Security in microservice architectures

1. A computer-implemented method for inhibiting security threats in microservice architectures hosted on a cloud infrastructure, the method being executed by one or more processors and comprising:

receiving, by a first microservice used in one or more microservice-based applications hosted on the cloud infrastructure, a network packet comprising a set of features F;

determining, by the first microservice, a probability P that the set of features F corresponds to a category c i in a set of categories C using a probabilistic model, the probabilistic model applying a rule for detecting a maximum probability:

P

⁡

(

c

i

|

F

)

=

P

c

i

×

P

⁡

(

F

|

c

i

)

∑

i

=

1

m

⁢

P

c

i

×

P

⁡

(

F

|

c

i

)

where m is a number of categories in the set of categories and i is a counter that increases from 1 to m;

determining, by the first microservice, substantially in near real time that the network packet corresponds to a first category within the set of categories C based on the probability P; and

in response to determining that the network packet corresponds to the first category, executing, by the first microservice, an action comprising shutting down a defective microservice on the cloud infrastructure and instantiating another instance of the defective microservice on the cloud infrastructure.

2. The method of claim 1 , wherein the first category comprises an attack category, and the action comprises inhibiting execution of one or more functions of the microservice.

3. The method of claim 1 , wherein the first category comprises a normal category, and the action comprises allowing execution of one or more functions of the microservice.

4. The method of claim 3 , wherein the one or more functions comprise transmitting data to a second microservice.

5. The method of claim 3 , wherein the one or more functions comprise transmitting data to an operating system of the cloud infrastructure.

6. The method of claim 1 , wherein the network packet is received from a client-side computing device.

7. The method of claim 1 , wherein the network packet is received from a second microservice on the cloud infrastructure.

8. A non-transitory computer-readable storage medium coupled to one or more processors and having instructions stored thereon which, when executed by the one or more processors, cause the one or more processors to perform operations for inhibiting security threats in microservice architectures hosted on a cloud infrastructure, the operations comprising:

receiving, by a first microservice used in one or more microservice-based applications hosted on the cloud infrastructure, a network packet comprising a set of features F;

determining, by the first microservice, a probability P that the set of features F corresponds to a category c i in a set of categories C using a probabilistic model, the probabilistic model applying a rule for detecting a maximum probability:

P

⁡

(

c

i

|

F

)

=

P

c

i

×

P

⁡

(

F

|

c

i

)

∑

i

=

1

m

⁢

P

c

i

×

P

⁡

(

F

|

c

i

)

where m is a number of categories in the set of categories and i is a counter that increases from 1 to m;

determining, by the first microservice, substantially in near real time that the network packet corresponds to a first category within the set of categories C based on the probability P; and

in response to determining that the network packet corresponds to the first category, executing, by the first microservice, an action comprising shutting down a defective microservice on the cloud infrastructure and instantiating another instance of the defective microservice on the cloud infrastructure.

9. The computer-readable storage medium of claim 8 , wherein the first category comprises an attack category, and the action comprises inhibiting execution of one or more functions of the microservice.

10. The computer-readable storage medium of claim 8 , wherein the first category comprises a normal category, and the action comprises allowing execution of one or more functions of the microservice.

11. The computer-readable storage medium of claim 10 , wherein the one or more functions comprise transmitting data to a second microservice.

12. The computer-readable storage medium of claim 10 , wherein the one or more functions comprise transmitting data to an operating system of the cloud infrastructure.

13. The computer-readable storage medium of claim 8 , wherein the network packet is received from a client-side computing device.

14. The computer-readable storage medium of claim 8 , wherein the network packet is received from a second microservice on the cloud infrastructure.

15. A system, comprising:

a computing device; and

a computer-readable storage device coupled to the computing device and having instructions stored thereon which, when executed by the computing device, cause the computing device to perform operations for inhibiting security threats in microservice architectures hosted on a cloud infrastructure, the operations comprising:

receiving, by a first microservice used in one or more microservice-based applications hosted on the cloud infrastructure, a network packet comprising a set of features F;

determining, by the first microservice, a probability P that the set of features F corresponds to a category c i in a set of categories C using a probabilistic model, the probabilistic model applying a rule for detecting a maximum probability:

P

⁡

(

c

i

|

F

)

=

P

c

i

×

P

⁡

(

F

|

c

i

)

∑

i

=

1

m

⁢

P

c

i

×

P

⁡

(

F

|

c

i

)

where m is a number of categories in the set of categories and i is a counter that increases from 1 to m;

determining, by the first microservice, substantially in near real time that the network packet corresponds to a first category within the set of categories C based on the probability P; and

in response to determining that the network packet corresponds to the first category, executing, by the first microservice, an action comprising shutting down a defective microservice on the cloud infrastructure and instantiating another instance of the defective microservice on the cloud infrastructure.

16. The system of claim 15 , wherein the first category comprises an attack category, and the action comprises inhibiting execution of one or more functions of the microservice.

17. The system of claim 15 , wherein the first category comprises a normal category, and the action comprises allowing execution of one or more functions of the microservice.

18. The system of claim 17 , wherein the one or more functions comprise transmitting data to a second microservice.

19. The system of claim 17 , wherein the one or more functions comprise transmitting data to an operating system of the cloud infrastructure.

20. The system of claim 17 , wherein the network packet is received from a client-side computing device.