{"id":"https://openalex.org/W2902718458","doi":"https://doi.org/10.1145/3274694.3274720","title":"A Measurement Study on Linux Container Security","display_name":"A Measurement Study on Linux Container Security","publication_year":2018,"publication_date":"2018-12-03","ids":{"openalex":"https://openalex.org/W2902718458","doi":"https://doi.org/10.1145/3274694.3274720","mag":"2902718458"},"language":"en","primary_location":{"id":"doi:10.1145/3274694.3274720","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3274694.3274720","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3274694.3274720","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 34th Annual Computer Security Applications Conference","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3274694.3274720","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5087180897","display_name":"Xin Lin","orcid":"https://orcid.org/0000-0002-6230-438X"},"institutions":[{"id":"https://openalex.org/I4210126530","display_name":"Data Assurance and Communication Security","ror":"https://ror.org/02z2gfm30","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210126530","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xin Lin","raw_affiliation_strings":["School of Cyber Security, University of Chinese Academy of Sciences Beijing, China and Institute of Information Engineering, CAS, Beijing, China and Data Assurance and Communication Security Research Center, CAS, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyber Security, University of Chinese Academy of Sciences Beijing, China and Institute of Information Engineering, CAS, Beijing, China and Data Assurance and Communication Security Research Center, CAS, Beijing, China","institution_ids":["https://openalex.org/I4210126530","https://openalex.org/I4210156404","https://openalex.org/I4210165038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060586167","display_name":"Lingguang Lei","orcid":"https://orcid.org/0000-0002-1936-0562"},"institutions":[{"id":"https://openalex.org/I4210126530","display_name":"Data Assurance and Communication Security","ror":"https://ror.org/02z2gfm30","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210126530","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lingguang Lei","raw_affiliation_strings":["Institute of Information Engineering, CAS Beijing, China and Data Assurance and Communication Security Research Center, CAS, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, CAS Beijing, China and Data Assurance and Communication Security Research Center, CAS, Beijing, China","institution_ids":["https://openalex.org/I4210126530","https://openalex.org/I4210156404"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101640450","display_name":"Yuewu Wang","orcid":"https://orcid.org/0009-0003-5170-1253"},"institutions":[{"id":"https://openalex.org/I4210126530","display_name":"Data Assurance and Communication Security","ror":"https://ror.org/02z2gfm30","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210126530","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuewu Wang","raw_affiliation_strings":["Institute of Information Engineering, CAS Beijing, China and Data Assurance and Communication Security Research Center, CAS, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, CAS Beijing, China and Data Assurance and Communication Security Research Center, CAS, Beijing, China","institution_ids":["https://openalex.org/I4210126530","https://openalex.org/I4210156404"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5033745290","display_name":"Jiwu Jing","orcid":"https://orcid.org/0000-0002-3409-6149"},"institutions":[{"id":"https://openalex.org/I4210126530","display_name":"Data Assurance and Communication Security","ror":"https://ror.org/02z2gfm30","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210126530","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiwu Jing","raw_affiliation_strings":["Institute of Information Engineering, CAS Beijing, China and Data Assurance and Communication Security Research Center, CAS, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, CAS Beijing, China and Data Assurance and Communication Security Research Center, CAS, Beijing, China","institution_ids":["https://openalex.org/I4210126530","https://openalex.org/I4210156404"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5026728546","display_name":"Kun Sun","orcid":"https://orcid.org/0000-0003-4152-2107"},"institutions":[{"id":"https://openalex.org/I162714631","display_name":"George Mason University","ror":"https://ror.org/02jqj7156","country_code":"US","type":"education","lineage":["https://openalex.org/I162714631"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kun Sun","raw_affiliation_strings":["George Mason University Fairfax, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"George Mason University Fairfax, USA","institution_ids":["https://openalex.org/I162714631"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101511274","display_name":"Quan Zhou","orcid":"https://orcid.org/0009-0003-3497-7848"},"institutions":[{"id":"https://openalex.org/I4210126530","display_name":"Data