Choose the Right Tenant Containment Strategy for an Edge Platform
Overview
What this challenge is about.
Choose the Right Tenant Containment Strategy for an Edge Platform. Advanced challenge in analysis. Analyzing real datasets and building models that drive dec...
The Brief
What you'll do, and what you'll demonstrate.
Determine which OS-level containment strategy — or hybrid mapping of strategies to workloads — the platform should adopt to safely and economically run untrusted multi-tenant code at the edge.
This is not a data exercise. It is the work an analyst does when stakeholders need answers from messy data. That distinction matters to every hiring manager who has seen candidates describe statistical methods and none who have extracted insight from messy, real-world data.
When you finish, you will have something most graduates do not: a real-world deliverable, verified by Ewance, that you can show to a hiring manager and say "I did this. Here is the proof."
Earning criteria — what you'll demonstrate
- Compare user-space-kernel, microVM, and WebAssembly isolation models in terms of their security boundary and performance cost.
- Design a fair, reproducible benchmark that holds hardware and workload constant across competing runtimes.
- Reason about blast radius: what an attacker actually reaches after escaping each kind of sandbox.
- Translate quantitative benchmark evidence into a workload-aware recommendation for a decision-maker.
- Communicate a security-versus-cost trade-off clearly to a non-specialist audience.
Program Fit
Where this fits in your program.
Sharpens the same skills your degree expects you to demonstrate.
Aligned coursework coming soon.
Skills
Skills you'll demonstrate.
Each one shows up on your verified credential.
- Containment
Apply containment to solve real industry problems and demonstrate production-level capability.
- Virtualization
Apply virtualization to solve real industry problems and demonstrate production-level capability.
- Wasm
Apply wasm to solve real industry problems and demonstrate production-level capability.
- Benchmarking
Apply benchmarking to solve real industry problems and demonstrate production-level capability.
- Os Security
Apply os security to solve real industry problems and demonstrate production-level capability.
- Operating Systems
Apply operating systems to solve real industry problems and demonstrate production-level capability.
Careers
Career paths this challenge builds toward
Completing this challenge demonstrates skills that transfer directly to these roles:
Platform Engineer
Mirrors the core platform-engineering judgment call of selecting isolation infrastructure for untrusted multi-tenant workloads, balancing security boundary, cost, and density, then defending the choice to leadership with reproducible evidence.
This challenge sharpens
- containment
- virtualization
- operating-systems
Infrastructure Security Engineer
Builds the habit of reasoning about real blast radius — what an attacker reaches after a sandbox escape — and grounding each isolation claim in documented threat models rather than assumptions, which is the daily work of securing shared infrastructure.
This challenge sharpens
- os-security
- containment
- operating-systems
WebAssembly Runtime Engineer
Develops fluency in where WebAssembly sandboxing wins and where it falls short against microVMs and user-space kernels, and how to benchmark a WebAssembly runtime fairly against heavier isolation options for production edge workloads.
This challenge sharpens
- wasm
- benchmarking
- virtualization