The microservices architecture tries to deal with the challenges posed by distributed systems, such as scalability, availability, and system deployment; by means of highly cohesive, heterogeneous, and independent microservices. However, this architecture also brings new security challenges related to communication, system design, development, and operation. The literature contains spread information regarding security related solutions for microservices-based systems, but this spread makes difficult for practitioners to adopt novel security related solutions. In this study, we aim to present a catalogue of security solutions based on algorithms, protocols, standards, or implementations; supporting principles or characteristics of information security, also considering the three possible states of data, according to the McCumber Cube. Our research follows a Systematic Literature Review, synthesizing the results with a meta-aggregation process. We identified a total of 30 primary studies, yielding 71 security solutions for the communication of microservices.
翻译:微观服务架构试图应对分布式系统带来的挑战,如可扩展性、可用性和系统部署;通过高度凝聚力、多样性和独立的微观服务;然而,这一架构也带来了通信、系统设计、开发和运行方面的新的安全挑战。文献载有关于微观服务系统安全相关解决方案的传播信息,但这一扩展使从业人员难以采用新的安全相关解决方案。在本研究中,我们的目标是根据算法、协议、标准或实施情况,提出一个安全解决方案目录;支持信息安全的原则或特征,同时根据麦坎贝尔立方体(McCCummber Cube)考虑三种可能的数据状态。我们的研究遵循系统文学审查,将结果与元集成过程结合起来。我们共确定了30项主要研究,为微观服务通信提供了71项安全解决方案。