A Hybrid Security Algorithm in Container-based Virtualization Environments Using Residue Number Systems

The need for vigorous security methods becomes a great concern as container-based virtualization continues to gain close attention in modern edge computing environments. This study proposed a novel hybrid security algorithm designed specifically for containerized virtualization technology, leveraging the distinctive capabilities of Residue Number Systems (RNS). The proposed algorithm integrates the strengths of the bits permutation technique with the efficiency and parallelism inherent in RNS to enhance data security in containerized systems. The proposed algorithm combines RNS-based encryption and decryption processes with the bits permutation technique to form an adaptable security scheme. This proposed hybrid technique leverages an RNS's ability to perform modular arithmetic operations in parallel, offering data protection against certain attacks. The proposed security algorithm unlike the risk mitigation mechanisms like Linux-based, Firewall rules, MAC measures, and non-privileged mode, focused mainly on data protection in container-based virtualization environments. The algorithm's efficiency depends on the choice of moduli set and RNS reverse converter in terms of time and Hardware complexity. Furthermore, the proposed security algorithm was evaluated based on CRT with three moduli sets and a state-of-the-art RNS reverse converter in terms of time complexity. The proposed method performed better in terms of time complexity for the moduli set with a small dynamic range and the RNS reverse converter with less hardware complexity.