{"id":"https://openalex.org/W4388857020","doi":"https://doi.org/10.1145/3576915.3623121","title":"Take Over the Whole Cluster: Attacking Kubernetes via Excessive Permissions of Third-party Applications","display_name":"Take Over the Whole Cluster: Attacking Kubernetes via Excessive Permissions of Third-party Applications","publication_year":2023,"publication_date":"2023-11-15","ids":{"openalex":"https://openalex.org/W4388857020","doi":"https://doi.org/10.1145/3576915.3623121"},"language":"en","primary_location":{"id":"doi:10.1145/3576915.3623121","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3576915.3623121","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3576915.3623121","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3576915.3623121","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5065913470","display_name":"Nanzi Yang","orcid":"https://orcid.org/0009-0006-9346-6679"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Nanzi Yang","raw_affiliation_strings":["Xidian University, Xi'an, China"],"raw_orcid":"https://orcid.org/0009-0006-9346-6679","affiliations":[{"raw_affiliation_string":"Xidian University, Xi'an, China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5039734151","display_name":"Wenbo Shen","orcid":"https://orcid.org/0000-0003-2899-6121"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wenbo Shen","raw_affiliation_strings":["Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0003-2899-6121","affiliations":[{"raw_affiliation_string":"Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102839957","display_name":"Jinku Li","orcid":"https://orcid.org/0000-0003-0709-7434"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jinku Li","raw_affiliation_strings":["Xidian University, Xi'an, China"],"raw_orcid":"https://orcid.org/0000-0003-0709-7434","affiliations":[{"raw_affiliation_string":"Xidian University, Xi'an, China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5093400545","display_name":"Xunqi Liu","orcid":"https://orcid.org/0009-0003-2614-327X"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xunqi Liu","raw_affiliation_strings":["Xidian University, Xi'an, China"],"raw_orcid":"https://orcid.org/0009-0003-2614-327X","affiliations":[{"raw_affiliation_string":"Xidian University, Xi'an, China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101708354","display_name":"Xin Guo","orcid":"https://orcid.org/0009-0007-9154-1863"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xin Guo","raw_affiliation_strings":["Xidian University, Xi'an, China"],"raw_orcid":"https://orcid.org/0009-0007-9154-1863","affiliations":[{"raw_affiliation_string":"Xidian University, Xi'an, China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5012016098","display_name":"Jianfeng Ma","orcid":"https://orcid.org/0000-0003-4251-1143"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jianfeng Ma","raw_affiliation_strings":["Xidian University, Xi'an, China"],"raw_orcid":"https://orcid.org/0000-0003-4251-1143","affiliations":[{"raw_affiliation_string":"Xidian University, Xi'an, China","institution_ids":["https://openalex.org/I149594827"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":4.5813,"has_fulltext":true,"cited_by_count":19,"citation_normalized_percentile":{"value":0.96742442,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"3048","last_page":"3062"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9973000288009644,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.996999979019165,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/third-party","display_name":"Third party","score":0.8189783096313477},{"id":"https://openalex.org/keywords/orchestration","display_name":"Orchestration","score":0.6907424330711365},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6812962293624878},{"id":"https://openalex.org/keywords/cluster","display_name":"Cluster (spacecraft)","score":0.6367226839065552},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.581171452999115},{"id":"https://openalex.org/keywords/container","display_name":"Container (type theory)","score":0.564950704574585},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.519050657749176},{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.4450044631958008},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.24190503358840942},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.17801523208618164},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.11817419528961182}],"concepts":[{"id":"https://openalex.org/C2983583741","wikidata":"https://www.wikidata.org/wiki/Q16785388","display_name":"Third party","level":2,"score":0.8189783096313477},{"id":"https://openalex.org/C199168358","wikidata":"https://www.wikidata.org/wiki/Q3367000","display_name":"Orchestration","level":3,"score":0.6907424330711365},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6812962293624878},{"id":"https://openalex.org/C164866538","wikidata":"https://www.wikidata.org/wiki/Q367351","display_name":"Cluster (spacecraft)","level":2,"score":0.6367226839065552},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.581171452999115},{"id":"https://openalex.org/C2781018962","wikidata":"https://www.wikidata.org/wiki/Q5164884","display_name":"Container (type theory)","level":2,"score":0.564950704574585},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.519050657749176},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.4450044631958008},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.24190503358840942},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.17801523208618164},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.11817419528961182},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C142362112","wikidata":"https://www.wikidata.org/wiki/Q735","display_name":"Art","level":0,"score":0.0},{"id":"https://openalex.org/C153349607","wikidata":"https://www.wikidata.org/wiki/Q36649","display_name":"Visual arts","level":1,"score":0.0},{"id":"https://openalex.org/C558565934","wikidata":"https://www.wikidata.org/wiki/Q2743","display_name":"Musical","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3576915.3623121","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3576915.3623121","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3576915.3623121","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3576915.3623121","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3576915.3623121","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3576915.3623121","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G5538951345","display_name":null,"funder_award_id":"62121001","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6030431395","display_name":null,"funder_award_id":"62232013","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6833549385","display_name":null,"funder_award_id":"62121001","funder_id":"https://openalex.org/F4320327720","funder_display_name":"Foundation for Innovative Research Groups of the National Natural Science Foundation of China"},{"id":"https://openalex.org/G6971570175","display_name":null,"funder_award_id":"62002317","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320327720","display_name":"Foundation for Innovative Research Groups of the National Natural Science Foundation of China","ror":null}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4388857020.pdf","grobid_xml":"https://content.openalex.org/works/W4388857020.grobid-xml"},"referenced_works_count":26,"referenced_works":["https://openalex.org/W2008345765","https://openalex.org/W2023446630","https://openalex.org/W2122672392","https://openalex.org/W2604764484","https://openalex.org/W2621197600","https://openalex.org/W2734941459","https://openalex.org/W2792590405","https://openalex.org/W2899822557","https://openalex.org/W2902718458","https://openalex.org/W2924430850","https://openalex.org/W2978484667","https://openalex.org/W2982705228","https://openalex.org/W2983055711","https://openalex.org/W3012308217","https://openalex.org/W3021557548","https://openalex.org/W3092118421","https://openalex.org/W3095995204","https://openalex.org/W3153294612","https://openalex.org/W3194378998","https://openalex.org/W3214725335","https://openalex.org/W4200226889","https://openalex.org/W4246319420","https://openalex.org/W4280594141","https://openalex.org/W4283786364","https://openalex.org/W4296965890","https://openalex.org/W4323308647"],"related_works":["https://openalex.org/W79913212","https://openalex.org/W3110339796","https://openalex.org/W3135939249","https://openalex.org/W4393889292","https://openalex.org/W4376624698","https://openalex.org/W4393743571","https://openalex.org/W4288639410","https://openalex.org/W4288639263","https://openalex.org/W4391835618","https://openalex.org/W4288639245"],"abstract_inverted_index":{"As":[0],"the":[1,31,43],"dominant":[2],"container":[3],"orchestration":[4],"system,":[5],"Kubernetes":[6],"is":[7,40],"widely":[8],"used":[9],"by":[10],"many":[11],"companies":[12],"and":[13,20],"cloud":[14],"vendors.":[15],"It":[16],"runs":[17],"third-party":[18,23,38],"add-ons":[19],"applications":[21],"(termed":[22],"apps)":[24],"on":[25],"its":[26],"control":[27],"plane":[28],"to":[29,42],"manage":[30],"whole":[32,44],"cluster.":[33],"The":[34],"security":[35],"of":[36],"these":[37],"apps":[39],"critical":[41],"cluster":[45],"but":[46],"has":[47],"not":[48],"been":[49],"systematically":[50],"studied":[51],"so":[52],"far.":[53]},"counts_by_year":[{"year":2026,"cited_by_count":4},{"year":2025,"cited_by_count":11},{"year":2024,"cited_by_count":4}],"updated_date":"2026-07-31T08:31:51.225901","created_date":"2025-10-10T00:00:00"}