Work

An evaluation of commonly used Kubernetes security scanning tools

Year: 2025

Type: conference-paper

Abstract: With the advent of the edge-cloud continuum, Kubernetes (K8s) has emerged as the prominent solution for service orchestration. In this context, ensuring deployment security is essential. To identify vulnerabilities and misconfigurations in a timely and efficient manner, security scanning tools are employed. In this work, we evaluate six widely used security tools for workload and static code analysis. We consider several factors, including scan time, the number of detected threats, and resource usage. This evaluation seeks not only to demonstrate the performance trade-offs of these tools but also to contribute additional insights into their practical capabilities.

DOI: 10.1145/3721889.3721924

Authors: Ioanna Angeliki Kapetanidou, Alexandros Nizamis, Konstantinos Votis

Institutions: Information Technologies Institute, Centre for Research and Technology Hellas

Language: English

Topic: Web Application Security Vulnerabilities

Subfield: Information Systems

Field: Computer Science

Domain: Physical Sciences

Open Access status: gold

Funders: European Commission, Universitas Brawijaya, HORIZON EUROPE Framework Programme

Awards: Adaptive Scheduling and Deployments of Data Intensive Workloads on Energy Efficient Edge to Cloud Continuum, G6023470048, G88175894

OpenAlex ID: W4409727503

FWCI: 2.381

Cites: 10

Cited by: 2

Related to: 10