{"id":"https://openalex.org/W4396735064","doi":"https://doi.org/10.1145/3589334.3645436","title":"GRASP: Hardening Serverless Applications through Graph Reachability Analysis of Security Policies","display_name":"GRASP: Hardening Serverless Applications through Graph Reachability Analysis of Security Policies","publication_year":2024,"publication_date":"2024-05-08","ids":{"openalex":"https://openalex.org/W4396735064","doi":"https://doi.org/10.1145/3589334.3645436"},"language":"en","primary_location":{"id":"doi:10.1145/3589334.3645436","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3589334.3645436","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Web Conference 2024","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3589334.3645436","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5048047768","display_name":"Isaac Polinsky","orcid":"https://orcid.org/0009-0003-9111-6913"},"institutions":[{"id":"https://openalex.org/I137902535","display_name":"North Carolina State University","ror":"https://ror.org/04tj63d06","country_code":"US","type":"education","lineage":["https://openalex.org/I137902535"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Isaac Polinsky","raw_affiliation_strings":["Department of Computer Science, North Carolina State University, Raleigh, NC, USA"],"raw_orcid":"https://orcid.org/0009-0003-9111-6913","affiliations":[{"raw_affiliation_string":"Department of Computer Science, North Carolina State University, Raleigh, NC, USA","institution_ids":["https://openalex.org/I137902535"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101917630","display_name":"Pubali Datta","orcid":"https://orcid.org/0009-0005-2026-5465"},"institutions":[{"id":"https://openalex.org/I24603500","display_name":"University of Massachusetts Amherst","ror":"https://ror.org/0072zz521","country_code":"US","type":"education","lineage":["https://openalex.org/I24603500"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Pubali Datta","raw_affiliation_strings":["Department of Computer Science, University of Massachusetts Amherst, Amherst, MA, USA"],"raw_orcid":"https://orcid.org/0009-0005-2026-5465","affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Massachusetts Amherst, Amherst, MA, USA","institution_ids":["https://openalex.org/I24603500"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5021649580","display_name":"Adam Bates","orcid":"https://orcid.org/0000-0003-1511-4951"},"institutions":[{"id":"https://openalex.org/I157725225","display_name":"University of Illinois Urbana-Champaign","ror":"https://ror.org/047426m28","country_code":"US","type":"education","lineage":["https://openalex.org/I157725225"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Adam Bates","raw_affiliation_strings":["Department of Computer Science, University of Illinois Urbana-Champaign, Champaign, Illinois, USA"],"raw_orcid":"https://orcid.org/0000-0003-1511-4951","affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Illinois Urbana-Champaign, Champaign, Illinois, USA","institution_ids":["https://openalex.org/I157725225"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5024034310","display_name":"William Enck","orcid":"https://orcid.org/0000-0002-3043-8092"},"institutions":[{"id":"https://openalex.org/I137902535","display_name":"North Carolina State University","ror":"https://ror.org/04tj63d06","country_code":"US","type":"education","lineage":["https://openalex.org/I137902535"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"William Enck","raw_affiliation_strings":["Department of Computer Science, North Carolina State University, Raleigh, NC, USA"],"raw_orcid":"https://orcid.org/0000-0002-3043-8092","affiliations":[{"raw_affiliation_string":"Department of Computer Science, North Carolina State University, Raleigh, NC, USA","institution_ids":["https://openalex.org/I137902535"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":14,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1644","last_page":"1655"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/reachability","display_name":"Reachability","score":0.9275144338607788},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7240023612976074},{"id":"https://openalex.org/keywords/grasp","display_name":"GRASP","score":0.7168344259262085},{"id":"https://openalex.org/keywords/hardening","display_name":"Hardening (computing)","score":0.44679972529411316},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.4292606711387634},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3428402841091156},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.29571256041526794},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.1166260838508606},{"id":"https://openalex.org/keywords/chemistry","display_name":"Chemistry","score":0.08053341507911682}],"concepts":[{"id":"https://openalex.org/C136643341","wikidata":"https://www.wikidata.org/wiki/Q1361526","display_name":"Reachability","level":2,"score":0.9275144338607788},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7240023612976074},{"id":"https://openalex.org/C171268870","wikidata":"https://www.wikidata.org/wiki/Q1486676","display_name":"GRASP","level":2,"score":0.7168344259262085},{"id":"https://openalex.org/C44255700","wikidata":"https://www.wikidata.org/wiki/Q978423","display_name":"Hardening (computing)","level":3,"score":0.44679972529411316},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.4292606711387634},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3428402841091156},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.29571256041526794},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.1166260838508606},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.08053341507911682},{"id":"https://openalex.org/C178790620","wikidata":"https://www.wikidata.org/wiki/Q11351","display_name":"Organic chemistry","level":1,"score":0.0},{"id":"https://openalex.org/C2779227376","wikidata":"https://www.wikidata.org/wiki/Q6505497","display_name":"Layer (electronics)","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3589334.3645436","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3589334.3645436","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Web Conference 2024","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3589334.3645436","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3589334.3645436","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Web Conference 2024","raw_type":"proceedings-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/13","display_name":"Climate action","score":0.5699999928474426}],"awards":[{"id":"https://openalex.org/G7198869557","display_name":null,"funder_award_id":"CNS 19-55228","funder_id":"https://openalex.org/F4320323817","funder_display_name":"Universitas Brawijaya"}],"funders":[{"id":"https://openalex.org/F4320323817","display_name":"Universitas Brawijaya","ror":"https://ror.org/01wk3d929"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":20,"referenced_works":["https://openalex.org/W1599739130","https://openalex.org/W1981490327","https://openalex.org/W2007999111","https://openalex.org/W2071252521","https://openalex.org/W2075663494","https://openalex.org/W2094873755","https://openalex.org/W2128932642","https://openalex.org/W2140911579","https://openalex.org/W2160612883","https://openalex.org/W2637047286","https://openalex.org/W2755094099","https://openalex.org/W2908957302","https://openalex.org/W2911858398","https://openalex.org/W2962955124","https://openalex.org/W2970994372","https://openalex.org/W3012914409","https://openalex.org/W3042833479","https://openalex.org/W3108419307","https://openalex.org/W3111862628","https://openalex.org/W4353004773"],"related_works":["https://openalex.org/W2127267268","https://openalex.org/W2136512912","https://openalex.org/W2067910792","https://openalex.org/W2156446763","https://openalex.org/W2163296013","https://openalex.org/W2143461633","https://openalex.org/W2150194458","https://openalex.org/W2743859443","https://openalex.org/W2326995835","https://openalex.org/W4321471459"],"abstract_inverted_index":{"Serverless":[0],"computing":[1,8],"is":[2,64],"supplanting":[3],"past":[4],"versions":[5],"of":[6,25,32,58],"cloud":[7],"as":[9],"the":[10,20,30,56],"easiest":[11],"way":[12],"to":[13],"rapidly":[14],"prototype":[15],"and":[16,22,46],"deploy":[17],"applications.":[18],"However,":[19],"reentrant":[21],"ephemeral":[23],"nature":[24],"serverless":[26,62],"functions":[27],"only":[28],"exacerbates":[29],"challenge":[31],"correctly":[33],"specifying":[34],"security":[35],"policies.":[36],"Unfortunately,":[37],"with":[38],"role-based":[39],"access":[40],"control":[41],"solutions":[42],"like":[43],"Amazon":[44],"Identity":[45],"Access":[47],"Management":[48],"(IAM)":[49],"already":[50],"suffering":[51],"from":[52],"pervasive":[53],"misconfiguration":[54],"problems,":[55],"likelihood":[57],"policy":[59],"failures":[60],"in":[61],"applications":[63],"high.":[65]},"counts_by_year":[{"year":2026,"cited_by_count":4},{"year":2025,"cited_by_count":10}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}