云原生安全威胁分析与能力建设白皮书
目 录
一、云原生安全概述................................................................................................9
1.1 云原生及云原生安全..................................................................................... 9
1.1.1 云原生 ................................................................................................... 10
1.1.2 云原生安全 ........................................................................................... 12
1.2 云原生安全发展...........................................................................................14
1.3 云原生安全风险...........................................................................................17
二、云原生关键技术威胁全景..............................................................................19
2.1 云原生安全威胁分析...................................................................................19
2.2 路径 1：镜像攻击 ....................................................................................... 21
2.2.1 镜像投毒攻击 ........................................................................................21
2.2.2 镜像仓库攻击 ........................................................................................22
2.2.3 中间人攻击 ........................................................................................... 22
2.2.4 敏感信息泄露攻击 ................................................................................22
2.2.5 针对镜像不安全配置的攻击 ................................................................ 22
2.3 路径 2：容器攻击 ....................................................................................... 23
2.3.1 守护进程攻击 ........................................................................................23
2.3.2 容器提权和逃逸攻击 ............................................................................24
2.3.3 拒绝服务攻击 ........................................................................................25
