{"id":"https://openalex.org/W7225320229","doi":"https://doi.org/10.59784/glosains.v7i5.986","title":"Defense-in-Depth for Containerized Web Applications: Experimental Evaluation of Web Application Firewall and Docker Hardening against Command Injection","display_name":"Defense-in-Depth for Containerized Web Applications: Experimental Evaluation of Web Application Firewall and Docker Hardening against Command Injection","publication_year":2026,"publication_date":"2026-11-05","ids":{"openalex":"https://openalex.org/W7225320229","doi":"https://doi.org/10.59784/glosains.v7i5.986"},"language":"en","primary_location":{"id":"doi:10.59784/glosains.v7i5.986","doi":"https://doi.org/10.59784/glosains.v7i5.986","is_oa":true,"landing_page_url":"https://doi.org/10.59784/glosains.v7i5.986","pdf_url":null,"source":{"id":"https://openalex.org/S4386621815","display_name":"Glosains Jurnal Sains Global Indonesia","issn_l":"2798-4125","issn":["2798-4125","2798-4311"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I4391012627","host_organization_name":"Sekolah Tinggi Agama Islam Kuningan","host_organization_lineage":["https://openalex.org/I4391012627"],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Glosains: Jurnal Sains Global Indonesia","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://doi.org/10.59784/glosains.v7i5.986","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5018731633","display_name":"Arif Rosada","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I166073570","display_name":"Binus University","ror":"https://ror.org/03zmf4s77","country_code":"ID","type":"education","lineage":["https://openalex.org/I166073570"]}],"countries":["ID"],"is_corresponding":false,"raw_author_name":"Arif Rosada","raw_affiliation_strings":["Universitas Bina Nusantara, Indonesia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Universitas Bina Nusantara, Indonesia","institution_ids":["https://openalex.org/I166073570"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5159908993","display_name":"Benfano Soewito","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I166073570","display_name":"Binus University","ror":"https://ror.org/03zmf4s77","country_code":"ID","type":"education","lineage":["https://openalex.org/I166073570"]}],"countries":["ID"],"is_corresponding":false,"raw_author_name":"Benfano Soewito","raw_affiliation_strings":["Universitas Bina Nusantara, Indonesia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Universitas Bina Nusantara, Indonesia","institution_ids":["https://openalex.org/I166073570"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I166073570"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"7","issue":"5","first_page":"3596","last_page":"3610"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.0015999999595806003,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.0005000000237487257,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/defense-in-depth","display_name":"defense-in-depth","score":0.9629999995231628},{"id":"https://openalex.org/keywords/web-application-firewall","display_name":"web application firewall","score":0.7649999856948853},{"id":"https://openalex.org/keywords/command-injection","display_name":"command injection","score":0.972000002861023},{"id":"https://openalex.org/keywords/privilege-escalation","display_name":"privilege escalation","score":0.9160000085830688},{"id":"https://openalex.org/keywords/remote-code-execution","display_name":"remote code execution","score":0.9229999780654907}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6190999746322632},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6139000058174133},{"id":"https://openalex.org/C118643609","wikidata":"https://www.wikidata.org/wiki/Q189210","display_name":"Web application","level":2,"score":0.5449000000953674},{"id":"https://openalex.org/C77714075","wikidata":"https://www.wikidata.org/wiki/Q5452017","display_name":"Firewall (physics)","level":5,"score":0.5439000129699707},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.5400000214576721},{"id":"https://openalex.org/C86444895","wikidata":"https://www.wikidata.org/wiki/Q451816","display_name":"Application