My work studying the security posture of state-of-art service mesh tools was selected for publication in SecureComm 2020 as a short paper and is available HERE. This work involved the creation of a testbed environment to exercise service mesh functionality and attempt to find weaknesses/shortcomings in the tools. Additionally, we studied both the best-case defender, where security is fully enabled and utilized correctly, and the default configuration of the tools which does not include many protections by default. Extended results and experimentation as a part of this work are also available via arXiv HERE.
Computer Science Ph.D. Student
University of Kansas
EECS Department