{"id":"https://openalex.org/W4393928157","doi":"https://doi.org/10.1145/3603166.3632135","title":"Compliance Management of IaC-Based Cloud Deployments During Runtime","display_name":"Compliance Management of IaC-Based Cloud Deployments During Runtime","publication_year":2023,"publication_date":"2023-12-04","ids":{"openalex":"https://openalex.org/W4393928157","doi":"https://doi.org/10.1145/3603166.3632135"},"language":"en","primary_location":{"id":"doi:10.1145/3603166.3632135","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3603166.3632135","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3603166.3632135","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the IEEE/ACM 16th International Conference on Utility and Cloud Computing","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3603166.3632135","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5004679490","display_name":"Ghareeb Falazi","orcid":"https://orcid.org/0000-0002-8064-9293"},"institutions":[{"id":"https://openalex.org/I100066346","display_name":"University of Stuttgart","ror":"https://ror.org/04vnq7t77","country_code":"DE","type":"education","lineage":["https://openalex.org/I100066346"]}],"countries":["DE"],"is_corresponding":true,"raw_author_name":"Ghareeb Falazi","raw_affiliation_strings":["Institute of Architecture of Application Systems, University of Stuttgart, Stuttgart, Germany"],"raw_orcid":"https://orcid.org/0000-0002-8064-9293","affiliations":[{"raw_affiliation_string":"Institute of Architecture of Application Systems, University of Stuttgart, Stuttgart, Germany","institution_ids":["https://openalex.org/I100066346"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5052253787","display_name":"Lukas Harzenetter","orcid":"https://orcid.org/0000-0003-1011-4362"},"institutions":[{"id":"https://openalex.org/I100066346","display_name":"University of Stuttgart","ror":"https://ror.org/04vnq7t77","country_code":"DE","type":"education","lineage":["https://openalex.org/I100066346"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Lukas Harzenetter","raw_affiliation_strings":["Institute of Architecture of Application Systems, University of Stuttgart, Stuttgart, Germany"],"raw_orcid":"https://orcid.org/0000-0003-1011-4362","affiliations":[{"raw_affiliation_string":"Institute of Architecture of Application Systems, University of Stuttgart, Stuttgart, Germany","institution_ids":["https://openalex.org/I100066346"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5007257118","display_name":"K\u00e1lm\u00e1n K\u00e9pes","orcid":"https://orcid.org/0000-0002-1392-9789"},"institutions":[{"id":"https://openalex.org/I100066346","display_name":"University of Stuttgart","ror":"https://ror.org/04vnq7t77","country_code":"DE","type":"education","lineage":["https://openalex.org/I100066346"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"K\u00e1lm\u00e1n K\u00e9pes","raw_affiliation_strings":["Institute of Architecture of Application Systems, University of Stuttgart, Stuttgart, Germany"],"raw_orcid":"https://orcid.org/0000-0002-1392-9789","affiliations":[{"raw_affiliation_string":"Institute of Architecture of Application Systems, University of Stuttgart, Stuttgart, Germany","institution_ids":["https://openalex.org/I100066346"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5028884505","display_name":"Frank Leymann","orcid":"https://orcid.org/0000-0002-9123-259X"},"institutions":[{"id":"https://openalex.org/I100066346","display_name":"University of Stuttgart","ror":"https://ror.org/04vnq7t77","country_code":"DE","type":"education","lineage":["https://openalex.org/I100066346"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Frank Leymann","raw_affiliation_strings":["Institute of Architecture of Application Systems, University of Stuttgart, Stuttgart, Germany"],"raw_orcid":"https://orcid.org/0000-0002-9123-259X","affiliations":[{"raw_affiliation_string":"Institute of Architecture of Application Systems, University of Stuttgart, Stuttgart, Germany","institution_ids":["https://openalex.org/I100066346"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5091195190","display_name":"Uwe Breitenb\u00fccher","orcid":"https://orcid.org/0000-0002-8816-5541"},"institutions":[{"id":"https://openalex.org/I57589565","display_name":"Reutlingen University","ror":"https://ror.org/00q644y50","country_code":"DE","type":"education","lineage":["https://openalex.org/I57589565"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Uwe Breitenb\u00fccher","raw_affiliation_strings":["Reutlingen University, Reutlingen, Germany"],"raw_orcid":"https://orcid.org/0000-0002-8816-5541","affiliations":[{"raw_affiliation_string":"Reutlingen University, Reutlingen, Germany","institution_ids":["https://openalex.org/I57589565"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5021651819","display_name":"Evangelos Ntentos","orcid":null},"institutions":[{"id":"https://openalex.org/I129774422","display_name":"University of Vienna","ror":"https://ror.org/03prydq77","country_code":"AT","type":"education","lineage":["https://openalex.org/I129774422"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Evangelos Ntentos","raw_affiliation_strings":["Research Group Software Architecture, Faculty of Computer Science, University of Vienna, Vienna, Austria"],"raw_orcid":"https://orcid.org/0000-0002-7997-905X","affiliations":[{"raw_affiliation_string":"Research Group Software Architecture, Faculty of Computer Science, University of Vienna, Vienna, Austria","institution_ids":["https://openalex.org/I129774422"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5077943544","display_name":"Uwe Zdun","orcid":"https://orcid.org/0000-0002-6233-2591"},"institutions":[{"id":"https://openalex.org/I129774422","display_name":"University of Vienna","ror":"https://ror.org/03prydq77","country_code":"AT","type":"education","lineage":["https://openalex.org/I129774422"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Uwe