Please wait a minute...
 
主管单位:广东省科学技术厅
主办单位:广东省科技合作研究促进中心
编辑出版:《电脑与电信》编辑部
ISSN 1008-6609 CN 44-1606/TN
邮发代号:46-95
国内发行:广东省报刊发行局
《电脑与电信》唯一官方网站。
电脑与电信  2024, Vol. 1 Issue (6): 22-    DOI: 10.15966/j.cnki.dnydx.2024.06.012
  本期目录 | 过刊浏览 | 高级检索 |
Docker API与SpringBoot Actuator未授权访问风险分析与防范研究
大庆师范学院计算机科学与信息技术学院
Risk Analysis and Prevention of Unauthorized Access to Docker API and SpringBoot Actuator
Daqing Normal University
全文: PDF(0 KB)  
输出: BibTeX | EndNote (RIS)      
摘要 随着云计算技术的普及和容器化技术的发展,Docker和SpringBoot已成为现代软件开发和部署的重要工具。然而,这种广泛的使用也伴随着安全风险。针对Docker API与SpringBoot Actuator的未授权访问风险进行了深入分析。当这些关键组件暴露于未授权访问之下时,攻击者可能利用这些漏洞执行恶意操作,如部署恶意容器、篡改应用程序配置或窃取敏感信息。这些行为不仅可能导致服务中断和数据泄露,还可能对企业造成严重的声誉和财务损失。
服务
把本文推荐给朋友
加入引用管理器
E-mail Alert
RSS
作者相关文章
关键词 Docker APISpringBoot Actuator未授权访问风险分析与防范    
Abstract:With the popularization of cloud computing technology and the development of containerization technology, Docker and SpringBoot have become indispensable tools for modern software development and deployment. However, this widespread use also comes with security risks. This article provides an in-depth analysis of the unauthorized access risks of Docker API and SpringBoot Actor. When these critical components are exposed to unauthorized access, attackers may exploit these vulnerabilities to perform malicious operations, such as deploying malicious containers, tampering with application con?gurations, or stealing sensitive information. These behaviors may not only lead to service interruption and data leakage, but also cause serious reputation and ?nancial losses to the enterprise. 
Key wordsDocker API    SpringBoot Actuator    unauthorized access vulnerability    risk analysis and prevention 
年卷期日期: 2024-06-10      出版日期: 2024-11-01
引用本文:   
贾美娟 李欣朱庆 张丽华 张百顺. Docker API与SpringBoot Actuator未授权访问风险分析与防范研究[J]. 电脑与电信, 2024, 1(6): 22-.
JIA Mei-juan ZHU Qing JIANG Shan ZHANG Li-hua ZHANG Bai-shun. Risk Analysis and Prevention of Unauthorized Access to Docker API and SpringBoot Actuator. Computer & Telecommunication, 2024, 1(6): 22-.
链接本文:  
https://www.computertelecom.com.cn/CN/10.15966/j.cnki.dnydx.2024.06.012  或          https://www.computertelecom.com.cn/CN/Y2024/V1/I6/22
No related articles found!
No Suggested Reading articles found!
Viewed
Full text


Abstract

Cited

  Shared   
  Discussed   
  Copyright © 电脑与电信 All Rights Reserved.
地址:广州市连新路171号广东国际科技中心 邮编:510033
本系统由北京玛格泰克科技发展有限公司设计开发 技术支持:support@magtech.com.cn
粤ICP备05080322号-4