标题： Koney：一种针对Kubernetes的网络欺骗编排框架 显示英文标题

标题： Koney: A Cyber Deception Orchestration Framework for Kubernetes

摘要： 负责保护软件应用程序的系统操作员尽管已经证明了网络欺骗技术的好处，仍然对实施该技术（包括设置陷阱以捕获攻击者的方法）持犹豫态度。 克服他们的顾虑可以消除目前阻碍行业采用欺骗技术的一个障碍。 我们的工作引入了欺骗策略文档，以“代码”的形式描述欺骗技术，并与Koney（一个Kubernetes操作符）配对，后者促进了Kubernetes中陷阱的设置、轮换、监控和移除。 我们利用云原生技术（如服务网格和eBPF）自动向容器化软件应用程序添加陷阱，而无需访问源代码。 我们特别关注操作属性，如可维护性、可扩展性和简单性，我们认为这些属性对于加速网络欺骗技术的采用以及促进网络欺骗的进一步研究至关重要。 显示英文摘要

摘要： System operators responsible for protecting software applications remain hesitant to implement cyber deception technology, including methods that place traps to catch attackers, despite its proven benefits. Overcoming their concerns removes a barrier that currently hinders industry adoption of deception technology. Our work introduces deception policy documents to describe deception technology "as code" and pairs them with Koney, a Kubernetes operator, which facilitates the setup, rotation, monitoring, and removal of traps in Kubernetes. We leverage cloud-native technologies, such as service meshes and eBPF, to automatically add traps to containerized software applications, without having access to the source code. We focus specifically on operational properties, such as maintainability, scalability, and simplicity, which we consider essential to accelerate the adoption of cyber deception technology and to facilitate further research on cyber deception.