{"id":"https://openalex.org/W7124871807","doi":"https://doi.org/10.1109/cloudcom67567.2025.11331568","title":"Container Orchestration Impact on SPIFFE Identity Artifacts: A Performance Analysis of Docker vs Kubernetes","display_name":"Container Orchestration Impact on SPIFFE Identity Artifacts: A Performance Analysis of Docker vs Kubernetes","publication_year":2025,"publication_date":"2025-11-14","ids":{"openalex":"https://openalex.org/W7124871807","doi":"https://doi.org/10.1109/cloudcom67567.2025.11331568"},"language":null,"primary_location":{"id":"doi:10.1109/cloudcom67567.2025.11331568","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cloudcom67567.2025.11331568","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 lEEE International Conference on Cloud Computing Technology and Science (CloudCom)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5014584586","display_name":"Henrique Z. Cochak","orcid":null},"institutions":[{"id":"https://openalex.org/I164790352","display_name":"Universidade do Estado de Santa Catarina","ror":"https://ror.org/03ztsbk67","country_code":"BR","type":"education","lineage":["https://openalex.org/I164790352"]}],"countries":["BR"],"is_corresponding":true,"raw_author_name":"Henrique Z. Cochak","raw_affiliation_strings":["Graduate Program in Applied Computing (PPGCAP), Santa Catarina State University (UDESC),Brazil"],"affiliations":[{"raw_affiliation_string":"Graduate Program in Applied Computing (PPGCAP), Santa Catarina State University (UDESC),Brazil","institution_ids":["https://openalex.org/I164790352"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5077382160","display_name":"Charles C. Miers","orcid":"https://orcid.org/0000-0002-1976-0478"},"institutions":[{"id":"https://openalex.org/I164790352","display_name":"Universidade do Estado de Santa Catarina","ror":"https://ror.org/03ztsbk67","country_code":"BR","type":"education","lineage":["https://openalex.org/I164790352"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Charles C. Miers","raw_affiliation_strings":["Graduate Program in Applied Computing (PPGCAP), Santa Catarina State University (UDESC),Brazil"],"affiliations":[{"raw_affiliation_string":"Graduate Program in Applied Computing (PPGCAP), Santa Catarina State University (UDESC),Brazil","institution_ids":["https://openalex.org/I164790352"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5010949688","display_name":"Marco A. Marques","orcid":"https://orcid.org/0000-0001-5800-8927"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Marco A. Marques","raw_affiliation_strings":["Universidade de S&#x00E3;o Paulo (USP),Laboratory of Computer Networks and Architecture (LARC),Brazil"],"affiliations":[{"raw_affiliation_string":"Universidade de S&#x00E3;o Paulo (USP),Laboratory of Computer Networks and Architecture (LARC),Brazil","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5023348490","display_name":"Marcos A. Simpl\u00edcio","orcid":"https://orcid.org/0000-0001-5227-7165"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Marcos A. Simpl\u00edcio","raw_affiliation_strings":["Universidade de S&#x00E3;o Paulo (USP),Laboratory of Computer Networks and Architecture (LARC),Brazil"],"affiliations":[{"raw_affiliation_string":"Universidade de S&#x00E3;o Paulo (USP),Laboratory of Computer Networks and Architecture (LARC),Brazil","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5014584586"],"corresponding_institution_ids":["https://openalex.org/I164790352"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.72933362,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"8"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9854000210762024,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9854000210762024,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.0019000000320374966,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10639","display_name":"Advanced Software Engineering Methodologies","score":0.0019000000320374966,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/orchestration","display_name":"Orchestration","score":0.8205999732017517},{"id":"https://openalex.org/keywords/container","display_name":"Container (type theory)","score":0.804099977016449},{"id":"https://openalex.org/keywords/pooling","display_name":"Pooling","score":0.5555999875068665},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.5532000064849854},{"id":"https://openalex.org/keywords/security-token","display_name":"Security token","score":0.5432000160217285},{"id":"https://openalex.org/keywords/selection","display_name":"Selection (genetic algorithm)","score":0.43299999833106995},{"id":"https://openalex.org/keywords/identity","display_name":"Identity (music)","score":0.41440001130104065}],"concepts":[{"id":"https://openalex.org/C199168358","wikidata":"https://www.wikidata.org/wiki/Q3367000","display_name":"Orchestration","level":3,"score":0.8205999732017517},{"id":"https://openalex.org/C2781018962","wikidata":"https://www.wikidata.org/wiki/Q5164884","display_name":"Container (type theory)","level":2,"score":0.804099977016449},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6787999868392944},{"id":"https://openalex.org/C70437156","wikidata":"https://www.wikidata.org/wiki/Q7228652","display_name":"Pooling","level":2,"score":0.5555999875068665},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.5532000064849854},{"id":"https://openalex.org/C48145219","wikidata":"https://www.wikidata.org/wiki/Q1335365","display_name":"Security token","level":2,"score":0.5432000160217285},{"id":"https://openalex.org/C81917197","wikidata":"https://www.wikidata.org/wiki/Q628760","display_name":"Selection (genetic algorithm)","level":2,"score":0.43299999833106995},{"id":"https://openalex.org/C2778355321","wikidata":"https://www.wikidata.org/wiki/Q17079427","display_name":"Identity (music)","level":2,"score":0.41440001130104065},{"id":"https://openalex.org/C118530786","wikidata":"https://www.wikidata.org/wiki/Q1134732","display_name":"Instrumentation (computer programming)","level":2,"score":0.3610000014305115},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3398999869823456},{"id":"https://openalex.org/C12725497","wikidata":"https://www.wikidata.org/wiki/Q810247","display_name":"Baseline (sea)","level":2,"score":0.337799996137619},{"id":"https://openalex.org/C113843644","wikidata":"https://www.wikidata.org/wiki/Q901882","display_name":"Interface (matter)","level":4,"score":0.3077999949455261},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.30720001459121704},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.3068999946117401},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.30570000410079956},{"id":"https://openalex.org/C197640229","wikidata":"https://www.wikidata.org/wiki/Q2534066","display_name":"Predictability","level":2,"score":0.29490000009536743},{"id":"https://openalex.org/C112758219","wikidata":"https://www.wikidata.org/wiki/Q16038819","display_name":"Duration (music)","level":2,"score":0.27869999408721924},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.2770000100135803},{"id":"https://openalex.org/C132943942","wikidata":"https://www.wikidata.org/wiki/Q2562511","display_name":"Footprint","level":2,"score":0.2540000081062317}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/cloudcom67567.2025.11331568","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cloudcom67567.2025.11331568","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 lEEE International Conference on Cloud Computing Technology and Science (CloudCom)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":16,"referenced_works":["https://openalex.org/W2105698239","https://openalex.org/W2222737249","https://openalex.org/W2284296087","https://openalex.org/W2363799590","https://openalex.org/W2516734073","https://openalex.org/W2523336103","https://openalex.org/W2915352631","https://openalex.org/W2976189582","https://openalex.org/W3048145331","https://openalex.org/W4361197994","https://openalex.org/W4361198014","https://openalex.org/W4366220764","https://openalex.org/W4394574781","https://openalex.org/W4396665592","https://openalex.org/W4404032486","https://openalex.org/W4406523025"],"related_works":[],"abstract_inverted_index":{"Container":[0,97],"orchestration":[1,49],"platforms":[2],"are":[3],"essential":[4],"for":[5,106,113],"deploying":[6],"microservices,":[7],"yet":[8],"their":[9],"impact":[10],"on":[11,53],"security-intensive":[12],"workloads":[13],"remains":[14],"largely":[15],"misunderstood.":[16],"This":[17],"work":[18],"presents":[19],"a":[20,103],"systematic":[21],"performance":[22,79],"comparison":[23],"of":[24,40],"SPIFFE-based":[25],"identity":[26,35],"artifacts":[27],"across":[28],"Docker":[29,82],"Compose":[30],"and":[31,43,109,116],"Kubernetes,":[32],"evaluating":[33],"four":[34],"modes":[36],"through":[37],"fine-grained":[38],"instrumentation":[39],"token":[41],"minting":[42],"validation":[44],"operations.":[45],"Our":[46],"results":[47],"reveal":[48],"overhead":[50,62],"depends":[51],"critically":[52],"connection":[54,58,67],"management:":[55],"operations":[56],"employing":[57],"pooling":[59],"exhibit":[60],"minimal":[61,96],"(0.8-4.9":[63],"%),":[64],"while":[65],"repeated":[66],"establishment":[68],"incurs":[69],"substantial":[70],"penalties":[71],"(up":[72],"to":[73],"26.6%).":[74],"Kubernetes":[75],"demonstrates":[76],"2-10x":[77],"higher":[78],"variability":[80],"than":[81],"Compose,":[83],"indicating":[84],"platform":[85,114],"selection":[86,115],"affects":[87],"predictability":[88],"beyond":[89],"mean":[90],"latency.":[91],"These":[92],"findings,":[93],"obtained":[94],"using":[95],"Network":[98],"Interface":[99],"(CNI)":[100],"configuration,":[101],"represent":[102],"conservative":[104],"baseline":[105],"production":[107],"deployments":[108],"provide":[110],"empirical":[111],"guidance":[112],"security":[117],"architecture":[118],"design.":[119]},"counts_by_year":[],"updated_date":"2026-01-22T23:29:09.771500","created_date":"2026-01-21T00:00:00"}
