{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,7]],"date-time":"2026-05-07T15:36:36Z","timestamp":1778168196444,"version":"3.51.4"},"publisher-location":"Cham","reference-count":40,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783030630850","type":"print"},{"value":"9783030630867","type":"electronic"}],"license":[{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2020]]},"DOI":"10.1007\/978-3-030-63086-7_9","type":"book-chapter","created":{"date-parts":[[2020,12,11]],"date-time":"2020-12-11T08:07:25Z","timestamp":1607674045000},"page":"140-151","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":10,"title":["MisMesh: Security Issues and Challenges in Service Meshes"],"prefix":"10.1007","author":[{"given":"Dalton A.","family":"Hahn","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Drew","family":"Davidson","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Alexandru G.","family":"Bardas","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2020,12,12]]},"reference":[{"key":"9_CR1","unstructured":"HashiCorp. Download Consul. https:\/\/www.consul.io\/downloads. Accessed 06 2020"},{"issue":"3","key":"9_CR2","doi-asserted-by":"publisher","first-page":"42","DOI":"10.1109\/MS.2016.64","volume":"33","author":"A Balalaie","year":"2016","unstructured":"Balalaie, A., Heydarnoori, A., Jamshidi, P.: Microservices architecture enables DevOps: migration to a cloud-native architecture. IEEE Softw. 33(3), 42\u201352 (2016)","journal-title":"IEEE Softw."},{"key":"9_CR3","doi-asserted-by":"crossref","unstructured":"Chen, L.: Microservices: architecting for continuous delivery and DovOps. In: 2018 IEEE International Conference on Software Architecture (ICSA), pp. 39\u2013397, April 2018","DOI":"10.1109\/ICSA.2018.00013"},{"key":"9_CR4","unstructured":"Cherny, M., Dulce, S.: Well, that escalated quickly! how abusing docker api led to remote code execution, same origin bypass and persistence in the hypervisor via shadow containers. In: BlackHat 17 (2017)"},{"key":"9_CR5","unstructured":"Christopherson, J.: Spaceflight uses HashiCorp consul for service discovery and runtime configuration in their hub-and-spoke network architecture. https:\/\/www.hashicorp.com\/blog\/spaceflight-uses-hashicorp-consul-for-service-discovery-and-real-time-updates-to-their-hub-and-spoke-network-architecture\/. Accessed 02 2020"},{"issue":"5","key":"9_CR6","doi-asserted-by":"publisher","first-page":"54","DOI":"10.1109\/MCC.2016.100","volume":"3","author":"T Combe","year":"2016","unstructured":"Combe, T., Martin, A., Di Pietro, R.: To docker or not to docker: a security perspective. IEEE Cloud Comput. 3(5), 54\u201362 (2016)","journal-title":"IEEE Cloud Comput."},{"key":"9_CR7","doi-asserted-by":"crossref","unstructured":"Csikor, L., Rothenberg, C., Pezaros, D.P., Schmid, S., Toka, L., R\u00e9tv\u00e1ri, G.: Policy injection: a cloud dataplane DoS attack. In: Proceedings of the ACM SIGCOMM 2018 Conference on Posters and Demos, pp. 147\u2013149 (2018)","DOI":"10.1145\/3234200.3234250"},{"key":"9_CR8","unstructured":"Das, A., Gupta, I., Motivala, A.: SWIM: scalable weakly-consistent infection-style process group membership protocol. In: Proceedings International Conference on Dependable Systems and Networks, pp. 303\u2013312. IEEE (2002)"},{"key":"9_CR9","unstructured":"Fishner, K.: How BitBrains\/ASP4all uses Consul for Continuous Deployment across Development, Testing, Acceptance, and Production. https:\/\/www.hashicorp.com\/blog\/how-bitbrains-asp4all-uses-consul\/. Accessed 02 2020"},{"key":"9_CR10","unstructured":"Fishner K.: Using Consul at Bol.com, the Largest Online Retailer in the Netherlands and Belgium. https:\/\/www.hashicorp.com\/blog\/using-consul-at-bol-com-the-largest-online-retailer-in-the-netherlands-and-belgium\/. Accessed 02 2020"},{"key":"9_CR11","unstructured":"Cloud Native Computing Foundation. CNCF Cloud Native Interactive Landscape. https:\/\/landscape.cncf.io. Accessed 01 2020"},{"key":"9_CR12","doi-asserted-by":"crossref","unstructured":"Gupta, D., Saia, J., Young, M.: Peace through superior puzzling: an asymmetric sybil defense. In: 2019 IEEE International Parallel and