{"id":"https://openalex.org/W3184498084","doi":"https://doi.org/10.1109/msec.2021.3094726","title":"Understanding the Security Implications of Kubernetes Networking","display_name":"Understanding the Security Implications of Kubernetes Networking","publication_year":2021,"publication_date":"2021-07-27","ids":{"openalex":"https://openalex.org/W3184498084","doi":"https://doi.org/10.1109/msec.2021.3094726","mag":"3184498084"},"language":"en","primary_location":{"id":"doi:10.1109/msec.2021.3094726","is_oa":true,"landing_page_url":"https://doi.org/10.1109/msec.2021.3094726","pdf_url":null,"source":{"id":"https://openalex.org/S61906035","display_name":"IEEE Security & Privacy","issn_l":"1540-7993","issn":["1540-7993","1558-4046"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Security & Privacy","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1109/msec.2021.3094726","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5022459451","display_name":"Francesco Minna","orcid":"https://orcid.org/0000-0002-3018-044X"},"institutions":[{"id":"https://openalex.org/I865915315","display_name":"Vrije Universiteit Amsterdam","ror":"https://ror.org/008xxew50","country_code":"NL","type":"education","lineage":["https://openalex.org/I865915315"]}],"countries":["NL"],"is_corresponding":true,"raw_author_name":"Francesco Minna","raw_affiliation_strings":["Vrije Universiteit Amsterdam, Amsterdam, NL"],"affiliations":[{"raw_affiliation_string":"Vrije Universiteit Amsterdam, Amsterdam, NL","institution_ids":["https://openalex.org/I865915315"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5031952821","display_name":"Agathe Blaise","orcid":"https://orcid.org/0000-0002-9598-8482"},"institutions":[{"id":"https://openalex.org/I4210140930","display_name":"Thales (France)","ror":"https://ror.org/04emwm605","country_code":"FR","type":"company","lineage":["https://openalex.org/I4210140930"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Agathe Blaise","raw_affiliation_strings":["Thales Group, Paris, France"],"affiliations":[{"raw_affiliation_string":"Thales Group, Paris, France","institution_ids":["https://openalex.org/I4210140930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5036875502","display_name":"Filippo Rebecchi","orcid":null},"institutions":[{"id":"https://openalex.org/I4210140930","display_name":"Thales (France)","ror":"https://ror.org/04emwm605","country_code":"FR","type":"company","lineage":["https://openalex.org/I4210140930"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Filippo Rebecchi","raw_affiliation_strings":["Thales Group, Paris, France"],"affiliations":[{"raw_affiliation_string":"Thales Group, Paris, France","institution_ids":["https://openalex.org/I4210140930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5002065279","display_name":"B. Chandrasekaran","orcid":"https://orcid.org/0000-0002-5582-1223"},"institutions":[{"id":"https://openalex.org/I865915315","display_name":"Vrije Universiteit Amsterdam","ror":"https://ror.org/008xxew50","country_code":"NL","type":"education","lineage":["https://openalex.org/I865915315"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Balakrishnan Chandrasekaran","raw_affiliation_strings":["Vrije Universiteit Amsterdam, Amsterdam, NL"],"affiliations":[{"raw_affiliation_string":"Vrije Universiteit Amsterdam, Amsterdam, NL","institution_ids":["https://openalex.org/I865915315"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5085639552","display_name":"Fabio Massacci","orcid":"https://orcid.org/0000-0002-1091-8486"},"institutions":[{"id":"https://openalex.org/I865915315","display_name":"Vrije Universiteit Amsterdam","ror":"https://ror.org/008xxew50","country_code":"NL","type":"education","lineage":["https://openalex.org/I865915315"]},{"id":"https://openalex.org/I193223587","display_name":"University of Trento","ror":"https://ror.org/05trd4x28","country_code":"IT","type":"education","lineage":["https://openalex.org/I193223587"]}],"countries":["IT","NL"],"is_corresponding":false,"raw_author_name":"Fabio Massacci","raw_affiliation_strings":["University of Trento, Trento, IT","University of Trento and Vrije Universiteit