From Edge to Cloud: Securing Distributed Containerized Applications
The adoption of containers in complex software systems is rapidly increasing, due to their flexibility that facilitates integration, scalability, and dynamic deployment. However, assessing the security of container-based applications remains challenging in distributed and heterogeneous environments: the scale and diversity of deployment scenarios call for sophisticated security evaluation and verification techniques. In this paper, we present Project SecCo (Securing Containers), whose aim is to develop an innovative framework for the systematic integration of security assessment services into the Continuous Integration and Continuous Delivery (CI/CD) DevOps pipeline. The framework orchestrates automatic services to prevent and reduce vulnerabilities in the design, implementation, and deployment phases, and to mitigate runtime attacks. This allows developers and IT operators to focus on integration and delivery, reducing security management tasks. Finally, the paper highlights the main research challenges for realizing this vision.
Authors
- Massimo Ficco
- Roberto Carbone (ORCID: https://orcid.org/0000-0003-2853-4269)
- Giacomo Benedetti (ORCID: https://orcid.org/0000-0003-2609-6787)
- Alberto Falcone (ORCID: https://orcid.org/0000-0002-2660-1432)
- Marino Miculan (ORCID: https://orcid.org/0000-0003-0755-3444)
- Roberto Doriguzzi-Corin (ORCID: https://orcid.org/0000-0002-8001-7835)
- Giovanni Merlino (ORCID: https://orcid.org/0000-0002-1469-7860)
- Massimo Guarascio (ORCID: https://orcid.org/0000-0001-7711-9833)
- Antonio Puliafito (ORCID: https://orcid.org/0000-0003-0385-2711)
- Maurizio Giacobbe (ORCID: https://orcid.org/0000-0001-6178-7132)
- Marc A. Baldo (ORCID: https://orcid.org/0000-0003-2201-5257)
- Massimiliano Rak (ORCID: https://orcid.org/0000-0001-6708-4032)
- Luca Caviglione (ORCID: https://orcid.org/0000-0001-6466-3354)
- Vincenzo Riccio (ORCID: https://orcid.org/0000-0002-6229-8231)
- Luca Verderame (ORCID: https://orcid.org/0000-0001-7155-7429)
- Giorgia Bolognesi
- Enrico Pezzano
Institutions
- University of Messina (IT)
- University of Udine (IT)
- University of Salerno (IT)
- Fondazione Bruno Kessler (IT)
- National Research Council (IT)
- University of Naples Federico II (IT)
- University of Genoa (IT)
Publication Details
- Published
- 2025-06-30
- DOI
- https://doi.org/10.1109/eurospw67616.2025.00077
- Citations
- 1
- Primary Topic
- Cloud Computing and Resource Management
- Type
- article
- Field-Weighted Citation Impact
- 3.25