KubeFuzzer: Automating RESTful API Vulnerability Detection in Kubernetes
Source abstract
Abstract
RESTful API fuzzing is a promising method for automated vulnerability detection in Kubernetes platforms. Existing tools struggle with generating lengthy, high-semantic request sequences that can pass Kubernetes API gateway ch... | Find, read and cite all the research you need on Tech Science Press
Source: openalex_inverted_index · Quality: baseline
Research context
OpenAlex topics: Network Security and Intrusion Detection · Web Application Security Vulnerabilities · Information and Cyber Security
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
References (27)
Show source-provided references
1. Security misconfigurations in open source kubernetes manifests: An empirical study10.1145/3607179 ↗
2. Kubernetes scheduling: Taxonomy, ongoing issues and challenges10.1145/3539606 ↗
3. Intelligent REST API data fuzzing
4. NAUTILUS: Automated RESTful API vulnerability detection
5. RESTler: Stateful REST API fuzzing
6. RestTestGen: An extensible framework for automated black-box testing of restful apis
7. RESTest: Automated black-box testing of RESTful web APIs
8. RESTful API automated test case generation with EvoMaster10.1145/3293455 ↗
9. Morest: Model-based RESTful API testing with execution feedback
10. V. Atlidakis, R. Geambasu, P. Godefroid, M. Polishchuk, and B. Ray, “Pythia: Grammar-based fuzzing of rest apis with coverage-guided feedback and learning-based mutations,” 2020, arXiv:2005.11498.
11. Checking security properties of cloud service REST APIs
12. Automatic generation of test cases for REST APIs: A specification-based approach
13. QuickREST: Property-based test generation of OpenAPI-described RESTful APIs
14. Enhancing REST API testing with NLP techniques
15. A kubernetes-based monitoring platform for dynamic cloud resource provisioning
16. On the security of containers: Threat modeling, attack analysis, and mitigation strategies10.1016/j.cose.2023.103140 ↗
17. Mitigating security attacks in kubernetes manifests for security best practices violation
18. Does generative AI generate smells related to container orchestration?
19. Security-performance trade-offs of kubernetes container runtimes
20. NetMARKS: Network metrics-aware kubernetes scheduler powered by service mesh
21. Extending kubernetes clusters to low-resource edge devices using virtual kubelets10.1109/TCC.2020.3033807 ↗
22. Take over the whole cluster: Attacking kubernetes via excessive permissions of third-party applications
23. Full-stack vulnerability analysis of the cloud-native platform10.1016/j.cose.2023.103173 ↗
24. Cross container attacks: The bewildered eBPF on clouds
25. Lost along the way: Understanding and mitigating path-misresolution threats to container isolation
26. MINER: A hybrid data-driven approach for REST API fuzzing
27. EDEFuzz: A web API fuzzer for excessive data exposures