{"id":"https://openalex.org/W4280556079","doi":"https://doi.org/10.1145/3532183","title":"Microservice Security Metrics for Secure Communication, Identity Management, and Observability","display_name":"Microservice Security Metrics for Secure Communication, Identity Management, and Observability","publication_year":2022,"publication_date":"2022-05-11","ids":{"openalex":"https://openalex.org/W4280556079","doi":"https://doi.org/10.1145/3532183"},"language":"en","primary_location":{"id":"doi:10.1145/3532183","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3532183","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3532183","source":{"id":"https://openalex.org/S142627899","display_name":"ACM Transactions on Software Engineering and Methodology","issn_l":"1049-331X","issn":["1049-331X","1557-7392"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Software Engineering and Methodology","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3532183","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5077943544","display_name":"Uwe Zdun","orcid":"https://orcid.org/0000-0002-6233-2591"},"institutions":[{"id":"https://openalex.org/I129774422","display_name":"University of Vienna","ror":"https://ror.org/03prydq77","country_code":"AT","type":"education","lineage":["https://openalex.org/I129774422"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Uwe Zdun","raw_affiliation_strings":["University of Vienna, Faculty of Computer Science, Research Group Software Architecture, Vienna, Austria"],"raw_orcid":"https://orcid.org/0000-0002-6233-2591","affiliations":[{"raw_affiliation_string":"University of Vienna, Faculty of Computer Science, Research Group Software Architecture, Vienna, Austria","institution_ids":["https://openalex.org/I129774422"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5066307713","display_name":"Pierre-Jean Qu\u00e9val","orcid":"https://orcid.org/0000-0003-4222-5075"},"institutions":[{"id":"https://openalex.org/I129774422","display_name":"University of Vienna","ror":"https://ror.org/03prydq77","country_code":"AT","type":"education","lineage":["https://openalex.org/I129774422"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Pierre-Jean Queval","raw_affiliation_strings":["University of Vienna, Faculty of Computer Science, Research Group Software Architecture, Vienna, Austria"],"raw_orcid":"https://orcid.org/0000-0003-4222-5075","affiliations":[{"raw_affiliation_string":"University of Vienna, Faculty of Computer Science, Research Group Software Architecture, Vienna, Austria","institution_ids":["https://openalex.org/I129774422"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5048945741","display_name":"Georg Simhandl","orcid":"https://orcid.org/0000-0003-0516-3274"},"institutions":[{"id":"https://openalex.org/I129774422","display_name":"University of Vienna","ror":"https://ror.org/03prydq77","country_code":"AT","type":"education","lineage":["https://openalex.org/I129774422"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Georg Simhandl","raw_affiliation_strings":["University of Vienna, Faculty of Computer Science, Research Group Software Architecture, Vienna, Austria"],"raw_orcid":"https://orcid.org/0000-0003-0516-3274","affiliations":[{"raw_affiliation_string":"University of Vienna, Faculty of Computer Science, Research Group Software Architecture, Vienna, Austria","institution_ids":["https://openalex.org/I129774422"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5012313708","display_name":"Riccardo Scandariato","orcid":"https://orcid.org/0000-0003-3591-7671"},"institutions":[{"id":"https://openalex.org/I159176309","display_name":"Universit\u00e4t Hamburg","ror":"https://ror.org/00g30e956","country_code":"DE","type":"education","lineage":["https://openalex.org/I159176309"]},{"id":"https://openalex.org/I884043246","display_name":"Hamburg University of Technology","ror":"https://ror.org/04bs1pb34","country_code":"DE","type":"education","lineage":["https://openalex.org/I884043246"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Riccardo Scandariato","raw_affiliation_strings":["Hamburg University of Technology (TUHH), Hamburg, Germany"],"raw_orcid":"https://orcid.org/0000-0003-3591-7671","affiliations":[{"raw_affiliation_string":"Hamburg University of Technology (TUHH), Hamburg, Germany","institution_ids":["https://openalex.org/I159176309","https://openalex.org/I884043246"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5090145245","display_name":"S.P. Chakravarty","orcid":"https://orcid.org/0000-0002-4194-9381"},"institutions":[{"id":"https://openalex.org/I4210151651","display_name":"European Virtual Institute for Integrated Risk Management","ror":"https://ror.org/05qwb1j70","country_code":"DE","type":"other","lineage":["https://openalex.org/I4210151651"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Somik Chakravarty","raw_affiliation_strings":["European Risk and Resilience Institute (EU-VRi), Stuttgart, Germany"],"raw_orcid":"https://orcid.org/0000-0002-4194-9381","affiliations":[{"raw_affiliation_string":"European Risk and Resilience Institute (EU-VRi), Stuttgart, Germany","institution_ids":["https://openalex.org/I4210151651"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5003574321","display_name":"Martina