Exploiting and Mitigating Information Leakage at the Container-Kernel Interface

Containers on the same host share a single Linux kernel, so the kernel interface they all use is itself a potential source of cross-container information leakage. This work studies how that interface can be exploited to leak information between containerized workloads and proposes mitigations against it.