Amsterdam"],"affiliations":[{"raw_affiliation_string":"University of Trento, Trento, IT","institution_ids":["https://openalex.org/I193223587"]},{"raw_affiliation_string":"University of Trento and Vrije Universiteit Amsterdam","institution_ids":["https://openalex.org/I865915315","https://openalex.org/I193223587"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5022459451"],"corresponding_institution_ids":["https://openalex.org/I865915315"],"apc_list":null,"apc_paid":null,"fwci":4.1313,"has_fulltext":false,"cited_by_count":35,"citation_normalized_percentile":{"value":0.94115986,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":"19","issue":"5","first_page":"46","last_page":"56"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9979000091552734,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/microservices","display_name":"Microservices","score":0.8902196884155273},{"id":"https://openalex.org/keywords/orchestration","display_name":"Orchestration","score":0.7947845458984375},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7338180541992188},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.7022780776023865},{"id":"https://openalex.org/keywords/container","display_name":"Container (type theory)","score":0.5970107913017273},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5729979276657104},{"id":"https://openalex.org/keywords/cloud-computing-security","display_name":"Cloud computing security","score":0.45021870732307434},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.43078166246414185},{"id":"https://openalex.org/keywords/software-defined-networking","display_name":"Software-defined networking","score":0.41433316469192505},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.25723451375961304},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.1614338457584381},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.12378928065299988}],"concepts":[{"id":"https://openalex.org/C2778505942","wikidata":"https://www.wikidata.org/wiki/Q18344624","display_name":"Microservices","level":3,"score":0.8902196884155273},{"id":"https://openalex.org/C199168358","wikidata":"https://www.wikidata.org/wiki/Q3367000","display_name":"Orchestration","level":3,"score":0.7947845458984375},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7338180541992188},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.7022780776023865},{"id":"https://openalex.org/C2781018962","wikidata":"https://www.wikidata.org/wiki/Q5164884","display_name":"Container (type theory)","level":2,"score":0.5970107913017273},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5729979276657104},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.45021870732307434},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.43078166246414185},{"id":"https://openalex.org/C77270119","wikidata":"https://www.wikidata.org/wiki/Q1655198","display_name":"Software-defined networking","level":2,"score":0.41433316469192505},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.25723451375961304},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.1614338457584381},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.12378928065299988},{"id":"https://openalex.org/C142362112","wikidata":"https://www.wikidata.org/wiki/Q735","display_name":"Art","level":0,"score":0.0},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C153349607","wikidata":"https://www.wikidata.org/wiki/Q36649","display_name":"Visual arts","level":1,"score":0.0},{"id":"https://openalex.org/C558565934","wikidata":"https://www.wikidata.org/wiki/Q2743","display_name":"Musical","level":2,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1109/msec.2021.3094726","is_oa":true,"landing_page_url":"https://doi.org/10.1109/msec.2021.3094726","pdf_url":null,"source":{"id":"https://openalex.org/S61906035","display_name":"IEEE Security & Privacy","issn_l":"1540-7993","issn":["1540-7993","1558-4046"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Security & Privacy","raw_type":"journal-article"},{"id":"pmh:oai:research.vu.nl:openaire/5dedc1a2-dd99-49a8-a5a0-93f3666cfcdc","is_oa":true,"landing_page_url":"https://research.vu.nl/en/publications/5dedc1a2-dd99-49a8-a5a0-93f3666cfcdc","pdf_url":null,"source":{"id":"https://openalex.org/S4306401107","display_name":"VU