Cybersecurity MSc (by research) Graduation Mr Simone Rodigari
06 Nov, 2023
Mr Simone Rodigari, whose supervisors included Dr Sean McSweeney, Dr Donna O’Shea and Dr Pat McCarthy, graduated with a Master’s of Science (by Research) at MTU annual conferring’s. The title of his thesis was Performance Analysis of Zero Trust in Cloud Native Systems. As part of his work, Simone, assessed the performance overhead and possible mitigation in cloud native systems secured with a service mesh, which allows enabling security policies for the authentication, authorization and encryption of traffic within distributed systems. The side-car proxy is a core component of this architecture, acting as a policy enforcement point and intercepting networking communication from/to applications part of the mesh, consequently affecting the performance of applications hosted in the cloud. Physical resources are required to operate the control plane and data plane, while latency is affected by the enforcement of security policies and encryption. We configured a cloud environment consisting of a managed Kubernetes cluster, deployed a cloud native synthetic application, configured service mesh, tested the performance under load and analyzed results to establish the overhead in terms of latency, CPU and memory. The analysis is performed on both data and control plane. Additionally, a performance enhancement was explored with the use of extended Berkeley Packet Filter technology which operates at the Linux Kernel level. Results show a reduction in CPU consumption as well as latency.