在Kubernetes云计算中比较WebAssembly与Linux容器的安全性和效率
Comparing Security and Efficiency of WebAssembly and Linux Containers in Kubernetes Cloud Computing
AI总结：
本研究比较了WebAssembly与Linux容器在Kubernetes中的安全性和效率，发现WebAssembly攻击面更小、性能开销可忽略，但并非万能解决方案。
摘要：
本研究探讨了WebAssembly作为Linux容器在Kubernetes云计算中执行不可信代码时更安全、更高效的替代方案的潜力。具体而言，它评估了这种转变的安全性和性能影响。安全性分析表明，Linux容器和WebAssembly在执行不可信代码时都存在攻击面，但WebAssembly由于额外的隔离层而呈现出更小的攻击面。性能分析进一步揭示，虽然WebAssembly引入了开销，特别是在启动时间方面，但在长时间运行的计算中这种开销可能可以忽略不计。然而，WebAssembly增强了容器化的核心原则，通过隔离和平台无关的可移植性提供了比Linux容器更好的安全性。这项研究表明，WebAssembly并非解决Kubernetes环境中所有安全顾虑或性能需求的万能药，但典型攻击成功的可能性较低，且性能损失相对较小。
英文摘要：
This study investigates the potential of WebAssembly as a more secure and efficient alternative to Linux containers for executing untrusted code in cloud computing with Kubernetes. Specifically, it evaluates the security and performance implications of this shift. Security analyses demonstrate that both Linux containers and WebAssembly have attack surfaces when executing untrusted code, but WebAssembly presents a reduced attack surface due to an additional layer of isolation. The performance analysis further reveals that while WebAssembly introduces overhead, particularly in startup times, it could be negligible in long-running computations. However, WebAssembly enhances the core principle of containerization, offering better security through isolation and platform-agnostic portability compared to Linux containers. This research demonstrates that WebAssembly is not a silver bullet for all security concerns or performance requirements in a Kubernetes environment, but typical attacks are less likely to succeed and the performance loss is relatively small.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
