Cover Image

KubeFence: Security Hardening of the Kubernetes Attack Surface

Fuente: arXiv

Saved in:

Bibliographic Details
Main Authors:	Cesarano, Carmine, Natella, Roberto
Format:	Preprint
Published:	2025
Subjects:	Cryptography and Security
Online Access:	Acceder al recurso
Tags:	Add Tag No Tags, Be the first to tag this record!

Similar Items

Securing an Application Layer Gateway: An Industrial Case Study
by: Cesarano, Carmine, et al.
Published: (2024)

Security Assessment and Hardening of Fog Computing Systems
by: Cesarano, Carmine
Published: (2023)

FuzzBox: Blending Fuzzing into Emulation for Binary-Only Embedded Targets
by: Cesarano, Carmine, et al.
Published: (2025)

GoLeash: Mitigating Golang Software Supply Chain Attacks with Runtime Policy Enforcement
by: Cesarano, Carmine, et al.
Published: (2025)

GoSurf: Identifying Software Supply Chain Attack Vectors in Go
by: Cesarano, Carmine, et al.
Published: (2024)

Security-by-Design at the Telco Edge with OSS: Challenges and Lessons Learned
by: Cesarano, Carmine, et al.
Published: (2025)

KubeGuard: LLM-Assisted Kubernetes Hardening via Configuration Files and Runtime Logs Analysis
by: Cohen, Omri Sgan, et al.
Published: (2025)

Towards Assessing Isolation Properties in Partitioning Hypervisors
by: Cesarano, Carmine, et al.
Published: (2022)

Vulnerabilities in AI Code Generators: Exploring Targeted Data Poisoning Attacks
by: Cotroneo, Domenico, et al.
Published: (2023)

SPARK: Secure Predictive Autoscaling for Robust Kubernetes
by: Jiang, Zhijun, et al.
Published: (2026)

Elevating Cyber Threat Intelligence against Disinformation Campaigns with LLM-based Concept Extraction and the FakeCTI Dataset
by: Cotroneo, Domenico, et al.
Published: (2025)

GenKubeSec: LLM-Based Kubernetes Misconfiguration Detection, Localization, Reasoning, and Remediation
by: Malul, Ehud, et al.
Published: (2024)

The Power of Words: Generating PowerShell Attacks from Natural Language
by: Liguori, Pietro, et al.
Published: (2024)

Securing the Open RAN Infrastructure: Exploring Vulnerabilities in Kubernetes Deployments
by: Klement, Felix, et al.
Published: (2024)

CyFence: Securing Cyber-Physical Controllers via Trusted Execution Environment
by: Longari, Stefano, et al.
Published: (2025)

Comparative Analysis of Lightweight Kubernetes Distributions for Edge Computing: Security, Resilience and Maintainability
by: Yakubov, Diyaz, et al.
Published: (2025)

AI Code Generators for Security: Friend or Foe?
by: Natella, Roberto, et al.
Published: (2024)

CTI-HAL: A Human-Annotated Dataset for Cyber Threat Intelligence Analysis
by: Della Penna, Sofia, et al.
Published: (2025)

Agent-Fence: Mapping Security Vulnerabilities Across Deep Research Agents
by: Puppala, Sai, et al.
Published: (2026)

A Multi-Layered Security Analysis of Blockchain Systems: From Attack Vectors to Defense and System Hardening
by: Yang, Yuhuan, et al.
Published: (2025)

The Kubernetes Security Landscape: AI-Driven Insights from Developer Discussions
by: Curtis, J. Alexander, et al.
Published: (2024)

Sharpening Kubernetes Audit Logs with Context Awareness
by: Franzil, Matteo, et al.
Published: (2025)

Laccolith: Hypervisor-Based Adversary Emulation with Anti-Detection
by: Orbinato, Vittorio, et al.
Published: (2023)

Proactive Hardening of LLM Defenses with HASTE
by: Chen, Henry, et al.
Published: (2026)

Hardening Confidential Federated Compute against Side-channel Attacks
by: Bell-Clark, James, et al.
Published: (2026)

Mitigating Evasion Attacks in Fog Computing Resource Provisioning Through Proactive Hardening
by: Salmi, Younes, et al.
Published: (2026)

Automated Framework to Evaluate and Harden LLM System Instructions against Encoding Attacks
by: Sahu, Anubhab, et al.
Published: (2026)

FSLH: Flexible Mechanized Speculative Load Hardening
by: Baumann, Jonathan, et al.
Published: (2025)

Koney: A Cyber Deception Orchestration Framework for Kubernetes
by: Kahlhofer, Mario, et al.
Published: (2025)

Hardened CTIDH: Dummy-Free and Deterministic CTIDH
by: Banegas, Gustavo, et al.
Published: (2025)

Implementation of New Security Features in CMSWEB Kubernetes Cluster at CERN
by: Ali, Aamir, et al.
Published: (2024)

Exploiting Kubernetes' Image Pull Implementation to Deny Node Availability
by: Knob, Luis Augusto Dias, et al.
Published: (2024)

Trusting the Cloud-Native Edge: Remotely Attested Kubernetes Workers
by: Thijsman, Jordi, et al.
Published: (2024)

Security Hardening Using FABRIC: Implementing a Unified Compliance Aggregator for Linux Servers
by: Paul, Sheldon, et al.
Published: (2026)

RAG Security and Privacy: Formalizing the Threat Model and Attack Surface
by: Arzanipour, Atousa, et al.
Published: (2025)

Breaking the Bulkhead: Demystifying Cross-Namespace Reference Vulnerabilities in Kubernetes Operators
by: Chen, Andong, et al.
Published: (2025)

K8s Pro Sentinel: Extend Secret Security in Kubernetes Cluster
by: Gunathilake, Kavindu, et al.
Published: (2024)

CuFuzz: Hardening CUDA Programs through Transformation and Fuzzing
by: Singh, Saurabh, et al.
Published: (2026)

HCC: A Language-Independent Hardening Contract Compiler for Smart Contracts
by: Giesen, Jens-Rene, et al.
Published: (2022)

Comparing Security and Efficiency of WebAssembly and Linux Containers in Kubernetes Cloud Computing
by: Wiegratz, Jasper Alexander
Published: (2024)