Assurance and Communication Security","ror":"https://ror.org/02z2gfm30","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210126530","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Quan Zhou","raw_affiliation_strings":["Institute of Information Engineering, CAS Beijing, China and Data Assurance and Communication Security Research Center, CAS, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, CAS Beijing, China and Data Assurance and Communication Security Research Center, CAS, Beijing, China","institution_ids":["https://openalex.org/I4210126530","https://openalex.org/I4210156404"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":4.0745,"has_fulltext":true,"cited_by_count":130,"citation_normalized_percentile":{"value":0.95684897,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"418","last_page":"429"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9951000213623047,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9937000274658203,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.9522808790206909},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7019754648208618},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6834394931793213},{"id":"https://openalex.org/keywords/linux-kernel","display_name":"Linux kernel","score":0.6656714677810669},{"id":"https://openalex.org/keywords/container","display_name":"Container (type theory)","score":0.6633619070053101},{"id":"https://openalex.org/keywords/privilege","display_name":"Privilege (computing)","score":0.4728845953941345},{"id":"https://openalex.org/keywords/isolation","display_name":"Isolation (microbiology)","score":0.47002267837524414},{"id":"https://openalex.org/keywords/rootkit","display_name":"Rootkit","score":0.45876142382621765},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.22559866309165955},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.1251906156539917},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.07903921604156494}],"concepts":[{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.9522808790206909},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7019754648208618},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6834394931793213},{"id":"https://openalex.org/C553261973","wikidata":"https://www.wikidata.org/wiki/Q14579","display_name":"Linux kernel","level":2,"score":0.6656714677810669},{"id":"https://openalex.org/C2781018962","wikidata":"https://www.wikidata.org/wiki/Q5164884","display_name":"Container (type theory)","level":2,"score":0.6633619070053101},{"id":"https://openalex.org/C2780138299","wikidata":"https://www.wikidata.org/wiki/Q3404265","display_name":"Privilege (computing)","level":2,"score":0.4728845953941345},{"id":"https://openalex.org/C2775941552","wikidata":"https://www.wikidata.org/wiki/Q25212305","display_name":"Isolation (microbiology)","level":2,"score":0.47002267837524414},{"id":"https://openalex.org/C10144332","wikidata":"https://www.wikidata.org/wiki/Q14645","display_name":"Rootkit","level":3,"score":0.45876142382621765},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.22559866309165955},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.1251906156539917},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.07903921604156494},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C89423630","wikidata":"https://www.wikidata.org/wiki/Q7193","display_name":"Microbiology","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3274694.3274720","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3274694.3274720","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3274694.3274720","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 34th Annual Computer Security Applications Conference","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3274694.3274720","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3274694.3274720","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3274694.3274720","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 34th Annual Computer Security Applications Conference","raw_type":"proceedings-article"},"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","score":0.5600000023841858,"id":"https://metadata.un.org/sdg/9"}],"awards":[{"id":"https://openalex.org/G1792192850","display_name":"SaTC: TTP: Small: Enhancing Container Security via Fine-Grained System Resource Constraints","funder_award_id":"1815650","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G1812057059","display_name":null,"funder_award_id":"2016YFB0800102","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"},{"id":"https://openalex.org/G4426788383","display_name":null,"funder_award_id":"N00014-16-1-3214","funder_id":"https://openalex.org/F4320337345","funder_display_name":"Office of Naval Research"},{"id":"https://openalex.org/G4536258827","display_name":null,"funder_award_id":"61802398","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6550672976","display_name":null,"funder_award_id":"No.61802398","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6621162956","display_name":null,"funder_award_id":"CNS-1815650","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G8629849102","display_name":null,"funder_award_id":"N00014-16-1-3216","funder_id":"https://openalex.org/F4320337345","funder_display_name":"Office