ICSA 2024
Tue 4 - Sat 8 June 2024 Hyderabad, Telangana, India

Microservice architectures, as opposed to traditional monolithic ones, require an entirely different approach to identify vulnerabilities, anomalies and other security issues. This is primarily due to the increased attack surface they expose through APIs. A comprehensive analysis of how anomalies in one microservice may affect others requires a detailed understanding of the structure of the entire application. This knowledge can drive the software architecture to be followed in production applications - particularly those that store and manipulate critical information where vulnerabilities can have a significant business or privacy impact. With this motivation, this paper proposes MicroSecPost, a GNN based microservices security analysis approach. MicroSecPost models a microservice based application as a graph that combines data from both static and dynamic analysis, representing each service as a node and service-to-service interactions as edges. MicroSecPost uses Graph Neural Networks(GNNs) on this graph representation to assign a vulnerability score to each node, predict edge features and score the entire application based on the scores of individual nodes and edges. MicroSecPost aims to help understand the existing security posture of a microservice based application and determine where possible improvements can be made.

Thu 6 Jun

Displayed time zone: Chennai, Kolkata, Mumbai, New Delhi change

14:00 - 15:30
Session 3B: Ethics, Security, Trust and ResponsibilityNew and Emerging Ideas / Research Papers

Session Chair: Patricia Lago, Vrije Universiteit Amsterdam
Room: D-101, D-Block, Himalaya Building

14:00
20m
Research paper
Towards Anthropomorphic Trust Management for Digital SocietyNEMI
New and Emerging Ideas
A: Hind Bangui Masaryk University, A: Barbora Buhnova Masaryk University
14:20
20m
Research paper
An architecture for ethics-based negotiation in the decision-making of intelligent autonomous systemsNEMI
New and Emerging Ideas
A: Mashal Afzal Memon University of L’Aquila, Italy, A: Gian Luca Scoccia Gran Sasso Science Institute, A: Marco Autili University of L'Aquila, Italy, A: Paola Inverardi University of L'Aquila
14:40
15m
Short-paper
Towards Responsible Generative AI: A Reference Architecture for Designing Foundation Model based AgentsShort Paper
Research Papers
A: Qinghua Lu Data61, CSIRO, A: Liming Zhu The University of New South Wales, A: Xiwei (Sherry) Xu Data61, CSIRO, A: Zhenchang Xing CSIRO’s Data61; Australian National University, A: Stefan Harrer , A: Jon Whittle CSIRO's Data61 and Monash University
14:55
15m
Research paper
A Novel Approach for Security Analysis in Microservices using Graph Neural NetworksNEMI
New and Emerging Ideas
A: Chitra Babu , A: Akil Karthikeyan Sri Sivasubramaniya Nadar College of Engineering, A: Nandakishor Velu , A: Kaarthik Sivakumar , A: Abhishek Pathak
15:10
15m
Research paper
Towards a Single Source of Truth with a Freely Shareable DeltachainNEMI
New and Emerging Ideas