论文标题
基于微服务的系统的身份验证和授权：建筑模式调查
Authentication and authorization in microservice-based systems: survey of architecture patterns
论文作者
论文摘要
语境。面向服务的体系结构及其基于微服务的方法增加了应用程序的攻击表面。裸露的微服务成为高级持续威胁的枢纽点，并完全改变威胁格局。正确实施的身份验证和授权体系结构模式是任何软件成熟计划的基础。客观的。这项研究的目的是为应用程序安全架构师和开发人员提供有用的资源，以实现基于微服务的系统中的身份验证和授权。方法。在本文中，我们对主要安全会议的主要电子数据库和库以及安全标准和演示进行了审查。结果。在基于研究论文和主要安全会议演示分析的这项工作中，我们确定了行业在身份验证和授权模式方面的最佳实践及其适用性，具体取决于环境特征。对于每种描述的模式，我们审查了其优势和缺点，这些优势和缺点可以用作建筑设计阶段应用程序安全架构师的决策标准。
Context. Service-oriented architecture and its microservice-based approach increase an attack surface of applications. Exposed microservices become a pivot point for advanced persistent threats and completely change the threat landscape. Correctly implemented authentication and authorization architecture patterns are basis of any software maturity program. Objective. The aim of this study is to provide a helpful resource to application security architect and developers on existing architecture patterns to implement authentication and authorization in microservices-based systems. Method. In this paper, we conduct a review of major electronic databases and libraries as well as security standards and presentations at the major security conferences. Results. In this work based on research papers and major security conferences presentations analysis we identified industry best practices in authentication and authorization patterns and its applicability depending on environment characteristic. For each described patterns we reviewed its advantages and disadvantages that could be used as decision-making criteria for application security architects during architecture design phase.
