{"id":"https://openalex.org/W4403826838","doi":"https://doi.org/10.1109/access.2024.3486772","title":"KubeRosy: A Dynamic System Call Filtering Framework for Containers","display_name":"KubeRosy: A Dynamic System Call Filtering Framework for Containers","publication_year":2024,"publication_date":"2024-01-01","ids":{"openalex":"https://openalex.org/W4403826838","doi":"https://doi.org/10.1109/access.2024.3486772"},"language":"en","primary_location":{"id":"doi:10.1109/access.2024.3486772","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2024.3486772","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/access.2024.3486772","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5077522064","display_name":"Jin Sun Her","orcid":null},"institutions":[{"id":"https://openalex.org/I146429904","display_name":"Incheon National University","ror":"https://ror.org/02xf7p935","country_code":"KR","type":"education","lineage":["https://openalex.org/I146429904"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Jin Her","raw_affiliation_strings":["Incheon National University, Incheon, Republic of Korea"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Incheon National University, Incheon, Republic of Korea","institution_ids":["https://openalex.org/I146429904"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109172683","display_name":"C.-H. Jo","orcid":null},"institutions":[{"id":"https://openalex.org/I146429904","display_name":"Incheon National University","ror":"https://ror.org/02xf7p935","country_code":"KR","type":"education","lineage":["https://openalex.org/I146429904"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Chi Hyeon Jo","raw_affiliation_strings":["Incheon National University, Incheon, Republic of Korea"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Incheon National University, Incheon, Republic of Korea","institution_ids":["https://openalex.org/I146429904"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5043061967","display_name":"Taejune Park","orcid":"https://orcid.org/0000-0003-1421-5996"},"institutions":[{"id":"https://openalex.org/I111277659","display_name":"Chonnam National University","ror":"https://ror.org/05kzjxq56","country_code":"KR","type":"education","lineage":["https://openalex.org/I111277659"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Taejune Park","raw_affiliation_strings":["Chonnam National University, Gwangju, Republic of Korea"],"raw_orcid":"https://orcid.org/0000-0003-1421-5996","affiliations":[{"raw_affiliation_string":"Chonnam National University, Gwangju, Republic of Korea","institution_ids":["https://openalex.org/I111277659"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5053088189","display_name":"Seungsoo Lee","orcid":"https://orcid.org/0000-0002-6883-1869"},"institutions":[{"id":"https://openalex.org/I146429904","display_name":"Incheon National University","ror":"https://ror.org/02xf7p935","country_code":"KR","type":"education","lineage":["https://openalex.org/I146429904"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Seungsoo Lee","raw_affiliation_strings":["Incheon National University, Incheon, Republic of Korea"],"raw_orcid":"https://orcid.org/0000-0002-6883-1869","affiliations":[{"raw_affiliation_string":"Incheon National University, Incheon, Republic of Korea","institution_ids":["https://openalex.org/I146429904"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":0.8523,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.75549259,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":96,"max":97},"biblio":{"volume":"12","issue":null,"first_page":"159889","last_page":"159901"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9771999716758728,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9771999716758728,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10715","display_name":"Distributed and Parallel Computing Systems","score":0.9696000218391418,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10679","display_name":"Service-Oriented Architecture and Web Services","score":0.9681000113487244,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7555239200592041},{"id":"https://openalex.org/keywords/system-call","display_name":"System