{"id":"https://openalex.org/W4388757519","doi":"https://doi.org/10.1109/uemcon59035.2023.10316032","title":"Exploring Solutions for Container Image Security","display_name":"Exploring Solutions for Container Image Security","publication_year":2023,"publication_date":"2023-10-12","ids":{"openalex":"https://openalex.org/W4388757519","doi":"https://doi.org/10.1109/uemcon59035.2023.10316032"},"language":"en","primary_location":{"id":"doi:10.1109/uemcon59035.2023.10316032","is_oa":false,"landing_page_url":"http://dx.doi.org/10.1109/uemcon59035.2023.10316032","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE 14th Annual Ubiquitous Computing, Electronics & Mobile Communication Conference (UEMCON)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5104199293","display_name":"Frank Campo","orcid":null},"institutions":[{"id":"https://openalex.org/I145311948","display_name":"Johns Hopkins University","ror":"https://ror.org/00za53h95","country_code":"US","type":"education","lineage":["https://openalex.org/I145311948"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Frank Campo","raw_affiliation_strings":["Johns Hopkins University,Engineering for Professionals, Whiting School of Engineering","Engineering for Professionals, Whiting School of Engineering, Johns Hopkins University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Johns Hopkins University,Engineering for Professionals, Whiting School of Engineering","institution_ids":["https://openalex.org/I145311948"]},{"raw_affiliation_string":"Engineering for Professionals, Whiting School of Engineering, Johns Hopkins University","institution_ids":["https://openalex.org/I145311948"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5024291604","display_name":"H Wang","orcid":null},"institutions":[{"id":"https://openalex.org/I145311948","display_name":"Johns Hopkins University","ror":"https://ror.org/00za53h95","country_code":"US","type":"education","lineage":["https://openalex.org/I145311948"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Howe Wang","raw_affiliation_strings":["Johns Hopkins University,Engineering for Professionals, Whiting School of Engineering","Engineering for Professionals, Whiting School of Engineering, Johns Hopkins University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Johns Hopkins University,Engineering for Professionals, Whiting School of Engineering","institution_ids":["https://openalex.org/I145311948"]},{"raw_affiliation_string":"Engineering for Professionals, Whiting School of Engineering, Johns Hopkins University","institution_ids":["https://openalex.org/I145311948"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5046121001","display_name":"Joel Coffman","orcid":"https://orcid.org/0000-0002-5500-4450"},"institutions":[{"id":"https://openalex.org/I145311948","display_name":"Johns Hopkins University","ror":"https://ror.org/00za53h95","country_code":"US","type":"education","lineage":["https://openalex.org/I145311948"]},{"id":"https://openalex.org/I430641","display_name":"United States Air Force Academy","ror":"https://ror.org/0055d0g64","country_code":"US","type":"government","lineage":["https://openalex.org/I1330347796","https://openalex.org/I4210089612","https://openalex.org/I4210102105","https://openalex.org/I430641"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Joel Coffman","raw_affiliation_strings":["Johns Hopkins University,Engineering for Professionals, Whiting School of Engineering","Department of Computer and Cyber Sciences, United States Air Force Academy","Engineering for Professionals, Whiting School of Engineering, Johns Hopkins University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Johns Hopkins University,Engineering for Professionals, Whiting School of Engineering","institution_ids":["https://openalex.org/I145311948"]},{"raw_affiliation_string":"Department of Computer and Cyber Sciences, United States Air Force Academy","institution_ids":["https://openalex.org/I430641"]},{"raw_affiliation_string":"Engineering for Professionals, Whiting School of Engineering, Johns Hopkins University","institution_ids":["https://openalex.org/I145311948"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.5543,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.65438901,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"82","last_page":"88"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9966999888420105,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8191923499107361},{"id":"https://openalex.org/keywords/container","display_name":"Container (type theory)","score":0.7720504999160767},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6622738242149353},{"id":"https://openalex.org/keywords/pipeline","display_name":"Pipeline (software)","score":0.5314938426017761},{"id":"https://openalex.org/keywords/workflow","display_name":"Workflow","score":0.5258655548095703},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.5028018951416016},{"id":"https://openalex.org/keywords/nist","display_name":"NIST","score":0.42976847290992737},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.4126521944999695},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.2450682520866394},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.11171424388885498}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8191923499107361},{"id":"https://openalex.org/C2781018962","wikidata":"https://www.wikidata.org/wiki/Q5164884","display_name":"Container (type theory)","level":2,"score":0.7720504999160767},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6622738242149353},{"id":"https://openalex.org/C43521106","wikidata":"https://www.wikidata.org/wiki/Q2165493","display_name":"Pipeline (software)","level":2,"score":0.5314938426017761},{"id":"https://openalex.org/C177212765","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Workflow","level":2,"score":0.5258655548095703},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.5028018951416016},{"id":"https://openalex.org/C111219384","wikidata":"https://www.wikidata.org/wiki/Q6954384","display_name":"NIST","level":2,"score":0.42976847290992737},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.4126521944999695},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.2450682520866394},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.11171424388885498},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.0},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/uemcon59035.2023.10316032","is_oa":false,"landing_page_url":"http://dx.doi.org/10.1109/uemcon59035.2023.10316032","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE 14th Annual Ubiquitous Computing, Electronics & Mobile Communication Conference (UEMCON)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.47999998927116394}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":17,"referenced_works":["https://openalex.org/W2554427106","https://openalex.org/W2598200822","https://openalex.org/W2758360306","https://openalex.org/W2761578098","https://openalex.org/W2903126489","https://openalex.org/W2936268283","https://openalex.org/W2968031544","https://openalex.org/W3007480145","https://openalex.org/W3012308217","https://openalex.org/W3034155019","https://openalex.org/W3133764566","https://openalex.org/W3160962759","https://openalex.org/W3162311522","https://openalex.org/W4286331355","https://openalex.org/W4288083139","https://openalex.org/W4312547223","https://openalex.org/W4383221573"],"related_works":["https://openalex.org/W2158491338","https://openalex.org/W2807901368","https://openalex.org/W2133733652","https://openalex.org/W2072658171","https://openalex.org/W2606392311","https://openalex.org/W2320042380","https://openalex.org/W4385956668","https://openalex.org/W2900895161","https://openalex.org/W4380838366","https://openalex.org/W2539884462"],"abstract_inverted_index":{"Guided":[0],"by":[1,120],"NIST\u2019s":[2],"Application":[3],"Container":[4],"Security":[5],"Guide,":[6],"we":[7,80,101],"explore":[8],"workflows":[9],"to":[10,48,105],"address":[11],"container":[12,32,122,128],"image":[13,73,92],"vulnerabilities":[14,76,108],"that":[15,25,34,43,57,125],"have":[16],"known":[17],"fixes.":[18],"The":[19],"approach":[20],"stems":[21],"from":[22],"the":[23,82,90,133],"idea":[24],"a":[26,36,41,45,50,94,113],"DevOps":[27],"team":[28],"should":[29],"always":[30],"build":[31],"images":[33,67],"meet":[35],"specified":[37],"security":[38,53,129],"standard.We":[39],"outline":[40],"blueprint":[42],"leverages":[44],"vulnerability":[46],"scanner":[47],"establish":[49],"baseline":[51],"of":[52,84,115,135],"issues":[54],"and":[55,77,79,93,124],"reduces":[56],"list":[58],"via":[59],"an":[60],"automated":[61,86],"patching":[62,106],"process.":[63],"We":[64],"target":[65],"popular":[66,121],"in":[68,109],"common":[69],"use:":[70],"scanning":[71],"each":[72],"identifies":[74],"potential":[75],"misconfigurations,":[78],"compare":[81],"results":[83],"our":[85,99],"pipeline":[87],"against":[88],"both":[89],"original":[91],"manually":[95],"patched":[96],"one.":[97],"Through":[98],"work,":[100],"identified":[102],"technical":[103],"barriers":[104],"fixable":[107],"off-the-shelf":[110],"(OTS)":[111],"images,":[112],"lack":[114],"accountability":[116],"for":[117,127],"badges":[118],"used":[119],"registries,":[123],"responsibility":[126],"falls":[130],"heavily":[131],"on":[132],"shoulders":[134],"users.":[136]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":1}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}