Kubesilent: Protótipo de uma solução web para monitoramento e análise de atividades de cryptojacking em ambientes AKS

Abstract

The advent of cloud computing has brought numerous advantages but also new security challenges, such as cryptojacking—the unauthorized use of an organization’s computational resources to mine cryptocurrencies. Microsoft’s Azure Kubernetes Service (AKS), a popular solution for cloud container orchestration, is particularly susceptible to these attacks due to its complexity and scalable nature. This study proposes the development of a specific monitoring solution for Kubernetes on Azure, aimed at identifying and alerting about anomalous activities that may indicate cryptojacking attempts. The research includes a literature review on cloud computing, Azure, Kubernetes, Azure Kubernetes Service, and cryptojacking, as well as a discussion of related work on the topic. Based on this, a specific monitoring solution for Kubernetes on Microsoft’s cloud was proposed and implemented, with the goal of detecting suspicious activities indicative of cryptojacking. The solution proved effective in monitoring the environment, identifying anomalies that suggested such activities. Additionally, it was possible to validate on the platform the presence of malicious processes related to cryptojacking, demonstrating the effectiveness of the adopted approach.