{"id":"https://openalex.org/W4411552311","doi":"https://doi.org/10.1109/icse55347.2025.00170","title":"On Prescription or Off Prescription? An Empirical Study of Community-Prescribed Security Configurations for Kubernetes","display_name":"On Prescription or Off Prescription? An Empirical Study of Community-Prescribed Security Configurations for Kubernetes","publication_year":2025,"publication_date":"2025-04-26","ids":{"openalex":"https://openalex.org/W4411552311","doi":"https://doi.org/10.1109/icse55347.2025.00170"},"language":"en","primary_location":{"id":"doi:10.1109/icse55347.2025.00170","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icse55347.2025.00170","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE/ACM 47th International Conference on Software Engineering (ICSE)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5019761662","display_name":"Shazibul Islam Shamim","orcid":"https://orcid.org/0000-0001-8084-5123"},"institutions":[{"id":"https://openalex.org/I172980758","display_name":"Kennesaw State University","ror":"https://ror.org/00jeqjx33","country_code":"US","type":"education","lineage":["https://openalex.org/I172980758"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Shazibul Islam Shamim","raw_affiliation_strings":["Kennesaw State University,Dept of SWEGD,Marietta,GA,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Kennesaw State University,Dept of SWEGD,Marietta,GA,USA","institution_ids":["https://openalex.org/I172980758"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5110460104","display_name":"Hanyang Hu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hanyang Hu","raw_affiliation_strings":["Company-A,CA,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Company-A,CA,USA","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5069063267","display_name":"Akond Rahman","orcid":"https://orcid.org/0000-0002-5056-757X"},"institutions":[{"id":"https://openalex.org/I82497590","display_name":"Auburn University","ror":"https://ror.org/02v80fc35","country_code":"US","type":"education","lineage":["https://openalex.org/I82497590"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Akond Rahman","raw_affiliation_strings":["Auburn University,Dept. of Computer Science and Software Engineering,Auburn,AL,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Auburn University,Dept. of Computer Science and Software Engineering,Auburn,AL,USA","institution_ids":["https://openalex.org/I82497590"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":26.2755,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":{"value":0.9946576,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"2432","last_page":"2444"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10557","display_name":"Social Media and Politics","score":0.6917999982833862,"subfield":{"id":"https://openalex.org/subfields/3315","display_name":"Communication"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10557","display_name":"Social Media and Politics","score":0.6917999982833862,"subfield":{"id":"https://openalex.org/subfields/3315","display_name":"Communication"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11239","display_name":"Social Capital and Networks","score":0.609499990940094,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/medical-prescription","display_name":"Medical prescription","score":0.8634892106056213},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5010077953338623},{"id":"https://openalex.org/keywords/medicine","display_name":"Medicine","score":0.1444404125213623},{"id":"https://openalex.org/keywords/nursing","display_name":"Nursing","score":0.09326699376106262}],"concepts":[{"id":"https://openalex.org/C2426938","wikidata":"https://www.wikidata.org/wiki/Q3355478","display_name":"Medical prescription","level":2,"score":0.8634892106056213},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5010077953338623},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.1444404125213623},{"id":"https://openalex.org/C159110408","wikidata":"https://www.wikidata.org/wiki/Q121176","display_name":"Nursing","level":1,"score":0.09326699376106262}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icse55347.2025.00170","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icse55347.2025.00170","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE/ACM 47th International Conference on Software Engineering (ICSE)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G419794402","display_name":null,"funder_award_id":"2247141,2312321","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":44,"referenced_works":["https://openalex.org/W397180395","https://openalex.org/W1970017388","https://openalex.org/W2050231625","https://openalex.org/W2053154970","https://openalex.org/W2066045860","https://openalex.org/W2130758759","https://openalex.org/W2164777277","https://openalex.org/W2556556320","https://openalex.org/W2559885217","https://openalex.org/W2598200822","https://openalex.org/W2784876765","https://openalex.org/W2791750344","https://openalex.org/W2805704668","https://openalex.org/W2808484569","https://openalex.org/W2811320115","https://openalex.org/W2811327923","https://openalex.org/W2892624679","https://openalex.org/W2902718458","https://openalex.org/W2921999452","https://openalex.org/W2996042910","https://openalex.org/W3034155019","https://openalex.org/W3084754580","https://openalex.org/W3094094693","https://openalex.org/W3116842536","https://openalex.org/W3140103367","https://openalex.org/W3146594207","https://openalex.org/W3155280057","https://openalex.org/W3168464729","https://openalex.org/W3179169340","https://openalex.org/W4206054126","https://openalex.org/W4210411691","https://openalex.org/W4281680218","https://openalex.org/W4283786364","https://openalex.org/W4286331355","https://openalex.org/W4288057103","https://openalex.org/W4304589910","https://openalex.org/W4310423035","https://openalex.org/W4315480688","https://openalex.org/W4324134722","https://openalex.org/W4390412078","https://openalex.org/W4396819965","https://openalex.org/W4400727269","https://openalex.org/W4401543557","https://openalex.org/W4402263795"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2361820086","https://openalex.org/W4388487825","https://openalex.org/W2368224867","https://openalex.org/W3029903131","https://openalex.org/W3111030087","https://openalex.org/W2341334583","https://openalex.org/W2385685139"],"abstract_inverted_index":{"Despite":[0],"being":[1],"beneficial":[2],"for":[3,62,114,170,188,204,219,225],"rapid":[4],"delivery":[5],"of":[6,24,94,122,131,153],"software,":[7],"Kubernetes":[8,44],"deployments":[9],"can":[10,17,38,91],"be":[11,92,165,183],"susceptible":[12],"to":[13,41,150,164,182],"security":[14,27,30,36,56,96,141,156],"attacks,":[15],"which":[16],"cause":[18],"serious":[19],"consequences.":[20],"A":[21],"systematic":[22],"characterization":[23],"how":[25],"community-prescribed":[26],"configurations,":[28],"i.e.,":[29],"configurations":[31,57,97,206],"that":[32,47],"are":[33,106],"recommended":[34,58],"by":[35,59,216],"experts,":[37],"aid":[39],"practitioners":[40,90,220],"secure":[42],"their":[43],"deployments.":[45],"To":[46],"end,":[48],"we":[49,87,145],"conduct":[50],"an":[51],"empirical":[52,85],"study":[53],"with":[54,108,137],"53":[55],"the":[60,75,103,123,154,160,171,178,189,214,226],"Center":[61],"Internet":[63],"Security":[64],"(CIS),":[65],"20":[66],"survey":[67,104],"respondents,":[68],"and":[69,80,112,116,120,167,173,176,186,191,207,221],"544":[70],"configuration":[71,124,157],"files":[72,125],"obtained":[73],"from":[74],"open":[76],"source":[77],"software":[78],"(OSS)":[79],"proprietary":[81],"domains.":[82],"From":[83,134],"our":[84,135],"study,":[86],"observe:":[88],"(i)":[89,147],"unaware":[93],"prescribed":[95,110,132,155],"as$5":[98],"\\%":[99],"\\sim":[100],"40":[101],"{\\%}$of":[102],"respondents":[105],"unfamiliar":[107],"16":[109],"configurations;":[111],"(ii)":[113,159],"Company-A":[115,172,190],"OSS":[117,174,192],"respectively,":[118,169,184],"18.0%":[119],"17.9%":[121],"include":[126],"at":[127],"least":[128],"one":[129],"violation":[130],"configurations.":[133],"evaluation":[136],"5":[138],"static":[139],"application":[140],"testing":[142],"(SAST)":[143],"tools":[144],"find":[146],"only":[148],"Kubescape":[149],"support":[151],"all":[152],"categories;":[158],"highest":[161,179],"observed":[162,180],"precision":[163],"0.41":[166],"0.43":[168],"datasets;":[175],"(iii)":[177],"recall":[181],"0.53":[185],"0.65":[187],"datasets.":[193],"Our":[194],"findings":[195],"show":[196],"a":[197],"disconnect":[198],"between":[199],"what":[200,208],"CIS":[201],"experts":[202],"recommend":[203],"Kubernetes-related":[205],"happens":[209],"in":[210],"practice.":[211],"We":[212],"conclude":[213],"paper":[215,227],"providing":[217],"recommendations":[218],"researchers.":[222],"Dataset":[223],"used":[224],"is":[228],"publicly":[229],"available":[230],"online.":[231]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":3}],"updated_date":"2026-08-01T09:00:35.917206","created_date":"2025-10-10T00:00:00"}