native refers to an approach to building and running applications that utilizes a cloud computing delivery model instead of an on-premise data center. Cloud-native takes full advantage of the cloud’s advantages, including scalability, buildability, manageability, and unlimited on-demand computing power. To this end, it adopts a microservices structure, dividing the application into as few units as possible and having these granular units run as containers. In addition, cloud-native systems aim to reduce productivity, business agility, and cost by introducing a devops strategy and agile methodology for immediate service execution and frequent and continuous upgrade according to market and service demands, and applying it to software development. In this regard, containers which is a core component of cloud native can produce advantages in efficiency and scalability, as virtualized objects are light and can be executed quickly. However, security may be relatively weak compared to virtual machines with independent operating systems. In this paper, we explore security threats and solutions for container platforms, focusing on ‘cloud native security’ defined by the Cloud Native Computing Foundation.