A Security Containers Placement Algorithm Based on DQN for Microservices to Defend Against Co-Resident Threat

The weak isolation of lightweight containers has caused co-resident threat among cloud-native applications. The co-resident threat further spread based on microservice calls, which seriously threaten the security of other cloud-native applications. To solve this problem, this paper formally describes the propagation of container co-resident threats in cloud-native applications and optimizes the solution of the co-resident threats of cloud-native applications and the load balance, and proposes a DQN-based microservice container placement algorithm (MsCPA) to optimize the solution of the co-resident threats of cloud-native applications and the load balance. Simulation results show that the container placement algorithms in this paper reduce the co-resident threat propagation range by 18.06% on average with improving load balancing performance by 13.97%.