title: ÐÐ¾Ð¼Ð¿Ð»ÐµÐºÑÐ½Ð°Ñ ÑÐ¸Ð¼ÑÐ»ÑÑÐ¸Ñ ÐºÐ¸Ð±ÐµÑÐ°ÑÐ°Ðº Ð½Ð° Ð¸Ð½ÑÑÐ°ÑÑÑÑÐºÑÑÑÑ ÐºÐ»Ð°ÑÑÐµÑÐ¾Ð² Kubernetes
title: Ð²ÑÐ¿ÑÑÐºÐ½Ð°Ñ ÐºÐ²Ð°Ð»Ð¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¾Ð½Ð½Ð°Ñ ÑÐ°Ð±Ð¾ÑÐ° ÑÐ¿ÐµÑÐ¸Ð°Ð»Ð¸ÑÑÐ°
titleType: Subtitle
title: Comprehensive simulation of cyber attacks on the infrastructure of Kubernetes clusters
Creators: name: ÐÐ°ÑÑÐºÐ¾Ð², ÐÐ¾Ð½ÑÑÐ°Ð½ÑÐ¸Ð½
Publisher: name: Ð¡Ð°Ð½ÐºÑ-ÐÐµÑÐµÑÐ±ÑÑÐ³ÑÐºÐ¸Ð¹ Ð¿Ð¾Ð»Ð¸ÑÐµÑÐ½Ð¸ÑÐµÑÐºÐ¸Ð¹ ÑÐ½Ð¸Ð²ÐµÑÑÐ¸ÑÐµÑ ÐÐµÑÑÐ° ÐÐµÐ»Ð¸ÐºÐ¾Ð³Ð¾
Year: 2025
Subjects: kubernetes
ÐºÐ»Ð°ÑÑÐµÑ
mtkpi
kubernetes-goat
openbas
microsoft threat matrix
ÑÐºÑÐ¿Ð»Ð¾Ð¹Ñ
cluster
exploit

description: Ð¦ÐµÐ»ÑÑ ÑÐ°Ð±Ð¾ÑÑ ÑÐ²Ð»ÑÐµÑÑÑ ÑÐ°Ð·ÑÐ°Ð±Ð¾ÑÐºÐ° Ð¼ÐµÑÐ¾Ð´Ð¸ÐºÐ¸ Ð°Ð½Ð°Ð»Ð¸Ð·Ð° Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸ ÐºÐ¾Ð½ÑÐµÐ¹Ð½ÐµÑÐ½Ð¾Ð¹ Ð¸Ð½ÑÑÐ°ÑÑÑÑÐºÑÑÑÑ Ð¿ÑÑÐµÐ¼ Ð¼Ð¾Ð´ÐµÐ»Ð¸ÑÐ¾Ð²Ð°Ð½Ð¸Ñ ÐºÐ¾Ð¼Ð¿ÑÑÑÐµÑÐ½ÑÑ Ð°ÑÐ°Ðº Ñ Ð¿Ð¾Ð¼Ð¾ÑÑÑ ÑÑÐ¸Ð»Ð¸ÑÑ MTKPI. ÐÑÐµÐ´Ð¼ÐµÑÐ¾Ð¼ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ ÑÐ²Ð»ÑÐµÑÑÑ Ð¼ÐµÑÐ¾Ð´Ð¸ÐºÐ° Ð°Ð½Ð°Ð»Ð¸Ð·Ð° Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸ ÐºÐ¾Ð½ÑÐµÐ¹Ð½ÐµÑÐ½Ð¾Ð¹ Ð¸Ð½ÑÑÐ°ÑÑÑÑÐºÑÑÑÑ Ð½Ð° Ð¾ÑÐ½Ð¾Ð²Ðµ Ð°Ð½Ð°Ð»Ð¸Ð·Ð° Ð¿ÑÐ¾Ð²ÐµÐ´ÐµÐ½Ð½ÑÑ ÐºÐ¾Ð¼Ð¿ÑÑÑÐµÑÐ½ÑÑ Ð°ÑÐ°Ðº. ÐÐ°Ð´Ð°ÑÐ¸, ÑÐµÑÐ°ÐµÐ¼ÑÐµ Ð² ÑÐ¾Ð´Ðµ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ: 1. ÐÐ½Ð°Ð»Ð¸Ð· ÑÐ³ÑÐ¾Ð· Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸ Ð¸Ð½ÑÑÐ°ÑÑÑÑÐºÑÑÑÑ ÐºÐ»Ð°ÑÑÐµÑÐ° Kubernetes. 2. ÐÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ðµ ÑÑÐµÐ´ÑÑÐ² Ð¼Ð¾Ð´ÐµÐ»Ð¸ÑÐ¾Ð²Ð°Ð½Ð¸Ñ ÐºÐ¾Ð¼Ð¿ÑÑÑÐµÑÐ½ÑÑ Ð°ÑÐ°Ðº Ð¸ Ð°Ð½Ð°Ð»Ð¸Ð· Ð¸Ñ Ð¿ÑÐ¸Ð¼ÐµÐ½Ð¸Ð¼Ð¾ÑÑÐ¸ Ð² ÐºÐ¾Ð½ÑÐµÐ¹Ð½ÐµÑÐ½Ð¾Ð¹ Ð¸Ð½ÑÑÐ°ÑÑÑÑÐºÑÑÑÐµ. 3. Ð Ð°Ð·ÑÐ°Ð±Ð¾ÑÐºÐ° Ð¼ÐµÑÐ¾Ð´Ð¸ÐºÐ¸ Ð°Ð½Ð°Ð»Ð¸Ð·Ð° Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸ ÐºÐ¾Ð½ÑÐµÐ¹Ð½ÐµÑÐ½Ð¾Ð¹ Ð¸Ð½ÑÑÐ°ÑÑÑÑÐºÑÑÑÑ ÐºÐ»Ð°ÑÑÐµÑÐ° Kubernetes Ð¿ÑÑÐµÐ¼ Ð¼Ð¾Ð´ÐµÐ»Ð¸ÑÐ¾Ð²Ð°Ð½Ð¸Ñ ÐºÐ¾Ð¼Ð¿ÑÑÑÐµÑÐ½ÑÑ Ð°ÑÐ°Ðº. 4. Ð Ð°Ð·ÑÐ°Ð±Ð¾ÑÐºÐ° Ð¸ ÑÐµÑÑÐ¸ÑÐ¾Ð²Ð°Ð½Ð¸Ðµ Ð¿ÑÐ¾Ð³ÑÐ°Ð¼Ð¼Ð½Ð¾Ð³Ð¾ ÑÑÐµÐ´ÑÑÐ²Ð°, ÑÐµÐ°Ð»Ð¸Ð·ÑÑÑÐµÐ³Ð¾ Ð¿ÑÐµÐ´Ð»Ð¾Ð¶ÐµÐ½Ð½ÑÑ Ð¼ÐµÑÐ¾Ð´Ð¸ÐºÑ Ð°Ð½Ð°Ð»Ð¸Ð·Ð° Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸. Ð ÑÐ¾Ð´Ðµ ÑÐ°Ð±Ð¾ÑÑ Ð±ÑÐ»Ð° Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð° Ð¿ÑÐ¾Ð±Ð»ÐµÐ¼Ð° Ð¾Ð±ÐµÑÐ¿ÐµÑÐµÐ½Ð¸Ñ Ð·Ð°ÑÐ¸ÑÑ ÐºÐ»Ð°ÑÑÐµÑÐ¾Ð² Kubernetes Ð¾Ñ Ð¿ÑÐ¾Ð²Ð¾Ð´Ð¸Ð¼ÑÑ ÐºÐ¾Ð¼Ð¿ÑÑÑÐµÑÐ½ÑÑ Ð°ÑÐ°Ðº. ÐÑÐ»Ð¸ Ð¿ÑÐ¾Ð°Ð½Ð°Ð»Ð¸Ð·Ð¸ÑÐ¾Ð²Ð°Ð½Ñ ÑÑÑÐµÑÑÐ²ÑÑÑÐ¸Ðµ Ð¿Ð¾Ð´ÑÐ¾Ð´Ñ Ðº Ð¾Ð±ÐµÑÐ¿ÐµÑÐµÐ½Ð¸Ñ Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸ ÐºÐ»Ð°ÑÑÐµÑÐ°, Ð° ÑÐ°ÐºÐ¶Ðµ Ð¼ÐµÑÐ¾Ð´Ñ Ð²Ð¾Ð·Ð´ÐµÐ¹ÑÑÐ²Ð¸Ñ Ð½Ð° ÐºÐ»Ð°ÑÑÐµÑ. Ð ÑÐµÐ·ÑÐ»ÑÑÐ°ÑÐµ ÑÐ°Ð±Ð¾ÑÑ Ð±ÑÐ»Ð¾ ÑÐ°Ð·ÑÐ°Ð±Ð¾ÑÐ°Ð½Ð¾ ÑÑÐµÐ´ÑÑÐ²Ð¾ Ð´Ð»Ñ Ð°Ð²ÑÐ¾Ð¼Ð°ÑÐ¸Ð·Ð¸ÑÐ¾Ð²Ð°Ð½Ð½Ð¾Ð³Ð¾ Ð¿ÑÐ¾Ð²ÐµÐ´ÐµÐ½Ð¸Ñ Ð°ÑÐ°Ðº Ð½Ð° Ð¸Ð½ÑÑÐ°ÑÑÑÑÐºÑÑÑÑ ÐºÐ»Ð°ÑÑÐµÑÐ¾Ð² Kubernetes, ÑÐµÐ°Ð»Ð¸Ð·ÑÑÑÐµÐµ Ð¿ÑÐµÐ´Ð»Ð¾Ð¶ÐµÐ½Ð½ÑÑ Ð¼ÐµÑÐ¾Ð´Ð¸ÐºÑ Ð°Ð½Ð°Ð»Ð¸Ð·Ð° Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸ ÐºÐ¾Ð½ÑÐµÐ¹Ð½ÐµÑÐ½Ð¾Ð¹ Ð¸Ð½ÑÑÐ°ÑÑÑÑÐºÑÑÑÑ. ÐÐ¾Ð»ÑÑÐµÐ½Ð½ÑÐµ ÑÐµÐ·ÑÐ»ÑÑÐ°ÑÑ Ð¼Ð¾Ð³ÑÑ Ð±ÑÑÑ Ð¿ÑÐ¸Ð¼ÐµÐ½ÐµÐ½Ñ Ð´Ð»Ñ ÑÐµÑÑÐ¸ÑÐ¾Ð²Ð°Ð½Ð¸Ñ Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸ ÐºÐ»Ð°ÑÑÐµÑÐ° Kubernetes Ð¸ Ð¿ÑÐ¸Ð²ÐµÐ´ÐµÐ½Ð¸Ñ ÐµÐ³Ð¾ Ð² ÑÐ¾Ð¾ÑÐ²ÐµÑÑÑÐ²Ð¸Ðµ ÑÑÐ°Ð½Ð´Ð°ÑÑÐ°Ð¼ Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸.
description: The aim of the work is to develop a methodology for analyzing the security of container infrastructure by simulating computer attacks using the MTKPI utility. The subject of the study is a methodology for analyzing the security of container infrastructure based on the analysis of computer attacks. Problems solved during the study: 1. Analysis of threats to the security of the Kubernetes cluster infrastructure. 2. Study of tools for simulating computer attacks and analysis of their applicability in the container infrastructure. 3. Development of a methodology for analyzing the security of the container infrastructure of the Kubernetes cluster by simulating computer attacks. 4. Development and testing of a software tool that implements the proposed security analysis methodology. During the work, the problem of ensuring the protection of Kubernetes clusters from computer attacks was investigated. Existing approaches to ensuring cluster security were analyzed, as well as methods of influencing the cluster. As a result of the work, a tool for automated attacks on the infrastructure of Kubernetes clusters was developed, implementing the proposed methodology for analyzing the security of container infrastructure. The results obtained can be used to test the security of a Kubernetes cluster and bring it into compliance with security standards.