To Security and Beyond: On The Impacts of Microservice Security Smells and Refactorings

Francisco Ponce, Jacopo Soldani, Carla Taramasco, Hernan Astudillo, Antonio Brogi

Producción científica: Contribución a los tipos de informe/libroContribución a la conferenciarevisión exhaustiva

Resumen

Microservices gained momentum in enterprise IT, as they enable building cloud-native applications. At the same time, they come with new security challenges, including security smells, viz., symptoms of bad (though often unintentional) design decisions that might affect application security. This study aims to explore the impacts of microservice security smells- and of the refactorings known to mitigate their effects-beyond security. In particular, we systematically elicit possible impacts of smells and refactorings on applications' maintainability, performance efficiency, and adherence to microservices' key design principles. We then validate the elicited impacts by means of an online survey targeting experienced practitioners and researchers. Our main contributions include 35 validated impacts, and a discussion of the survey results geared towards analyzing the (mis)alignment between practitioners and researchers.

Idioma originalInglés
Título de la publicación alojadaProceedings - 2023 49th Latin American Computing Conference, CLEI 2023
EditorialInstitute of Electrical and Electronics Engineers Inc.
ISBN (versión digital)9798350318876
DOI
EstadoPublicada - 2023
Evento49th Latin American Computing Conference, CLEI 2023 - La Paz, Estado Plurinacional de Bolivia
Duración: 16 oct. 202320 oct. 2023

Serie de la publicación

NombreProceedings - 2023 49th Latin American Computing Conference, CLEI 2023

Conferencia

Conferencia49th Latin American Computing Conference, CLEI 2023
País/TerritorioEstado Plurinacional de Bolivia
CiudadLa Paz
Período16/10/2320/10/23

Áreas temáticas de ASJC Scopus

  • Inteligencia artificial
  • Redes de ordenadores y comunicaciones
  • Informática aplicada
  • Matemática computacional
  • Radiología, medicina nuclear y obtención de imágenes

Huella

Profundice en los temas de investigación de 'To Security and Beyond: On The Impacts of Microservice Security Smells and Refactorings'. En conjunto forman una huella única.

Citar esto