Editing Chapter 6: Edge Security and Privacy (section)

==='''Isolation in Multi-Tenant Environments'''===

As edge nodes begin to serve multiple stakeholders—such as different companies or applications—ensuring isolation becomes a critical security concern.

'''Challenge''': Multi-tenancy can introduce covert channels, side-channel attacks, and privilege escalation opportunities if containers or VMs are not adequately separated.

'''Security Audit Findings''': Research from Princeton showed that containerized edge workloads often shared CPU caches, allowing timing attacks to leak private information between tenants.

'''Case Study''': In a real deployment by AT&T’s OpenStack Edge, researchers uncovered lateral privilege escalation opportunities due to default Kubernetes settings that lacked adequate network policy enforcement.