firewall","level":4,"score":0.4916999936103821},{"id":"https://openalex.org/C31395832","wikidata":"https://www.wikidata.org/wiki/Q1318674","display_name":"Testbed","level":2,"score":0.43970000743865967},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.414000004529953},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.4009000062942505},{"id":"https://openalex.org/C2776452267","wikidata":"https://www.wikidata.org/wiki/Q1503443","display_name":"Secrecy","level":2,"score":0.3709000051021576},{"id":"https://openalex.org/C2775928411","wikidata":"https://www.wikidata.org/wiki/Q2041312","display_name":"Fault injection","level":3,"score":0.36480000615119934},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.3440999984741211},{"id":"https://openalex.org/C553261973","wikidata":"https://www.wikidata.org/wiki/Q14579","display_name":"Linux kernel","level":2,"score":0.33640000224113464},{"id":"https://openalex.org/C59241245","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Web application security","level":4,"score":0.33399999141693115},{"id":"https://openalex.org/C172776598","wikidata":"https://www.wikidata.org/wiki/Q7943570","display_name":"Vulnerability management","level":4,"score":0.3246999979019165},{"id":"https://openalex.org/C2777407602","wikidata":"https://www.wikidata.org/wiki/Q1888932","display_name":"Mandatory access control","level":4,"score":0.3246000111103058},{"id":"https://openalex.org/C25344961","wikidata":"https://www.wikidata.org/wiki/Q192726","display_name":"Virtual machine","level":2,"score":0.32280001044273376},{"id":"https://openalex.org/C86844869","wikidata":"https://www.wikidata.org/wiki/Q2798820","display_name":"Hacker","level":2,"score":0.32199999690055847},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.3165000081062317},{"id":"https://openalex.org/C11392498","wikidata":"https://www.wikidata.org/wiki/Q11288","display_name":"Web server","level":3,"score":0.3156999945640564},{"id":"https://openalex.org/C2776459999","wikidata":"https://www.wikidata.org/wiki/Q2119376","display_name":"Fidelity","level":2,"score":0.3095000088214874},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.2989000082015991},{"id":"https://openalex.org/C35578498","wikidata":"https://www.wikidata.org/wiki/Q193424","display_name":"Web service","level":2,"score":0.2939999997615814},{"id":"https://openalex.org/C44255700","wikidata":"https://www.wikidata.org/wiki/Q978423","display_name":"Hardening (computing)","level":3,"score":0.28610000014305115},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.27489998936653137},{"id":"https://openalex.org/C513985346","wikidata":"https://www.wikidata.org/wiki/Q270471","display_name":"Virtualization","level":3,"score":0.2718999981880188},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.26980000734329224},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.2694000005722046},{"id":"https://openalex.org/C22111027","wikidata":"https://www.wikidata.org/wiki/Q1070427","display_name":"Internet security","level":4,"score":0.2597000002861023},{"id":"https://openalex.org/C195518309","wikidata":"https://www.wikidata.org/wiki/Q13424265","display_name":"Security testing","level":5,"score":0.2533999979496002},{"id":"https://openalex.org/C22927095","wikidata":"https://www.wikidata.org/wiki/Q1784206","display_name":"Stateful firewall","level":3,"score":0.251800000667572},{"id":"https://openalex.org/C2779821363","wikidata":"https://www.wikidata.org/wiki/Q428072","display_name":"Containerization","level":3,"score":0.2502000033855438}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.59784/glosains.v7i5.986","doi":"https://doi.org/10.59784/glosains.v7i5.986","is_oa":true,"landing_page_url":"https://doi.org/10.59784/glosains.v7i5.986","pdf_url":null,"source":{"id":"https://openalex.org/S4386621815","display_name":"Glosains Jurnal Sains Global Indonesia","issn_l":"2798-4125","issn":["2798-4125","2798-4311"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I4391012627","host_organization_name":"Sekolah Tinggi Agama Islam Kuningan","host_organization_lineage":["https://openalex.org/I4391012627"],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Glosains: Jurnal Sains Global Indonesia","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.59784/glosains.v7i5.986","doi":"https://doi.org/10.59784/glosains.v7i5.986","is_oa":true,"landing_page_url":"https://doi.org/10.59784/glosains.v7i5.986","pdf_url":null,"source":{"id":"https://openalex.org/S4386621815","display_name":"Glosains Jurnal Sains Global Indonesia","issn_l":"2798-4125","issn":["2798-4125","2798-4311"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I4391012627","host_organization_name":"Sekolah Tinggi Agama Islam Kuningan","host_organization_lineage":["https://openalex.org/I4391012627"],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Glosains: Jurnal Sains Global Indonesia","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W6945323004","https://openalex.org/W4382655562","https://openalex.org/W4200100371","https://openalex.org/W7140068581","https://openalex.org/W7161640397","https://openalex.org/W7219543152","https://openalex.org/W4415366383","https://openalex.org/W4362647209","https://openalex.org/W7214862769","https://openalex.org/W7116802865"],"abstract_inverted_index":{"Background:":[0],"Web":[1,54],"applications":[2,207],"deployed":[3],"in":[4],"modern":[5],"infrastructure":[6],"remain":[7],"vulnerable":[8],"to":[9,33,43,62,156],"command":[10,64,112,165],"injection":[11,65,113,166],"and":[12,36,58,66,90,131,143,174,195,216,226],"remote":[13],"code":[14],"execution":[15],"attacks,":[16],"particularly":[17],"when":[18],"security":[19,182],"controls":[20],"are":[21],"applied":[22],"independently.":[23],"Containerization":[24],"improves":[25,213],"deployment":[26,78],"flexibility":[27],"but":[28],"introduces":[29],"additional":[30],"risks":[31],"related":[32],"privilege":[34,172],"escalation":[35,173],"runtime":[37,67,217],"compromise.":[38],"Objective:":[39],"This":[40,211],"study":[41],"aims":[42],"evaluate":[44],"the":[45,98,140,148],"effectiveness":[46],"of":[47,150,163],"a":[48,53,80,85,91,193,199],"defense-in-depth":[49,201],"approach":[50,212],"by":[51],"integrating":[52],"Application":[55],"Firewall":[56],"(WAF)":[57],"Docker":[59,144,196],"container":[60,169],"hardening":[61,145,170,197],"mitigate":[63],"exploitation":[68,129],"risks.":[69],"Methods:":[70],"An":[71],"experimental":[72],"evaluation":[73],"was":[74,121],"conducted":[75],"using":[76,107,222],"three":[77,154],"configurations:":[79],"legacy":[81],"virtual":[82],"machine":[83],"(VM),":[84],"containerized":[86,205],"application":[87],"without":[88],"hardening,":[89],"WAF-protected,":[92],"hardened":[93],"container.":[94],"The":[95,136,158,180],"assessment":[96,106],"followed":[97],"NIST":[99],"SP":[100],"800-115":[101],"framework,":[102],"combining":[103],"automated":[104],"vulnerability":[105,125],"OWASP":[108],"ZAP":[109],"with":[110,188],"controlled":[111],"testing":[114],"involving":[115],"3,000":[116,164],"malicious":[117],"payloads.":[118],"Security":[119],"performance":[120,187],"evaluated":[122],"based":[123],"on":[124],"findings,":[126],"attack-blocking":[127],"capability,":[128],"outcomes,":[130],"system":[132,186],"response":[133],"performance.":[134],"Results:":[135],"findings":[137,155],"show":[138],"that":[139],"combined":[141],"WAF":[142,159,194],"configuration":[146],"reduced":[147],"number":[149],"high-severity":[151],"vulnerabilities":[152],"from":[153],"one.":[157],"successfully":[160],"blocked":[161],"2,251":[162],"payloads,":[167],"while":[168],"prevented":[171],"host":[175],"access":[176],"during":[177],"post-exploitation":[178],"testing.":[179],"implemented":[181],"layers":[183],"maintained":[184],"stable":[185],"minimal":[189],"overhead.":[190],"Conclusion:":[191],"Integrating":[192],"provides":[198],"practical":[200],"strategy":[202],"for":[203],"strengthening":[204],"web":[206],"against":[208],"injection-based":[209],"attacks.":[210],"attack":[214,224],"prevention":[215],"containment,":[218],"although":[219],"further":[220],"validation":[221],"broader":[223],"scenarios":[225],"repeated":[227],"experiments":[228],"is":[229],"recommended.":[230]},"counts_by_year":[],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2026-11-06T00:00:00"}