{"id":"https://openalex.org/W2773120226","doi":"https://doi.org/10.1145/3147213.3147229","title":"Integrating Continuous Security Assessments in Microservices and Cloud Native Applications","display_name":"Integrating Continuous Security Assessments in Microservices and Cloud Native Applications","publication_year":2017,"publication_date":"2017-12-01","ids":{"openalex":"https://openalex.org/W2773120226","doi":"https://doi.org/10.1145/3147213.3147229","mag":"2773120226"},"language":"en","primary_location":{"id":"doi:10.1145/3147213.3147229","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3147213.3147229","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the10th International Conference on Utility and Cloud Computing","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5019035241","display_name":"Kennedy A. Torkura","orcid":null},"institutions":[{"id":"https://openalex.org/I143288331","display_name":"Hasso Plattner Institute","ror":"https://ror.org/058rn5r42","country_code":"DE","type":"facility","lineage":["https://openalex.org/I143288331","https://openalex.org/I176453806"]},{"id":"https://openalex.org/I176453806","display_name":"University of Potsdam","ror":"https://ror.org/03bnmw459","country_code":"DE","type":"education","lineage":["https://openalex.org/I176453806"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Kennedy A. Torkura","raw_affiliation_strings":["Hasso Plattner Institute, University of Potsdam, Potsdam, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hasso Plattner Institute, University of Potsdam, Potsdam, Germany","institution_ids":["https://openalex.org/I143288331","https://openalex.org/I176453806"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5002448412","display_name":"Muhammad I.H. Sukmana","orcid":"https://orcid.org/0000-0002-1652-9895"},"institutions":[{"id":"https://openalex.org/I143288331","display_name":"Hasso Plattner Institute","ror":"https://ror.org/058rn5r42","country_code":"DE","type":"facility","lineage":["https://openalex.org/I143288331","https://openalex.org/I176453806"]},{"id":"https://openalex.org/I176453806","display_name":"University of Potsdam","ror":"https://ror.org/03bnmw459","country_code":"DE","type":"education","lineage":["https://openalex.org/I176453806"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Muhammad I.H. Sukmana","raw_affiliation_strings":["Hasso Plattner Institute, University of Potsdam, Potsdam, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hasso Plattner Institute, University of Potsdam, Potsdam, Germany","institution_ids":["https://openalex.org/I143288331","https://openalex.org/I176453806"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5102919398","display_name":"Christoph Meinel","orcid":"https://orcid.org/0000-0002-3410-3193"},"institutions":[{"id":"https://openalex.org/I143288331","display_name":"Hasso Plattner Institute","ror":"https://ror.org/058rn5r42","country_code":"DE","type":"facility","lineage":["https://openalex.org/I143288331","https://openalex.org/I176453806"]},{"id":"https://openalex.org/I176453806","display_name":"University of Potsdam","ror":"https://ror.org/03bnmw459","country_code":"DE","type":"education","lineage":["https://openalex.org/I176453806"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Christoph Meinel","raw_affiliation_strings":["Hasso Plattner Institute, University of Potsdam, Potsdam, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hasso Plattner Institute, University of Potsdam, Potsdam, Germany","institution_ids":["https://openalex.org/I143288331","https://openalex.org/I176453806"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.805,"has_fulltext":false,"cited_by_count":63,"citation_normalized_percentile":{"value":0.93194431,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"171","last_page":"180"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.998199999332428,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9968000054359436,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/microservices","display_name":"Microservices","score":0.9204640984535217},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7863532900810242},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.7417454123497009},{"id":"https://openalex.org/keywords/cloud-computing-security","display_name":"Cloud computing security","score":0.6254695653915405},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5064398050308228},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.47247952222824097},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.13866382837295532},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.10582387447357178}],"concepts":[{"id":"https://openalex.org/C2778505942","wikidata":"https://www.wikidata.org/wiki/Q18344624","display_name":"Microservices","level":3,"score":0.9204640984535217},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7863532900810242},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.7417454123497009},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.6254695653915405},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5064398050308228},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.47247952222824097},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.13866382837295532},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.10582387447357178}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3147213.3147229","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3147213.3147229","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the10th