Distributed Processing Symposium (IPDPS), pp. 1083\u20131094. IEEE (2019)","DOI":"10.1109\/IPDPS.2019.00115"},{"key":"9_CR13","unstructured":"HashiCorp. Consul by HashiCorp. https:\/\/www.consul.io\/index.html. Accessed 01 2020"},{"key":"9_CR14","unstructured":"HashiCorp. Consul Docs. https:\/\/www.consul.io\/docs. Accessed 02 2020"},{"key":"9_CR15","unstructured":"HashiCorp. Github hashicorp\/consul. https:\/\/github.com\/hashicorp\/consul. Accessed 02 2020"},{"key":"9_CR16","unstructured":"Hashicorp. Modern Service Networking for Cloud and Microservices. https:\/\/www.hashicorp.com\/resources\/modern-service-networking-cloud-microservices. Accessed 01 2020"},{"key":"9_CR17","unstructured":"HashiCorp. Serf. https:\/\/www.serf.io\/. Accessed 02 2020"},{"key":"9_CR18","unstructured":"HashiCorp. Vault by HashiCorp. https:\/\/www.vaultproject.io\/. Accessed 02 2020"},{"key":"9_CR19","unstructured":"Buoyant Inc., Linkerd. https:\/\/linkerd.io. Accessed 01 2020"},{"key":"9_CR20","unstructured":"Docker Inc., Docker Home. https:\/\/docker.io. Accessed 02 2020"},{"key":"9_CR21","unstructured":"Istio. Github istio\/istio. https:\/\/github.com\/istio\/istio. Accessed 02 2020"},{"key":"9_CR22","unstructured":"Istio. Istio. https:\/\/istio.io. Accessed 01 2020"},{"key":"9_CR23","unstructured":"Istio. Istio Docs. https:\/\/istio.io\/latest\/docs\/. Accessed 02 2020"},{"issue":"3","key":"9_CR24","doi-asserted-by":"publisher","first-page":"24","DOI":"10.1109\/MS.2018.2141039","volume":"35","author":"P Jamshidi","year":"2018","unstructured":"Jamshidi, P., Pahl, C., Mendon\u00e7a, N.C., Lewis, J., Tilkov, S.: Microservices: the journey so far and challenges ahead. IEEE Softw. 35(3), 24\u201335 (2018)","journal-title":"IEEE Softw."},{"key":"9_CR25","unstructured":"Grant Joy. Distil Networks securely stores and manages all their secrets with Vault and Consul. https:\/\/www.hashicorp.com\/blog\/distil-networks-securely-stores-and-manages-all-their-secrets-with-vault-and-consul\/. Accessed 02 2020"},{"key":"9_CR26","unstructured":"Kubernetes. Kubernetes - Production-Grade Container Orchestration. https:\/\/kubernetes.io\/. Accessed 01 2020"},{"key":"9_CR27","unstructured":"Kubernetes. Kubernetes Pods. https:\/\/kubernetes.io\/docs\/concepts\/workloads\/pods\/. Accessed 02 2020"},{"key":"9_CR28","unstructured":"Lewis, I.: What are Kubernetes Pods Anyway? https:\/\/www.ianlewis.org\/en\/what-are-kubernetes-pods-anyway. Accessed 02 2020"},{"key":"9_CR29","doi-asserted-by":"crossref","unstructured":"Lin, X., Lei, L., Wang, Y., Jing, J., Sun, K., Zhou, Q.: A measurement study on linux container security: attacks and countermeasures. In: Proceedings of the 34th Annual Computer Security Applications Conference, pp. 418\u2013429 (2018)","DOI":"10.1145\/3274694.3274720"},{"key":"9_CR30","doi-asserted-by":"publisher","first-page":"30","DOI":"10.1016\/j.comcom.2018.03.011","volume":"122","author":"A Martin","year":"2018","unstructured":"Martin, A., Raponi, S., Combe, T., Di Pietro, R.: Docker ecosystem-vulnerability analysis. Comput. Commun. 122, 30\u201343 (2018)","journal-title":"Comput. Commun."},{"key":"9_CR31","doi-asserted-by":"crossref","unstructured":"Rastogi, V., Davidson, D., De Carli, L., Jha, S., McDaniel, P.: Cimplifier: automatically debloating containers. In: Proceedings of the 2017 11th Joint Meeting on Foundations of Software Engineering, pp. 476\u2013486 (2017)","DOI":"10.1145\/3106237.3106271"},{"issue":"1","key":"9_CR32","doi-asserted-by":"publisher","first-page":"304","DOI":"10.1109\/TNSM.2017.2775061","volume":"15","author":"E Sakic","year":"2018","unstructured":"Sakic, E., Kellerer, W.: Response time and availability study of RAFT consensus in distributed SDN control plane. IEEE Trans. Netw. Serv. Manage. 15(1), 304\u2013318 (2018)","journal-title":"IEEE Trans. Netw. Serv. Manage."