{"id":"https://openalex.org/W4411688073","doi":"https://doi.org/10.1109/tcc.2025.3583414","title":"Enhancing Container Security Through Phase-Based System Call Filtering","display_name":"Enhancing Container Security Through Phase-Based System Call Filtering","publication_year":2025,"publication_date":"2025-06-26","ids":{"openalex":"https://openalex.org/W4411688073","doi":"https://doi.org/10.1109/tcc.2025.3583414"},"language":"en","primary_location":{"id":"doi:10.1109/tcc.2025.3583414","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tcc.2025.3583414","pdf_url":null,"source":{"id":"https://openalex.org/S2492498579","display_name":"IEEE Transactions on Cloud Computing","issn_l":"2168-7161","issn":["2168-7161","2372-0018"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Cloud Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Ke Chen","orcid":"https://orcid.org/0009-0004-6677-5463"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ke Chen","raw_affiliation_strings":["School of Cyberspace Security, Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0004-6677-5463","affiliations":[{"raw_affiliation_string":"School of Cyberspace Security, Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101486498","display_name":"Hui Lu","orcid":"https://orcid.org/0000-0002-4120-7716"},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hui Lu","raw_affiliation_strings":["Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-4120-7716","affiliations":[{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5042685889","display_name":"Yelin Yao","orcid":"https://orcid.org/0000-0002-3717-9871"},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yinnan Yao","raw_affiliation_strings":["Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5091368858","display_name":"Binxing Fang","orcid":"https://orcid.org/0000-0003-0305-2132"},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Binxing Fang","raw_affiliation_strings":["Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Yuan Liu","orcid":"https://orcid.org/0000-0002-0246-0778"},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuan Liu","raw_affiliation_strings":["Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-0246-0778","affiliations":[{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5056608045","display_name":"Zhihong Tian","orcid":"https://orcid.org/0000-0002-9409-5359"},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhihong Tian","raw_affiliation_strings":["Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-9409-5359","affiliations":[{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":7.5109,"has_fulltext":false,"cited_by_count":8,"citation_normalized_percentile":{"value":0.97284354,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":95,"max":100},"biblio":{"volume":"13","issue":"3","first_page":"983","last_page":"994"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12203","display_name":"Mobile Agent-Based Network Management","score":0.8546000123023987,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12203","display_name":"Mobile Agent-Based Network Management","score":0.8546000123023987,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10933","display_name":"Real-Time Systems Scheduling","score":0.7972000241279602,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10904","display_name":"Embedded Systems Design Techniques","score":0.7515000104904175,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7071014046669006},{"id":"https://openalex.org/keywords/container","display_name":"Container (type theory)","score":0.6284036040306091},{"id":"https://openalex.org/keywords/system-call","display_name":"System call","score":0.5596174597740173},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5468931794166565},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.54405677318573},{"id":"https://openalex.org/keywords/phase","display_name":"Phase (matter)","score":0.44675540924072266},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.3517221510410309},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.24630701541900635},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.10329538583755493}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7071014046669006},{"id":"https://openalex.org/C2781018962","wikidata":"https://www.wikidata.org/wiki/Q5164884","display_name":"Container (type theory)","level":2,"score":0.6284036040306091},{"id":"https://openalex.org/C2778579508","wikidata":"https://www.wikidata.org/wiki/Q722192","display_name":"System call","level":2,"score":0.5596174597740173},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5468931794166565},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.54405677318573},{"id":"https://openalex.org/C44280652","wikidata":"https://www.wikidata.org/wiki/Q104837","display_name":"Phase (matter)","level":2,"score":0.44675540924072266},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3517221510410309},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.24630701541900635},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.10329538583755493},{"id":"https://openalex.org/C178790620","wikidata":"https://www.wikidata.org/wiki/Q11351","display_name":"Organic chemistry","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tcc.2025.3583414","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tcc.2025.3583414","pdf_url":null,"source":{"id":"https://openalex.org/S2492498579","display_name":"IEEE Transactions on Cloud Computing","issn_l":"2168-7161","issn":["2168-7161","2372-0018"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Cloud Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1416658616","display_name":null,"funder_award_id":"62272121","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6064493666","display_name":null,"funder_award_id":"U2436208","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8812891240","display_name":null,"funder_award_id":"62372129","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":24,"referenced_works":["https://openalex.org/W2023953679","https://openalex.org/W2065176875","https://openalex.org/W2621197600","https://openalex.org/W2902718458","https://openalex.org/W2931991156","https://openalex.org/W2991611768","https://openalex.org/W2997790855","https://openalex.org/W2999925232","https://openalex.org/W3013077068","https://openalex.org/W3026797990","https://openalex.org/W3081528862","https://openalex.org/W3106913944","https://openalex.org/W3118177095","https://openalex.org/W3119802848","https://openalex.org/W3192824891","https://openalex.org/W3200325357","https://openalex.org/W3201054243","https://openalex.org/W3211889887","https://openalex.org/W4283219983","https://openalex.org/W4285324995","https://openalex.org/W4288075232","https://openalex.org/W4296965432","https://openalex.org/W4384027004","https://openalex.org/W4388856815"],"related_works":["https://openalex.org/W4244478748","https://openalex.org/W2367301169","https://openalex.org/W3150465815","https://openalex.org/W4223488648","https://openalex.org/W2134969820","https://openalex.org/W2251605416","https://openalex.org/W1997222214","https://openalex.org/W2560439919","https://openalex.org/W4389340727","https://openalex.org/W2802581102"],"abstract_inverted_index":{"Container":[0],"technology":[1],"in":[2,21],"cloud":[3,84,172],"computing":[4],"has":[5],"improved":[6],"resource":[7],"utilization":[8],"and":[9,38,54,141,166],"deployment":[10],"efficiency,":[11],"but":[12],"it":[13],"also":[14],"introduces":[15],"new":[16],"security":[17,170],"risks.":[18],"Excessive":[19],"privileges":[20,120],"containerized":[22,106],"environments":[23],"can":[24,59],"allow":[25],"attackers":[26],"to":[27,35,75,100,137],"exploit":[28],"insufficiently":[29],"restricted":[30],"system":[31,42,77,94,113,149,161],"calls,":[32],"potentially":[33],"leading":[34],"container":[36,133],"escapes":[37],"other":[39],"attacks.":[40],"Some":[41],"calls":[43,95,104],"are":[44],"only":[45],"necessary":[46,103],"during":[47,57,80,96],"the":[48,61,81,97,123,127,145,156,168],"initialization":[49,98,140],"phase":[50,99,134],"of":[51,63,83,93,147,171],"a":[52,68,90,110,132],"container,":[53],"allowing":[55],"them":[56],"runtime":[58,82,142,160],"increase":[60],"risk":[62],"exploitation.":[64],"This":[65],"paper":[66],"proposes":[67],"Phase-based":[69],"System":[70],"Call":[71],"Filtering":[72],"(PSF)":[73],"method":[74,88,158],"minimize":[76],"call":[78,114,150,162],"permissions":[79],"containers.":[85,173],"The":[86],"PSF":[87],"builds":[89],"comprehensive":[91],"whitelist":[92,115],"cover":[101],"all":[102],"for":[105],"applications.":[107],"During":[108],"runtime,":[109],"refined,":[111],"phase-specific":[112,148],"is":[116],"enforced,":[117],"dynamically":[118],"adjusting":[119],"based":[121],"on":[122],"functions":[124],"encapsulated":[125],"within":[126],"container.":[128],"Additionally,":[129],"we":[130],"introduce":[131],"recognition":[135],"algorithm":[136],"distinguish":[138],"between":[139],"phases,":[143],"supporting":[144],"generation":[146],"lists.":[151],"Experimental":[152],"results":[153],"show":[154],"that":[155],"proposed":[157],"enhances":[159],"restrictions,":[163],"minimizes":[164],"privileges,":[165],"improves":[167],"overall":[169]},"counts_by_year":[{"year":2026,"cited_by_count":6},{"year":2025,"cited_by_count":2}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}