VirtualizationincloudcomputinghasbeenusedincombinationwithenvironmentsPlatformas a Service (PaaS) and Infrastructure as a Service (IaaS) in order to provide performance, isolation, and scalability. However, containers and virtual machines (VMs) are susceptible to the vulnerabilities present in the core of operating system as well as container solutions, which are a risk for information and service operation of all entities sharing a same host. The safety recommendation guides aims to mitigate the security in this scenario, but the selection of containerization solutions taking into account security requirements is a complex task. Thus, we propose a security taxonomy focused on containers to cloud computing in order to assist the classification and evaluation containers security mechanisms and solutions.

No abstract

Soluções que utilizam a tecnologia blockchain estão ganhando cada vez mais suporte dos desenvolvedores de sistemas. As instituições tem integrado redes blockchain em seus sistemas, e uma maneira usual de incluir nós de blockchain é através de máquinas virtuais (MVs). Este trabalho possui como objetivo de realizar uma análise de segurança e desempenho para verificar o comportamento das MVs perante à ataques Denial-of-Service (DoS), uma vez que o flavor destas instâncias normalmente possui poucos recursos computacionais.

As soluções que utilizam a tecnologia blockchain estão ganhando cada vez mais suporte das instituições e de desenvolvedores de sistemas. Este artigo tem como objetivo apresentar uma proposta de análise de sobrevivência de serviços blockchains do Hyperledger Fabric hospedados em máquinas virtuais (MVs) submetidos à ataques Denial-of-Service (DoS) internos.

A considerable number of electronic transaction systems employ classicapproaches based on centralized trust mechanisms, not exploitingthe latest technological advances. Alternatively, the concept ofblockchain stands out, elaborated without the need for this centralizedtrust, but rather dependent on securely chained technologies in whichthe elements involved can conduct secure negotiations. Blockchain isdesigned to address security and distributed system issues through theuse of encryption, algorithms, P2P networks, and consensus mechanisms.This paper presents a Denial of Service (DoS) security analysisof the more traditional Practical Byzantine Fault Tolerance (PBFT)and Proof of Work (PoW) consensus mechanisms available onMultichain and Ethereum solutions based on a private / consortiumblockchain scenario. We present our results of a controlled DoSattack, revealing the importance and need for security-relatedanalysis of blockchain implementations of private / consortiumblockchains.