of Naval Research"},{"id":"https://openalex.org/G8876996369","display_name":null,"funder_award_id":"N00014","funder_id":"https://openalex.org/F4320337345","funder_display_name":"Office of Naval Research"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null},{"id":"https://openalex.org/F4320337345","display_name":"Office of Naval Research","ror":"https://ror.org/00rk2pe57"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":35,"referenced_works":["https://openalex.org/W144566724","https://openalex.org/W953687203","https://openalex.org/W1498360390","https://openalex.org/W1502485991","https://openalex.org/W1513374759","https://openalex.org/W1529728259","https://openalex.org/W1683061488","https://openalex.org/W1805474074","https://openalex.org/W1993101454","https://openalex.org/W2013704995","https://openalex.org/W2101849888","https://openalex.org/W2104692292","https://openalex.org/W2106620684","https://openalex.org/W2117667893","https://openalex.org/W2182584490","https://openalex.org/W2184107019","https://openalex.org/W2281283623","https://openalex.org/W2296335794","https://openalex.org/W2371464996","https://openalex.org/W2373520421","https://openalex.org/W2513765047","https://openalex.org/W2550874390","https://openalex.org/W2557787398","https://openalex.org/W2598200822","https://openalex.org/W2601109594","https://openalex.org/W2605904959","https://openalex.org/W2621197600","https://openalex.org/W2664885055","https://openalex.org/W2750660893","https://openalex.org/W2762299987","https://openalex.org/W2792590405","https://openalex.org/W2800544434","https://openalex.org/W2899728002","https://openalex.org/W2962027130","https://openalex.org/W6637605221"],"related_works":["https://openalex.org/W2354398839","https://openalex.org/W2002972382","https://openalex.org/W2025088090","https://openalex.org/W2744050077","https://openalex.org/W2171038386","https://openalex.org/W2285283686","https://openalex.org/W2902718458","https://openalex.org/W1514297880","https://openalex.org/W2375578673","https://openalex.org/W2912106162"],"abstract_inverted_index":{"Linux":[0,84],"container":[1,24,64,85,108,122,156,202],"mechanism":[2,25,86,224],"has":[3],"attracted":[4],"a":[5,20,36,73,146,209,222],"lot":[6],"of":[7,82],"attention":[8],"and":[9,38,66,143,161,166,183,203],"is":[10,19,26],"increasingly":[11],"utilized":[12],"to":[13,30,225],"deploy":[14],"industry":[15],"applications.":[16],"Though":[17],"it":[18,34],"consensus":[21],"that":[22,59,193],"the":[23,31,63,80,94,107,110,114,121,135,155,164,179,190,198],"not":[27],"secure":[28],"due":[29],"kernel-sharing":[32],"property,":[33],"lacks":[35],"concrete":[37],"systematical":[39],"evaluation":[40],"on":[41,62,130],"its":[42],"security":[43,81,137,172],"using":[44,72,87],"real":[45],"world":[46],"exploits.":[47,132,218],"In":[48],"this":[49],"paper,":[50],"we":[51,78,125,207,220],"collect":[52],"an":[53,127],"attack":[54,75,212],"dataset":[55],"including":[56],"223":[57],"exploits":[58,90,100,117,192],"are":[60],"effective":[61],"platform,":[65],"classify":[67],"them":[68,176],"into":[69,178],"different":[70],"categories":[71],"two-dimensional":[74],"taxonomy.":[76],"Then":[77],"evaluate":[79],"existing":[83],"88":[88],"typical":[89],"filtered":[91],"out":[92],"from":[93,105],"dataset.":[95],"We":[96,133],"find":[97,134],"50":[98],"(56.82%)":[99],"can":[101,118,195],"successfully":[102,196],"launch":[103],"attacks":[104],"inside":[106],"with":[109],"default":[111],"configuration.":[112],"Since":[113],"privilege":[115,152,205,230],"escalation":[116,153,231],"completely":[119],"disable":[120],"protection":[123,186],"mechanism,":[124],"conduct":[126],"in-depth":[128],"analysis":[129],"these":[131,170],"kernel":[136,171],"mechanisms":[138,158,173],"such":[139],"as":[140],"Capability,":[141],"Seccomp,":[142],"MAC":[144],"play":[145],"more":[147],"important":[148],"role":[149],"in":[150],"preventing":[151],"than":[154],"isolation":[157,199],"(i.e.,":[159],"Namespace":[160],"Cgroup).":[162],"However,":[163],"interdependence":[165],"mutual-influence":[167],"relationship":[168],"among":[169],"may":[174],"make":[175],"fall":[177],"\"short":[180],"board":[181],"effect\"":[182],"impair":[184],"their":[185],"capability.":[187],"By":[188],"studying":[189],"11":[191,217],"still":[194],"break":[197],"provided":[200],"by":[201,215],"achieve":[204],"escalation,":[206],"identify":[208],"common":[210],"4-step":[211],"model":[213],"followed":[214],"all":[216],"Finally,":[219],"propose":[221],"defense":[223],"effectively":[226],"defeat":[227],"those":[228],"identified":[229],"attacks.":[232]},"counts_by_year":[{"year":2026,"cited_by_count":9},{"year":2025,"cited_by_count":21},{"year":2024,"cited_by_count":30},{"year":2023,"cited_by_count":18},{"year":2022,"cited_by_count":16},{"year":2021,"cited_by_count":14},{"year":2020,"cited_by_count":16},{"year":2019,"cited_by_count":6}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}