},{"issue":"7","key":"9_CR33","doi-asserted-by":"publisher","first-page":"388","DOI":"10.1145\/361011.361067","volume":"17","author":"JH Saltzer","year":"1974","unstructured":"Saltzer, J.H.: Protection and the control of information sharing in multics. Commun. ACM 17(7), 388\u2013402 (1974)","journal-title":"Commun. ACM"},{"key":"9_CR34","doi-asserted-by":"crossref","unstructured":"Shu, R., Gu, X., Enck, W.: A study of security vulnerabilities on docker hub. In: Proceedings of the Seventh ACM on Conference on Data and Application Security and Privacy, pp. 269\u2013280. Association for Computing Machinery, New York (2017)","DOI":"10.1145\/3029806.3029832"},{"issue":"5","key":"9_CR35","doi-asserted-by":"publisher","first-page":"16","DOI":"10.1109\/MCC.2016.109","volume":"3","author":"A Singleton","year":"2016","unstructured":"Singleton, A.: The economics of microservices. IEEE Cloud Comput. 3(5), 16\u201320 (2016)","journal-title":"IEEE Cloud Comput."},{"key":"9_CR36","unstructured":"SSH.COM. Ssh (secure shell). https:\/\/www.ssh.com\/ssh. Accessed 02 2020"},{"key":"9_CR37","doi-asserted-by":"crossref","unstructured":"Sukhwani, H., Mart\u00ednez, J.M., Chang, X., Trivedi, K.S., Rindos, A.: Performance modeling of PBFT consensus process for permissioned blockchain network (hyperledger fabric). In: 2017 IEEE 36th Symposium on Reliable Distributed Systems (SRDS), pp. 253\u2013255. IEEE (2017)","DOI":"10.1109\/SRDS.2017.36"},{"key":"9_CR38","doi-asserted-by":"crossref","unstructured":"Sun, Y., Nanda, S., Jaeger, T.: Security-as-a-service for microservices-based cloud applications. In: 2015 IEEE 7th International Conference on Cloud Computing Technology and Science (CloudCom), pp. 50\u201357. IEEE (2015)","DOI":"10.1109\/CloudCom.2015.93"},{"key":"9_CR39","unstructured":"Thomson, R.: LogicMonitor uses terraform, packer & consul for disaster recovery environments. https:\/\/www.hashicorp.com\/blog\/logic-monitor-uses-terraform-packer-and-consul-for\/. Accessed 02 2020"},{"key":"9_CR40","doi-asserted-by":"crossref","unstructured":"Yarygina, T., Bagge, A.H.: Overcoming security challenges in microservice architectures. In 2018 IEEE Symposium on Service-Oriented System Engineering (SOSE), pp. 11\u201320. IEEE (2018)","DOI":"10.1109\/SOSE.2018.00011"}],"container-title":["Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering","Security and Privacy in Communication Networks"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-63086-7_9","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,4,24]],"date-time":"2021-04-24T12:08:14Z","timestamp":1619266094000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-030-63086-7_9"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020]]},"ISBN":["9783030630850","9783030630867"],"references-count":40,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-63086-7_9","relation":{},"ISSN":["1867-8211","1867-822X"],"issn-type":[{"value":"1867-8211","type":"print"},{"value":"1867-822X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020]]},"assertion":[{"value":"12 December 2020","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"SecureComm","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Security and Privacy in Communication Systems","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Washington, WA","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"USA","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2020","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"21 October 2020","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"23 October 2020","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"16","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"securecomm2020","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/securecomm.eai-conferences.org\/2020\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Double-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Confy","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"120","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"50","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"0","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"42% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"2,86","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"The conference was held virtually due to COVID-19 pandemic.","order":10,"name":"additional_info_on_review_process","label":"Additional Info on Review Process","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}