Research Portal","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I865915315","host_organization_name":"Vrije Universiteit Amsterdam","host_organization_lineage":["https://openalex.org/I865915315"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Minna, F, Blaise, A, Rebecchi, F, Chandrasekaran, B & Massacci, F 2021, 'Understanding the Security Implications of Kubernetes Networking', IEEE Security & Privacy, vol. 19, no. 5, 9497237, pp. 46-56. https://doi.org/10.1109/MSEC.2021.3094726","raw_type":"info:eu-repo/semantics/publishedVersion"},{"id":"pmh:oai:iris.unitn.it:11572/319997","is_oa":true,"landing_page_url":"http://hdl.handle.net/11572/319997","pdf_url":null,"source":{"id":"https://openalex.org/S4306401913","display_name":"Institutional Research Information System (Universit\u00e0 degli Studi di Trento)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I193223587","host_organization_name":"University of Trento","host_organization_lineage":["https://openalex.org/I193223587"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/article"},{"id":"pmh:oai:research.vu.nl:publications/5dedc1a2-dd99-49a8-a5a0-93f3666cfcdc","is_oa":true,"landing_page_url":"https://hdl.handle.net/1871.1/5dedc1a2-dd99-49a8-a5a0-93f3666cfcdc","pdf_url":null,"source":{"id":"https://openalex.org/S4306401107","display_name":"VU Research Portal","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I865915315","host_organization_name":"Vrije Universiteit Amsterdam","host_organization_lineage":["https://openalex.org/I865915315"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Minna, F, Blaise, A, Rebecchi, F, Chandrasekaran, B & Massacci, F 2021, 'Understanding the Security Implications of Kubernetes Networking', IEEE Security & Privacy, vol. 19, no. 5, 9497237, pp. 46-56. https://doi.org/10.1109/MSEC.2021.3094726","raw_type":"info:eu-repo/semantics/publishedVersion"}],"best_oa_location":{"id":"doi:10.1109/msec.2021.3094726","is_oa":true,"landing_page_url":"https://doi.org/10.1109/msec.2021.3094726","pdf_url":null,"source":{"id":"https://openalex.org/S61906035","display_name":"IEEE Security & Privacy","issn_l":"1540-7993","issn":["1540-7993","1558-4046"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Security & Privacy","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G8643789762","display_name":null,"funder_award_id":"H2020 grant 952647 (AssureMOSS)","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"}],"funders":[{"id":"https://openalex.org/F4320320300","display_name":"European Commission","ror":"https://ror.org/00k4n6c32"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":7,"referenced_works":["https://openalex.org/W1905251226","https://openalex.org/W2758509082","https://openalex.org/W3042606321","https://openalex.org/W3094094693","https://openalex.org/W3095612829","https://openalex.org/W3160370961","https://openalex.org/W6780724457"],"related_works":["https://openalex.org/W3035070656","https://openalex.org/W4385785793","https://openalex.org/W1566511039","https://openalex.org/W3206643590","https://openalex.org/W3104149042","https://openalex.org/W4385451301","https://openalex.org/W3187176228","https://openalex.org/W2942841476","https://openalex.org/W3163047980","https://openalex.org/W4237884183"],"abstract_inverted_index":{"Container-orchestration":[0],"software":[1],"such":[2],"as":[3],"Kubernetes":[4],"make":[5],"it":[6],"easy":[7],"to":[8],"deploy":[9],"and":[10],"manage":[11],"modern":[12],"cloud":[13,31],"applications":[14],"based":[15],"on":[16],"microservices.":[17],"Yet,":[18],"its":[19],"network":[20,32,41],"abstractions":[21],"pave":[22],"the":[23,35],"way":[24],"for":[25],"\"unexpected":[26],"attacks\"":[27],"if":[28],"we":[29],"approach":[30],"security":[33],"with":[34],"same":[36],"mental":[37],"model":[38],"of":[39],"traditional":[40],"security.":[42]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":8},{"year":2024,"cited_by_count":5},{"year":2023,"cited_by_count":12},{"year":2022,"cited_by_count":8},{"year":2021,"cited_by_count":1}],"updated_date":"2026-03-07T16:01:11.037858","created_date":"2025-10-10T00:00:00"}