Jeli\u0107","orcid":"https://orcid.org/0000-0003-2195-4105"},"institutions":[{"id":"https://openalex.org/I4210151651","display_name":"European Virtual Institute for Integrated Risk Management","ror":"https://ror.org/05qwb1j70","country_code":"DE","type":"other","lineage":["https://openalex.org/I4210151651"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Marjan Jelic","raw_affiliation_strings":["European Risk and Resilience Institute (EU-VRi), Stuttgart, Germany"],"raw_orcid":"https://orcid.org/0000-0003-2195-4105","affiliations":[{"raw_affiliation_string":"European Risk and Resilience Institute (EU-VRi), Stuttgart, Germany","institution_ids":["https://openalex.org/I4210151651"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5031052753","display_name":"Aleksandar Jovanovi\u0107","orcid":"https://orcid.org/0000-0002-2624-4586"},"institutions":[{"id":"https://openalex.org/I4210151651","display_name":"European Virtual Institute for Integrated Risk Management","ror":"https://ror.org/05qwb1j70","country_code":"DE","type":"other","lineage":["https://openalex.org/I4210151651"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Aleksandar Jovanovic","raw_affiliation_strings":["European Risk and Resilience Institute (EU-VRi), Stuttgart, Germany"],"raw_orcid":"https://orcid.org/0000-0002-2624-4586","affiliations":[{"raw_affiliation_string":"European Risk and Resilience Institute (EU-VRi), Stuttgart, Germany","institution_ids":["https://openalex.org/I4210151651"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.9425,"has_fulltext":true,"cited_by_count":31,"citation_normalized_percentile":{"value":0.91024306,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":"32","issue":"1","first_page":"1","last_page":"34"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9979000091552734,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9958999752998352,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8603111505508423},{"id":"https://openalex.org/keywords/observability","display_name":"Observability","score":0.5259542465209961},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5057399272918701},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.4602107107639313},{"id":"https://openalex.org/keywords/system-administrator","display_name":"System administrator","score":0.44370540976524353},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.362453818321228}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8603111505508423},{"id":"https://openalex.org/C36299963","wikidata":"https://www.wikidata.org/wiki/Q1369844","display_name":"Observability","level":2,"score":0.5259542465209961},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5057399272918701},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.4602107107639313},{"id":"https://openalex.org/C2780814629","wikidata":"https://www.wikidata.org/wiki/Q327353","display_name":"System administrator","level":2,"score":0.44370540976524353},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.362453818321228},{"id":"https://openalex.org/C28826006","wikidata":"https://www.wikidata.org/wiki/Q33521","display_name":"Applied mathematics","level":1,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3532183","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3532183","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3532183","source":{"id":"https://openalex.org/S142627899","display_name":"ACM Transactions on Software Engineering and Methodology","issn_l":"1049-331X","issn":["1049-331X","1557-7392"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Software Engineering and Methodology","raw_type":"journal-article"},{"id":"pmh:oai:tore.tuhh.de:11420/15226","is_oa":false,"landing_page_url":"http://hdl.handle.net/11420/15226","pdf_url":null,"source":{"id":"https://openalex.org/S4306401751","display_name":"tub.dok (Hamburg University of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I884043246","host_organization_name":"Hamburg University of Technology","host_organization_lineage":["https://openalex.org/I884043246"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Journal Article"}],"best_oa_location":{"id":"doi:10.1145/3532183","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3532183","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3532183","source":{"id":"https://openalex.org/S142627899","display_name":"ACM Transactions on Software Engineering and Methodology","issn_l":"1049-331X","issn":["1049-331X","1557-7392"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Software Engineering and Methodology","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.6200000047683716}],"awards":[{"id":"https://openalex.org/G5066738871","display_name":"Assurance and certification in secure Multi-party Open Software and Services.","funder_award_id":"952647","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"},{"id":"https://openalex.org/G6738529362","display_name":"Infrastructure-as-code Architecture Decision Compliance","funder_award_id":"I 4731","funder_id":"https://openalex.org/F4320321181","funder_display_name":"Austrian Science Fund"},{"id":"https://openalex.org/G7812190830","display_name":null,"funder_award_id":"I 4731-N","funder_id":"https://openalex.org/F4320321181","funder_display_name":"Austrian Science Fund"},{"id":"https://openalex.org/G8956339630","display_name":null,"funder_award_id":"I 