International Conference on Utility and Cloud Computing","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure","score":0.6299999952316284}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":21,"referenced_works":["https://openalex.org/W59800629","https://openalex.org/W335848311","https://openalex.org/W1492892507","https://openalex.org/W1582247085","https://openalex.org/W1861561811","https://openalex.org/W1998737366","https://openalex.org/W2006591097","https://openalex.org/W2007522587","https://openalex.org/W2096791889","https://openalex.org/W2109026747","https://openalex.org/W2154107289","https://openalex.org/W2163201741","https://openalex.org/W2183739055","https://openalex.org/W2284296087","https://openalex.org/W2305556492","https://openalex.org/W2423150717","https://openalex.org/W2478792107","https://openalex.org/W2550529331","https://openalex.org/W2557028073","https://openalex.org/W2737234192","https://openalex.org/W3100827631"],"related_works":["https://openalex.org/W2931996793","https://openalex.org/W4205234238","https://openalex.org/W3148880067","https://openalex.org/W2788934790","https://openalex.org/W3167767780","https://openalex.org/W1988660452","https://openalex.org/W3043682580","https://openalex.org/W2941559775","https://openalex.org/W3142266060","https://openalex.org/W2135591567"],"abstract_inverted_index":{"Cloud":[0],"Native":[1],"Applications":[2],"(CNA)":[3,81],"consists":[4],"of":[5,65,80,85,96,166,216,236],"multiple":[6],"collaborating":[7],"microservice":[8,50],"instances":[9],"working":[10],"together":[11],"towards":[12],"common":[13],"goals.":[14],"These":[15],"microservices":[16,42,105],"leverage":[17],"the":[18,68,76,83,90,152,160,164,173,178,207,214,219,224,230],"underlying":[19],"cloud":[20,100,146],"infrastructure":[21],"to":[22,37,137,144,223,247],"enable":[23],"several":[24,38],"properties":[25],"such":[26,126,141],"as":[27],"scalability":[28],"and":[29,43,61,93,109,135,190,203,229,250],"resiliency.":[30],"CNA":[31,208,249],"are":[32,103,106,132,143,185],"complex":[33],"distributed":[34],"applications,":[35],"vulnerable":[36,97],"security":[39,71,87,119,123,191,225,238],"issues":[40],"affecting":[41],"traditional":[44,118,237],"cloud-based":[45],"applications.":[46],"For":[47],"example,":[48],"each":[49],"instance":[51],"could":[52],"be":[53,145,245],"developed":[54],"with":[55],"different":[56],"technologies":[57,66],"e.g.":[58],"programming":[59],"languages":[60],"databases.":[62],"This":[63],"diversity":[64],"increases":[67,82],"chances":[69],"for":[70,117],"vulnerabilities":[72],"in":[73,89,125],"microservices.":[74,98],"Moreover,":[75],"fast-paced":[77],"development":[78,91],"cycles":[79],"probability":[84],"insufficient":[86],"tests":[88],"pipelines,":[92],"consequent":[94],"deployment":[95],"Furthermore,":[99],"native":[101,147],"environments":[102,127],"ephemeral,":[104],"dynamically":[107],"launched":[108],"de-registered,":[110],"this":[111,156],"factor":[112],"creates":[113],"a":[114,167],"discoverability":[115],"challenge":[116],"assessment":[120,239],"techniques.":[121],"Hence,":[122],"assessments":[124],"require":[128],"new":[129],"approaches":[130],"which":[131],"specifically":[133],"adapted":[134],"integrated":[136,150,204],"CNA.":[138],"In":[139,155],"fact,":[140],"techniques":[142],"i.e.":[148],"well":[149],"into":[151,206],"cloud's":[153],"fabric.":[154],"paper,":[157],"we":[158],"tackle":[159],"above-mentioned":[161],"challenges":[162],"through":[163],"introduction":[165],"novel":[168],"Security":[169,174,179],"Control":[170],"concept":[171],"-":[172],"Gateway.":[175],"To":[176],"support":[177],"Gateway":[180],"concept,":[181],"two":[182],"other":[183],"concepts":[184,198],"proposed:":[186],"dynamic":[187],"document":[188],"store":[189],"health":[192],"endpoints.":[193],"We":[194],"have":[195],"implemented":[196],"these":[197],"using":[199],"cloud-native":[200],"design":[201],"patterns":[202],"them":[205],"workflow.":[209],"Our":[210,241],"experimental":[211],"evaluations":[212],"validate":[213],"efficiency":[215],"our":[217],"proposals,":[218],"time":[220],"overhead":[221],"due":[222],"gateway":[226],"is":[227],"minimal":[228],"vulnerability":[231],"detection":[232],"rate":[233],"surpasses":[234],"that":[235],"approaches.":[240],"proposal":[242],"can":[243],"therefore":[244],"employed":[246],"secure":[248],"microservice-based":[251],"implementations.":[252]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":15},{"year":2024,"cited_by_count":6},{"year":2023,"cited_by_count":9},{"year":2022,"cited_by_count":12},{"year":2021,"cited_by_count":7},{"year":2020,"cited_by_count":3},{"year":2019,"cited_by_count":5},{"year":2018,"cited_by_count":5}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}