Project details

School of Electrical & Electronic Engineering


Click on [Back] button to go back to previous page


Proj No. A1052-251
Title Design and Implementation of a Cloud-Native Secure Code Execution Platform Using Kubernetes and gVisor for Code Assessment Applications.
Summary The problem presented by code assessment applications, such as Leetcode and Codeforces, is that it creates an attack surface by running untrusted code (user-submitted code). This can be malicious and dangerous, for example, the user can submit a fork-bomb and cause the server running the platform to fail (they might even submit crypto mining code). Current implementations use various sandboxing techniques. I aim to explore gVisor (https://gvisor.dev/) and using containers (inside Kubernetes pods) as means for isolation. Using Kubernetes also allows orchestration over multiple machines (nodes) which increases scalability and resilience.
Supervisor A/P Ling Keck Voon (Loc:S2 > S2 B2A > S2 B2A 22, Ext: +65 67905567)
Co-Supervisor -
RI Co-Supervisor -
Lab Computer Engineering II (Loc: S2-B3b-08)
Single/Group: Single
Area: Intelligent Systems and Control Engineering
ISP/RI/SMP/SCP?: