{"id":"https://openalex.org/W4315480688","doi":"https://doi.org/10.1145/3579639","title":"Security Misconfigurations in Open Source Kubernetes Manifests: An Empirical Study","display_name":"Security Misconfigurations in Open Source Kubernetes Manifests: An Empirical Study","publication_year":2023,"publication_date":"2023-01-10","ids":{"openalex":"https://openalex.org/W4315480688","doi":"https://doi.org/10.1145/3579639"},"language":"en","primary_location":{"id":"doi:10.1145/3579639","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3579639","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3579639","source":{"id":"https://openalex.org/S142627899","display_name":"ACM Transactions on Software Engineering and Methodology","issn_l":"1049-331X","issn":["1049-331X","1557-7392"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Software Engineering and Methodology","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"bronze","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3579639","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5069063267","display_name":"Akond Rahman","orcid":"https://orcid.org/0000-0002-5056-757X"},"institutions":[{"id":"https://openalex.org/I82497590","display_name":"Auburn University","ror":"https://ror.org/02v80fc35","country_code":"US","type":"education","lineage":["https://openalex.org/I82497590"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Akond Rahman","raw_affiliation_strings":["Auburn University, USA"],"raw_orcid":"https://orcid.org/0000-0002-5056-757X","affiliations":[{"raw_affiliation_string":"Auburn University, USA","institution_ids":["https://openalex.org/I82497590"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5019761662","display_name":"Shazibul Islam Shamim","orcid":"https://orcid.org/0000-0001-8084-5123"},"institutions":[{"id":"https://openalex.org/I82497590","display_name":"Auburn University","ror":"https://ror.org/02v80fc35","country_code":"US","type":"education","lineage":["https://openalex.org/I82497590"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Shazibul Islam Shamim","raw_affiliation_strings":["Auburn University, USA"],"raw_orcid":"https://orcid.org/0000-0001-8084-5123","affiliations":[{"raw_affiliation_string":"Auburn University, USA","institution_ids":["https://openalex.org/I82497590"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075831460","display_name":"Dibyendu Brinto Bose","orcid":"https://orcid.org/0000-0002-1603-3574"},"institutions":[{"id":"https://openalex.org/I859038795","display_name":"Virginia Tech","ror":"https://ror.org/02smfhw86","country_code":"US","type":"education","lineage":["https://openalex.org/I859038795"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Dibyendu Brinto Bose","raw_affiliation_strings":["Virginia Tech, USA"],"raw_orcid":"https://orcid.org/0000-0002-1603-3574","affiliations":[{"raw_affiliation_string":"Virginia Tech, USA","institution_ids":["https://openalex.org/I859038795"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5063389690","display_name":"Rahul Pandita","orcid":"https://orcid.org/0000-0002-7466-2985"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Rahul Pandita","raw_affiliation_strings":["Github, USA"],"raw_orcid":"https://orcid.org/0000-0002-7466-2985","affiliations":[{"raw_affiliation_string":"Github, USA","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":12.3124,"has_fulltext":true,"cited_by_count":93,"citation_normalized_percentile":{"value":0.99155391,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":100},"biblio":{"volume":"32","issue":"4","first_page":"1","last_page":"36"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9983999729156494,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9983999729156494,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11719","display_name":"Data Quality and Management","score":0.9980999827384949,"subfield":{"id":"https://openalex.org/subfields/1803","display_name":"Management Science and Operations Research"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9968000054359436,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8570399284362793},{"id":"https://openalex.org/keywords/open-source","display_name":"Open source","score":0.43925565481185913},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.35005441308021545},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.31244683265686035},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.11278232932090759}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8570399284362793},{"id":"https://openalex.org/C3018397939","wikidata":"https://www.wikidata.org/wiki/Q3644502","display_name":"Open source","level":3,"score":0.43925565481185913},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.35005441308021545},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.31244683265686035},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.11278232932090759}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3579639","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3579639","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3579639","source":{"id":"https://openalex.org/S142627899","display_name":"ACM Transactions on Software Engineering and Methodology","issn_l":"1049-331X","issn":["1049-331X","1557-7392"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Software Engineering and Methodology","raw_type":"journal-article"},{"id":"pmh:oai:vtechworks.lib.vt.edu:10919/113801","is_oa":true,"landing_page_url":"http://hdl.handle.net/10919/113801","pdf_url":"https://vtechworks.lib.vt.edu/bitstreams/3567356d-63d6-4165-8f1d-f4ce6c5104a1/download","source":{"id":"https://openalex.org/S4306400248","display_name":"VTechWorks (Virginia Tech)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I859038795","host_organization_name":"Virginia Tech","host_organization_lineage":["https://openalex.org/I859038795"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article - Refereed"}],"best_oa_location":{"id":"doi:10.1145/3579639","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3579639","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3579639","source":{"id":"https://openalex.org/S142627899","display_name":"ACM Transactions on Software Engineering and Methodology","issn_l":"1049-331X","issn":["1049-331X","1557-7392"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Software Engineering and Methodology","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2240699992","display_name":null,"funder_award_id":"H98230-21-1-0175","funder_id":"https://openalex.org/F4320311089","funder_display_name":"National Security Agency"},{"id":"https://openalex.org/G2397431852","display_name":"Collaborative Research: SaTC: TTP: Small: eSLIC: Enhanced Security Static Analysis for Detecting Insecure Configuration Scripts","funder_award_id":"2247141","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G3365652221","display_name":null,"funder_award_id":"2247141, 2310179","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G3594984352","display_name":"Authentic Learning Modules for DevOps Security Education","funder_award_id":"2310179","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G7845798442","display_name":null,"funder_award_id":"H98230","funder_id":"https://openalex.org/F4320311089","funder_display_name":"National Security Agency"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320309904","display_name":"Auburn University","ror":"https://ror.org/02v80fc35"},{"id":"https://openalex.org/F4320311089","display_name":"National Security Agency","ror":"https://ror.org/0047bvr32"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4315480688.pdf","grobid_xml":"https://content.openalex.org/works/W4315480688.grobid-xml"},"referenced_works_count":55,"referenced_works":["https://openalex.org/W1642473876","https://openalex.org/W1972978214","https://openalex.org/W1981457167","https://openalex.org/W2066045860","https://openalex.org/W2078393527","https://openalex.org/W2130758759","https://openalex.org/W2141003052","https://openalex.org/W2159401492","https://openalex.org/W2160988203","https://openalex.org/W2163499595","https://openalex.org/W2500387364","https://openalex.org/W2559885217","https://openalex.org/W2594563954","https://openalex.org/W2759023773","https://openalex.org/W2765648970","https://openalex.org/W2773008150","https://openalex.org/W2794825356","https://openalex.org/W2889545716","https://openalex.org/W2890052409","https://openalex.org/W2903428887","https://openalex.org/W2940439009","https://openalex.org/W2945018042","https://openalex.org/W2955656327","https://openalex.org/W2963995913","https://openalex.org/W2970809537","https://openalex.org/W2995534559","https://openalex.org/W3001760383","https://openalex.org/W3030599819","https://openalex.org/W3090625769","https://openalex.org/W3090643686","https://openalex.org/W3092298752","https://openalex.org/W3093595239","https://openalex.org/W3094094693","https://openalex.org/W3101399476","https://openalex.org/W3103898014","https://openalex.org/W3105187050","https://openalex.org/W3106158252","https://openalex.org/W3123074563","https://openalex.org/W3127436251","https://openalex.org/W3163293265","https://openalex.org/W3179169340","https://openalex.org/W3179386656","https://openalex.org/W3207128852","https://openalex.org/W3207604016","https://openalex.org/W3208991184","https://openalex.org/W3210030168","https://openalex.org/W3215753646","https://openalex.org/W3216342268","https://openalex.org/W4200180082","https://openalex.org/W4206600618","https://openalex.org/W4210764005","https://openalex.org/W4238083912","https://openalex.org/W4243830562","https://openalex.org/W4296394699","https://openalex.org/W4300678113"],"related_works":["https://openalex.org/W2978259384","https://openalex.org/W2161133922","https://openalex.org/W2380034771","https://openalex.org/W2365575492","https://openalex.org/W2361543266","https://openalex.org/W3152558356","https://openalex.org/W3043142516","https://openalex.org/W2377966044","https://openalex.org/W2515091551","https://openalex.org/W2312475657"],"abstract_inverted_index":{"Context:":[0],"Kubernetes":[1,19,24,69,82,96,105,116,130,143,228,245],"has":[2],"emerged":[3],"as":[4,38,168,203,205],"the":[5,150,153,192],"de-facto":[6],"tool":[7,138],"for":[8,20,75,142],"automated":[9,21],"container":[10],"orchestration.":[11],"Business":[12],"and":[13,44,175,208,239],"government":[14],"organizations":[15],"are":[16,247],"increasingly":[17],"adopting":[18],"software":[22,122],"deployments.":[23],"is":[25,90],"being":[26],"used":[27,74],"to":[28,48,91,124,148,214,230],"provision":[29,206],"applications":[30],"in":[31,68,104,129,186],"a":[32,50,62,135],"wide":[33],"range":[34],"of":[35,65,87,152,164,177,217,241],"domains,":[36],"such":[37,49,167],"time":[39],"series":[40],"forecasting,":[41],"edge":[42],"computing,":[43],"high-performance":[45],"computing.":[46],"Due":[47],"pervasive":[51],"presence,":[52],"Kubernetes-related":[53],"security":[54,59,66,100,127,155,165,184,194,232],"misconfigurations":[55,67,101,128,185,195,219],"can":[56,77],"cause":[57],"large-scale":[58],"breaches.":[60],"Thus,":[61],"systematic":[63],"analysis":[64,137,243],"manifests,":[70],"i.e.,":[71],"configuration":[72],"files":[73],"Kubernetes,":[76],"help":[78,92],"practitioners":[79,93,212],"secure":[80,94],"their":[81,95],"clusters.":[83],"Objective:":[84],"The":[85],"goal":[86],"this":[88],"paper":[89],"clusters":[97],"by":[98,221],"identifying":[99],"that":[102,198],"occur":[103],"manifests":[106,117,229,246],".":[107,179],"Methodology:":[108],"We":[109,132,189],"conduct":[110],"an":[111],"empirical":[112,225],"study":[113,226],"with":[114],"2,039":[115,187],"mined":[118],"from":[119],"92":[120],"open-source":[121],"repositories":[123],"systematically":[125],"characterize":[126],"manifests.":[131,188],"also":[133,190],"construct":[134],"static":[136,242],"called":[139],"Security":[140],"Linter":[141],"Manifests":[144],"(":[145],"SLI-KUBE":[146],")":[147],"quantify":[149],"frequency":[151],"identified":[154,193],"misconfigurations.":[156],"Results:":[157],"In":[158],"all,":[159],"we":[160,181],"identify":[161,182],"11":[162],"categories":[163],"misconfigurations,":[166,233],"absent":[169,172],"resource":[170],"limit,":[171],"securityContext":[173],",":[174],"activation":[176],"hostIPC":[178],"Specifically,":[180],"1,051":[183],"observe":[191],"affect":[196],"entities":[197],"perform":[199],"mesh-related":[200],"load":[201],"balancing,":[202],"well":[204],"pods":[207],"stateful":[209],"applications.":[210],"Furthermore,":[211],"agreed":[213],"fix":[215],"60%":[216],"10":[218],"reported":[220],"us.":[222],"Conclusion:":[223],"Our":[224],"shows":[227],"include":[231],"which":[234],"necessitates":[235],"security-focused":[236],"code":[237],"reviews":[238],"application":[240],"when":[244],"developed.":[248]},"counts_by_year":[{"year":2026,"cited_by_count":18},{"year":2025,"cited_by_count":51},{"year":2024,"cited_by_count":17},{"year":2023,"cited_by_count":7}],"updated_date":"2026-08-01T09:00:35.917206","created_date":"2025-10-10T00:00:00"}