Security thoughts on modern software development

A survey about microservice security

Master-thesis

Abstract

With the advent of container solutions and cloud computing, micro services are becoming more popular. But what are micro services? Why are they becoming so popular and why are they changing the mechanics of modern software development? What are their advantages and disadvantages, also in terms of security, in comparison to monolithic services? What are the challenges to overcome microservice security and what are the existing solutions to them? Microservice development has increased incredibly since its beginning in 2007, but still no complete guideline to a secure development exists, which makes in nearly impossible to small companies to really create trustful and secure services; even high budget companies do basically what they feel like, and share no standard as there is none. This work collects properties of monolithic services and microservices and collects security challenges that arise when using a microservice approach. Existing solutions to these challenges are presented and discussed, if they are applicable. This work distinguishes between general concepts and concrete implementations. The collection results in an decision tree, whether or not to use microservices and if so, a checklist what security aspects needs to be considered when using them.

Cite

@mastersthesis{lackner2021microservices,
  article={Security thoughts on modern software development},
  author={Paul Lackner},
  school={UAS St. Pölten},
  year={2021}
}

Further Links

Download here

Published: 2021-06-18