Sigurnost mikrousluga temeljenih na spremnicima

master's thesis

• Title (english): Security of microservices based on containers
• Author: Tin Barić
• Mentor: Dragan Jevtić (mentor)
• Committee member: Dragan Jevtić (predsjednik povjerenstva)
• Committee member: Miljenko Mikuc (član povjerenstva)
• Committee member: Marin Vuković (član povjerenstva)
• Granter: University of Zagreb; Faculty of Electrical Engineering and Computing; Zagreb
• Defense date and country: 2021-07-08, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Computing
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Electrical Engineering

Abstract

Principi, postupci i korištene tehnologije u razvoju softvera konstantno se mijenjaju. Ovaj rad opisuje jednu veliku promjenu u strukturi izvršavanja softvera. Ta promjena je korištenje manjih, modularnih, slabo povezanih mikrousluga. Jednostavnost korištenja mikrousluga omogućio je razvoj spremnika. Osim uvoda u rad spremnika i mikrousluga, u radu je dan naglasak na komponente sigurnosti kojima, korištenje mikrousluga u razvoju, podiže razinu. Također je opisana važnost popratnih alata orkestriraju rad velikog broja usluga i spremnika. Tvrdnje su potom pokazane na primjeru testne aplikacije i okoline za praćenje metričkih podataka performansa te aplikacije. Izvedene su se razne akcije nad čvorovima koji pokreću aplikaciju, i mikrouslugama i zapisano je promatrano ponašanje.

Abstract (english)

The principles, procedures and technologies used in software development are constantly changing. This paper describes one major change in the software execution structure. This change is the use of smaller, modular, loosely coupled microservices. The ease of use of microservices has enabled the development of containers. In addition to the introduction to the operation of containers and microservices, the paper emphasizes the security components for which, the use of microservices in development, raises the level. The importance of accompanying tools orchestrating the work of a large number of services and containers is also described. The claims are then illustrated by the example of a test application and an environment for monitoring performance metrics. Various actions were performed on the nodes that run the application, and microservices and the observed behavior was recorded.

• Keywords: Mikrousluga; spremnik; sigurnost; Docker; roj; čvor; Prometheus; Grafana; stabilnost; raspoloživost
• Keywords (english): Microservice; container; security; Docker; swarm; node; Prometheus; Grafana; stability; availability
• Language: croatian
• URN:NBN: urn:nbn:hr:168:826625
• Study programme: Title: Information and Communication Technology; Study programme type: university; Study level: graduate; Academic / professional title: magistar/magistra inženjer/inženjerka informacijske i komunikacijske tehnologije (magistar/magistra inženjer/inženjerka informacijske i komunikacijske tehnologije)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Closed access
• Created on: 2023-01-13 11:44:47