call","score":0.4918837547302246},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.35281431674957275},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.3394777178764343},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.32886338233947754},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.22586387395858765}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7555239200592041},{"id":"https://openalex.org/C2778579508","wikidata":"https://www.wikidata.org/wiki/Q722192","display_name":"System call","level":2,"score":0.4918837547302246},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.35281431674957275},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.3394777178764343},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.32886338233947754},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.22586387395858765}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2024.3486772","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2024.3486772","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:6cad7f7589e641ffb95462bbd164787c","is_oa":true,"landing_page_url":"https://doaj.org/article/6cad7f7589e641ffb95462bbd164787c","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 12, Pp 159889-159901 (2024)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2024.3486772","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2024.3486772","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G8500136025","display_name":null,"funder_award_id":"2022R1C1C1006093","funder_id":"https://openalex.org/F4320322120","funder_display_name":"National Research Foundation of Korea"}],"funders":[{"id":"https://openalex.org/F4320322120","display_name":"National Research Foundation of Korea","ror":"https://ror.org/013aysd81"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":13,"referenced_works":["https://openalex.org/W2621197600","https://openalex.org/W3094827892","https://openalex.org/W3211889887","https://openalex.org/W4285296336","https://openalex.org/W4285324995","https://openalex.org/W4327930458","https://openalex.org/W4381956001","https://openalex.org/W4393118739","https://openalex.org/W4400120134","https://openalex.org/W6754288653","https://openalex.org/W6782203875","https://openalex.org/W6784834832","https://openalex.org/W6795368945"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"With":[0],"the":[1,13,55,124,138],"rapid":[2],"adoption":[3],"of":[4,16,54,92,126,150],"cloud":[5],"environments,":[6,135],"container":[7,20,42,64,100,134,169],"technology":[8,21],"has":[9],"become":[10],"crucial":[11],"for":[12,164],"efficient":[14],"operation":[15],"large-scale":[17],"applications.":[18],"Although":[19],"offers":[22],"high":[23],"efficiency":[24],"and":[25,44,105,171,179],"scalability":[26],"through":[27,48],"low-level":[28],"isolation":[29],"via":[30],"shared":[31],"host":[32],"operating":[33],"systems,":[34],"it":[35],"also":[36],"introduces":[37],"security":[38],"vulnerabilities,":[39],"such":[40],"as":[41],"escape":[43],"privilege":[45],"escalation":[46],"attacks":[47],"system":[49,59,69,84,93,111,129],"call":[50,60,70,85,94,112,130],"exploitation.":[51],"Seccomp-BPF,":[52,157],"one":[53],"most":[56],"widely":[57],"used":[58],"filtering":[61,86],"mechanisms,":[62],"supports":[63],"environments":[65],"but":[66],"cannot":[67],"update":[68],"policies":[71,95,113,131],"while":[72,114],"containers":[73],"are":[74],"running.":[75],"To":[76],"address":[77],"these":[78],"limitations,":[79],"we":[80],"propose":[81],"KubeRosy,":[82],"a":[83],"framework":[87],"that":[88,144],"allows":[89,163],"dynamic":[90,165],"modification":[91,167],"without":[96,168],"downtime,":[97],"even":[98],"during":[99],"runtime.":[101],"KubeRosy":[102,145,162],"leverages":[103],"eBPF":[104],"LSM":[106],"hooks":[107],"to":[108,133,155],"support":[109],"fine-grained":[110],"ensuring":[115],"compatibility":[116],"with":[117],"existing":[118],"Seccomp-BPF":[119],"environments.":[120],"This":[121],"approach":[122],"enables":[123],"application":[125],"customized,":[127],"granular":[128],"tailored":[132],"thereby":[136],"reducing":[137],"attack":[139],"surface.":[140],"Our":[141],"evaluation":[142],"shows":[143],"incurs":[146],"an":[147],"additional":[148],"overhead":[149],"only":[151],"722":[152],"ns":[153],"compared":[154],"traditional":[156],"which":[158],"is":[159],"negligible.":[160],"Furthermore,":[161],"policy":[166],"downtime":[170],"provides":[172],"precise":[173],"argument-based":[174],"filtering,":[175],"demonstrating":[176],"its":[177],"practicality":[178],"efficiency.":[180]},"counts_by_year":[{"year":2025,"cited_by_count":3}],"updated_date":"2025-12-22T23:10:17.713674","created_date":"2025-10-10T00:00:00"}