2024/11/02 by Jasper Alexander Wiegratz, Wiegratz, Jasper Alexander
Computer Science · #Cloud Computing and Resource Management #Cloud Data Security Solutions #Cryptography and Security (cs.CR) #Distributed #FOS: Computer and information sciences #Parallel #Security and Verification in Computing #and Cluster Computing (cs.DC)
paper · pdf · doi:10.48550/arxiv.2411.03344
openalex publication_date 2024/11/02 · openalex created_date 2025/10/10 · openalex updated_date 2026/07/28
This study investigates the potential of WebAssembly as a more secure and efficient alternative to Linux containers for executing untrusted code in cloud computing with Kubernetes. Specifically, it evaluates the security and performance implications of this shift. Security analyses demonstrate that both Linux containers and WebAssembly have attack surfaces when executing untrusted code, but WebAssembly presents a reduced attack surface due to an additional layer of isolation. The performance analysis further reveals that while WebAssembly introduces overhead, particularly in startup times, it could be negligible in long-running computations. However, WebAssembly enhances the core principle of containerization, offering better security through isolation and platform-agnostic portability compared to Linux containers. This research demonstrates that WebAssembly is not a silver bullet for all security concerns or performance requirements in a Kubernetes environment, but typical attacks are less likely to succeed and the performance loss is relatively small.