4268","funder_id":"https://openalex.org/F4320321181","funder_display_name":"Austrian Science Fund"}],"funders":[{"id":"https://openalex.org/F4320320300","display_name":"European Commission","ror":"https://ror.org/00k4n6c32"},{"id":"https://openalex.org/F4320321181","display_name":"Austrian Science Fund","ror":"https://ror.org/013tf3c58"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4280556079.pdf","grobid_xml":"https://content.openalex.org/works/W4280556079.grobid-xml"},"referenced_works_count":47,"referenced_works":["https://openalex.org/W38462961","https://openalex.org/W44938389","https://openalex.org/W1508191694","https://openalex.org/W1514888816","https://openalex.org/W2004655916","https://openalex.org/W2005918389","https://openalex.org/W2021672791","https://openalex.org/W2031721341","https://openalex.org/W2035192272","https://openalex.org/W2036629691","https://openalex.org/W2044152003","https://openalex.org/W2045676119","https://openalex.org/W2047590718","https://openalex.org/W2076225782","https://openalex.org/W2096236852","https://openalex.org/W2106605226","https://openalex.org/W2115709314","https://openalex.org/W2119910794","https://openalex.org/W2143741513","https://openalex.org/W2146500126","https://openalex.org/W2363799590","https://openalex.org/W2554214302","https://openalex.org/W2709414589","https://openalex.org/W2735864825","https://openalex.org/W2751519133","https://openalex.org/W2753055686","https://openalex.org/W2766231014","https://openalex.org/W2770803340","https://openalex.org/W2801519434","https://openalex.org/W2805394707","https://openalex.org/W2805456907","https://openalex.org/W2883864007","https://openalex.org/W2891197287","https://openalex.org/W2900766751","https://openalex.org/W2902151527","https://openalex.org/W2943528502","https://openalex.org/W3016312357","https://openalex.org/W3026169053","https://openalex.org/W3029236728","https://openalex.org/W3118264228","https://openalex.org/W3196795710","https://openalex.org/W4200360619","https://openalex.org/W4232728672","https://openalex.org/W4236205687","https://openalex.org/W4251366824","https://openalex.org/W4285776109","https://openalex.org/W4402622292"],"related_works":["https://openalex.org/W2046459260","https://openalex.org/W2967463586","https://openalex.org/W2765830098","https://openalex.org/W1971989957","https://openalex.org/W2517338020","https://openalex.org/W3157641275","https://openalex.org/W4312300846","https://openalex.org/W2615757685","https://openalex.org/W2098782634","https://openalex.org/W3164400660"],"abstract_inverted_index":{"Microservice":[0],"architectures":[1],"are":[2,26,57],"increasingly":[3],"being":[4,16],"used":[5,97],"to":[6,50,77,149,159,166,177,225],"develop":[7],"application":[8],"systems.":[9,46],"Despite":[10],"many":[11],"guidelines":[12],"and":[13,29,37,67,106,122,155,209,213],"best":[14],"practices":[15],"published,":[17],"architecting":[18],"microservice":[19,32,89,187],"systems":[20],"for":[21,40,196,204],"security":[22,54,100,117,137,205],"is":[23,64,110],"challenging.":[24],"Reasons":[25],"the":[27,38,41,62,119,123,135,161,167,171,175,201,211,226],"size":[28],"complexity":[30],"of":[31,44,99,115,163,170,183,193,215,222],"systems,":[33,188,195],"their":[34,223],"polyglot":[35],"nature,":[36],"demand":[39],"continuous":[42,84],"evolution":[43,85],"these":[45,151,194],"In":[47,70,142],"this":[48,71],"context,":[49],"manually":[51,199],"validate":[52],"that":[53],"architecture":[55],"tactics":[56,138],"employed":[58],"as":[59,139],"intended":[60],"throughout":[61],"system":[63,165],"a":[65,88,113,164,178],"time-consuming":[66],"error-prone":[68],"task.":[69],"article,":[72],"we":[73,92,128,145,198],"present":[74],"an":[75,220],"approach":[76,109,176],"avoid":[78],"such":[79],"manual":[80],"validation":[81],"before":[82],"each":[83],"step":[86],"in":[87,228],"system,":[90],"which":[91,127,197],"demonstrate":[93,208],"using":[94],"three":[95],"widely":[96],"categories":[98],"tactics:":[101],"secure":[102],"communication,":[103],"identity":[104],"management,":[105],"observability.":[107],"Our":[108],"based":[111],"on":[112],"review":[114],"existing":[116],"guidelines,":[118],"gray":[120],"literature,":[121,125],"scientific":[124],"from":[126],"derived":[129],"Architectural":[130],"Design":[131],"Decisions":[132],"(ADDs)":[133],"with":[134],"found":[136],"decision":[140,152],"options.":[141],"our":[143,216,229],"approach,":[144],"propose":[146],"novel":[147],"detectors":[148],"detect":[150],"options":[153,169],"automatically":[154],"formally":[156],"defined":[157],"metrics":[158,217],"measure":[160],"conformance":[162,224],"different":[168],"ADDs.":[172],"We":[173,207],"apply":[174],"case":[179],"study":[180],"data":[181],"set":[182],"10":[184],"open":[185],"source":[186,202],"plus":[189],"another":[190],"20":[191],"variants":[192],"inspected":[200],"code":[203],"tactics.":[206],"assess":[210],"validity":[212],"appropriateness":[214],"by":[218],"performing":[219],"assessment":[221],"ADDs":[227],"systems\u2019":[230],"dataset":[231],"through":[232],"statistical":[233],"methods.":[234]},"counts_by_year":[{"year":2026,"cited_by_count":5},{"year":2025,"cited_by_count":9},{"year":2024,"cited_by_count":7},{"year":2023,"cited_by_count":9},{"year":2022,"cited_by_count":1}],"updated_date":"2026-07-20T07:56:41.581041","created_date":"2025-10-10T00:00:00"}