{"id":"https://openalex.org/W7124145573","doi":"https://doi.org/10.1109/icpads67057.2025.11322999","title":"Improving the Security of Service Mesh in Kubernetes","display_name":"Improving the Security of Service Mesh in Kubernetes","publication_year":2025,"publication_date":"2025-12-14","ids":{"openalex":"https://openalex.org/W7124145573","doi":"https://doi.org/10.1109/icpads67057.2025.11322999"},"language":null,"primary_location":{"id":"doi:10.1109/icpads67057.2025.11322999","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icpads67057.2025.11322999","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE 31th International Conference on Parallel and Distributed Systems (ICPADS)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5028120551","display_name":"Amir Javadpour","orcid":"https://orcid.org/0000-0002-4932-1660"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Amir Javadpour","raw_affiliation_strings":["ICTFICIAL Oy,Espoo,Finland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"ICTFICIAL Oy,Espoo,Finland","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5122997131","display_name":"Forough Ja'fari","orcid":null},"institutions":[{"id":"https://openalex.org/I133529467","display_name":"Sharif University of Technology","ror":"https://ror.org/024c2fq17","country_code":"IR","type":"education","lineage":["https://openalex.org/I133529467"]}],"countries":["IR"],"is_corresponding":false,"raw_author_name":"Forough Ja'fari","raw_affiliation_strings":["Sharif University of Technology,Department of Computer Engineering,Iran"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Sharif University of Technology,Department of Computer Engineering,Iran","institution_ids":["https://openalex.org/I133529467"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5087043869","display_name":"Tarik Taleb","orcid":"https://orcid.org/0000-0003-1119-1239"},"institutions":[{"id":"https://openalex.org/I904495901","display_name":"Ruhr University Bochum","ror":"https://ror.org/04tsk2644","country_code":"DE","type":"education","lineage":["https://openalex.org/I904495901"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Tarik Taleb","raw_affiliation_strings":["Ruhr University Bochum,Faculty of Electrical Engineering and Information Technology,Bochum,Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ruhr University Bochum,Faculty of Electrical Engineering and Information Technology,Bochum,Germany","institution_ids":["https://openalex.org/I904495901"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5121348527","display_name":"Chafika Benza\u00efd","orcid":null},"institutions":[{"id":"https://openalex.org/I98381234","display_name":"University of Oulu","ror":"https://ror.org/03yj89h83","country_code":"FI","type":"education","lineage":["https://openalex.org/I98381234"]}],"countries":["FI"],"is_corresponding":false,"raw_author_name":"Chafika Benza\u00efd","raw_affiliation_strings":["University of Oulu,Faculty of Information Technology and Electrical Engineering,Oulu,Finland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Oulu,Faculty of Information Technology and Electrical Engineering,Oulu,Finland","institution_ids":["https://openalex.org/I98381234"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5122999580","display_name":"Luis Rosa","orcid":null},"institutions":[{"id":"https://openalex.org/I4210123903","display_name":"OneSource (Portugal)","ror":"https://ror.org/02hkdyy22","country_code":"PT","type":"company","lineage":["https://openalex.org/I4210123903"]}],"countries":["PT"],"is_corresponding":false,"raw_author_name":"Luis Rosa","raw_affiliation_strings":["OneSource, Consultoria Informática,Portugal"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"OneSource, Consultoria Informática,Portugal","institution_ids":["https://openalex.org/I4210123903"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5123028074","display_name":"Luis Cordeiro","orcid":null},"institutions":[{"id":"https://openalex.org/I4210123903","display_name":"OneSource (Portugal)","ror":"https://ror.org/02hkdyy22","country_code":"PT","type":"company","lineage":["https://openalex.org/I4210123903"]}],"countries":["PT"],"is_corresponding":false,"raw_author_name":"Luis Cordeiro","raw_affiliation_strings":["OneSource, Consultoria Informática,Portugal"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"OneSource, Consultoria Informática,Portugal","institution_ids":["https://openalex.org/I4210123903"]}]}],"institutions":[],"countries_distinct_count":4,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"8"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.34790000319480896,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.34790000319480896,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.2312999963760376,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10273","display_name":"IoT and Edge/Fog Computing","score":0.06689999997615814,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/microservices","display_name":"Microservices","score":0.7264999747276306},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.6394000053405762},{"id":"https://openalex.org/keywords/eavesdropping","display_name":"Eavesdropping","score":0.566100001335144},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.5600000023841858},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.5077999830245972},{"id":"https://openalex.org/keywords/service","display_name":"Service (business)","score":0.45820000767707825},{"id":"https://openalex.org/keywords/application-layer","display_name":"Application layer","score":0.45239999890327454},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.429500013589859},{"id":"https://openalex.org/keywords/flexibility","display_name":"Flexibility (engineering)","score":0.39160001277923584}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7394000291824341},{"id":"https://openalex.org/C2778505942","wikidata":"https://www.wikidata.org/wiki/Q18344624","display_name":"Microservices","level":3,"score":0.7264999747276306},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.6851000189781189},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.6394000053405762},{"id":"https://openalex.org/C2776788033","wikidata":"https://www.wikidata.org/wiki/Q320769","display_name":"Eavesdropping","level":2,"score":0.566100001335144},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.5600000023841858},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.5077999830245972},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5019999742507935},{"id":"https://openalex.org/C2780378061","wikidata":"https://www.wikidata.org/wiki/Q25351891","display_name":"Service (business)","level":2,"score":0.45820000767707825},{"id":"https://openalex.org/C190793597","wikidata":"https://www.wikidata.org/wiki/Q189768","display_name":"Application layer","level":3,"score":0.45239999890327454},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.429500013589859},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.4018000066280365},{"id":"https://openalex.org/C2780598303","wikidata":"https://www.wikidata.org/wiki/Q65921492","display_name":"Flexibility (engineering)","level":2,"score":0.39160001277923584},{"id":"https://openalex.org/C116537","wikidata":"https://www.wikidata.org/wiki/Q2169973","display_name":"Service provider","level":3,"score":0.36079999804496765},{"id":"https://openalex.org/C33884865","wikidata":"https://www.wikidata.org/wiki/Q1254335","display_name":"Cryptographic protocol","level":3,"score":0.3549000024795532},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.3467999994754791},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.3303999900817871},{"id":"https://openalex.org/C2779227376","wikidata":"https://www.wikidata.org/wiki/Q6505497","display_name":"Layer (electronics)","level":2,"score":0.3050000071525574},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.30300000309944153},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.2971999943256378},{"id":"https://openalex.org/C148176105","wikidata":"https://www.wikidata.org/wiki/Q206494","display_name":"Transport Layer Security","level":3,"score":0.2944999933242798},{"id":"https://openalex.org/C144097018","wikidata":"https://www.wikidata.org/wiki/Q4329404","display_name":"Service discovery","level":3,"score":0.2919999957084656},{"id":"https://openalex.org/C108548466","wikidata":"https://www.wikidata.org/wiki/Q7455767","display_name":"Service layer","level":3,"score":0.2752000093460083},{"id":"https://openalex.org/C57041688","wikidata":"https://www.wikidata.org/wiki/Q220644","display_name":"Service-oriented architecture","level":3,"score":0.27320000529289246},{"id":"https://openalex.org/C15927051","wikidata":"https://www.wikidata.org/wiki/Q246593","display_name":"Cryptographic primitive","level":4,"score":0.2669000029563904},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.25999999046325684},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.25589999556541443},{"id":"https://openalex.org/C97300177","wikidata":"https://www.wikidata.org/wiki/Q1994744","display_name":"Data as a service","level":3,"score":0.250900000333786}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icpads67057.2025.11322999","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icpads67057.2025.11322999","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE 31th International Conference on Parallel and Distributed Systems (ICPADS)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","score":0.6135985851287842,"id":"https://metadata.un.org/sdg/9"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":7,"referenced_works":["https://openalex.org/W2970578259","https://openalex.org/W2980727099","https://openalex.org/W4312748955","https://openalex.org/W4389776445","https://openalex.org/W4392364798","https://openalex.org/W4401879222","https://openalex.org/W4403678433"],"related_works":[],"abstract_inverted_index":{"Bringing":[0],"flexibility":[1,98],"and":[2,19,35,53,97,123],"scalability":[3,96],"to":[4,11,28,61,69,147],"5G":[5],"networks":[6],"has":[7,37],"expanded":[8],"networking":[9],"technology":[10],"facilitate":[12],"the":[13,56,62,65,71,74,81,95,134,138,148,154],"split":[14],"of":[15,73,84,121,150],"service":[16,33,47,66,127],"into":[17],"microservices":[18,152],"how":[20],"they":[21],"can":[22,112],"communicate.":[23],"The":[24,45,129],"network":[25],"layer":[26,68],"dedicated":[27],"this":[29,78,101],"communication":[30],"is":[31,87],"called":[32],"mesh,":[34],"it":[36],"become":[38],"a":[39,107],"new":[40],"target":[41],"for":[42],"cyber":[43],"adversaries.":[44],"existing":[46],"mesh":[48,67],"infrastructures,":[49],"such":[50],"as":[51,106],"Istio":[52],"NGINX,":[54],"apply":[55,153],"mutual":[57],"TLS":[58],"(mTLS)":[59],"protocol":[60],"connections":[63],"in":[64,77],"protect":[70],"confidentiality":[72],"data":[75],"transferred":[76],"layer.":[79],"However,":[80],"main":[82],"challenge":[83],"implementing":[85],"mTLS":[86],"its":[88],"resource":[89],"restriction,":[90],"which":[91],"significantly":[92],"conflicts":[93],"with":[94],"goals.":[99],"Therefore,":[100],"paper":[102],"proposes":[103],"an":[104],"Encryption":[105],"Service":[108],"(EaaS)":[109],"framework":[110,136],"that":[111,133],"be":[113],"implemented":[114],"on":[115],"Kubernetes,":[116],"mitigating":[117],"man-in-themiddle,":[118],"(distributed)":[119],"denial":[120],"service,":[122],"eavesdropping":[124],"attacks":[125],"against":[126],"mesh.":[128],"implementation":[130],"results":[131],"show":[132],"proposed":[135],"decreases":[137],"adversary's":[139],"success":[140],"rate":[141],"by":[142,157],"at":[143],"least":[144],"45%":[145],"compared":[146],"cases":[149],"having":[151],"cryptographic":[155],"processes":[156],"themselves.":[158]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-07-16T13:24:37.021932","created_date":"2026-01-15T00:00:00"}