Zdun","raw_affiliation_strings":["Research Group Software Architecture, Faculty of Computer Science, University of Vienna, Vienna, Austria"],"raw_orcid":"https://orcid.org/0000-0002-6233-2591","affiliations":[{"raw_affiliation_string":"Research Group Software Architecture, Faculty of Computer Science, University of Vienna, Vienna, Austria","institution_ids":["https://openalex.org/I129774422"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5041360724","display_name":"M. Becker","orcid":"https://orcid.org/0009-0007-7641-3257"},"institutions":[{"id":"https://openalex.org/I4210095996","display_name":"IBM (Germany)","ror":"https://ror.org/00pm7rm97","country_code":"DE","type":"company","lineage":["https://openalex.org/I1341412227","https://openalex.org/I4210095996"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Martin Becker","raw_affiliation_strings":["IBM Deutschland, B\u00f6blingen, Germany"],"raw_orcid":"https://orcid.org/0009-0007-7641-3257","affiliations":[{"raw_affiliation_string":"IBM Deutschland, B\u00f6blingen, Germany","institution_ids":["https://openalex.org/I4210095996"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5005318508","display_name":"Elena Heldwein","orcid":null},"institutions":[{"id":"https://openalex.org/I4210095996","display_name":"IBM (Germany)","ror":"https://ror.org/00pm7rm97","country_code":"DE","type":"company","lineage":["https://openalex.org/I1341412227","https://openalex.org/I4210095996"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Elena Heldwein","raw_affiliation_strings":["IBM Deutschland, B\u00f6blingen, Germany"],"raw_orcid":"https://orcid.org/0009-0006-7009-8455","affiliations":[{"raw_affiliation_string":"IBM Deutschland, B\u00f6blingen, Germany","institution_ids":["https://openalex.org/I4210095996"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":9,"corresponding_author_ids":["https://openalex.org/A5004679490"],"corresponding_institution_ids":["https://openalex.org/I100066346"],"apc_list":null,"apc_paid":null,"fwci":0.3456,"has_fulltext":true,"cited_by_count":3,"citation_normalized_percentile":{"value":0.61643853,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":95,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"11"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12292","display_name":"Graph Theory and Algorithms","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12292","display_name":"Graph Theory and Algorithms","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10101","display_name":"Cloud Computing and Resource Management","score":0.9983000159263611,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11986","display_name":"Scientific Computing and Data Management","score":0.9779000282287598,"subfield":{"id":"https://openalex.org/subfields/1802","display_name":"Information Systems and Management"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.7935556173324585},{"id":"https://openalex.org/keywords/compliance","display_name":"Compliance (psychology)","score":0.7357818484306335},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.696387767791748},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4919087886810303},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.30204176902770996}],"concepts":[{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.7935556173324585},{"id":"https://openalex.org/C2781460075","wikidata":"https://www.wikidata.org/wiki/Q1399332","display_name":"Compliance (psychology)","level":2,"score":0.7357818484306335},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.696387767791748},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4919087886810303},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.30204176902770996},{"id":"https://openalex.org/C77805123","wikidata":"https://www.wikidata.org/wiki/Q161272","display_name":"Social psychology","level":1,"score":0.0},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3603166.3632135","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3603166.3632135","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3603166.3632135","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the IEEE/ACM 16th International Conference on Utility and Cloud Computing","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3603166.3632135","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3603166.3632135","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3603166.3632135","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the IEEE/ACM 16th International Conference on Utility and Cloud Computing","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G630767045","display_name":null,"funder_award_id":"314720630","funder_id":"https://openalex.org/F4320320879","funder_display_name":"Deutsche Forschungsgemeinschaft"},{"id":"https://openalex.org/G6738529362","display_name":"Infrastructure-as-code Architecture Decision Compliance","funder_award_id":"I 4731","funder_id":"https://openalex.org/F4320321181","funder_display_name":"Austrian Science Fund"},{"id":"https://openalex.org/G7812190830","display_name":null,"funder_award_id":"I 4731-N","funder_id":"https://openalex.org/F4320321181","funder_display_name":"Austrian Science Fund"}],"funders":[{"id":"https://openalex.org/F4320316785","display_name":"VMware","ror":null},{"id":"https://openalex.org/F4320320879","display_name":"Deutsche Forschungsgemeinschaft","ror":"https://ror.org/018mejw64"},{"id":"https://openalex.org/F4320321181","display_name":"Austrian Science Fund","ror":"https://ror.org/013tf3c58"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4393928157.pdf","grobid_xml":"https://content.openalex.org/works/W4393928157.grobid-xml"},"referenced_works_count":13,"referenced_works":["https://openalex.org/W49973284","https://openalex.org/W2029138738","https://openalex.org/W2147405597","https://openalex.org/W2267596186","https://openalex.org/W3041762618","https://openalex.org/W3104429612","https://openalex.org/W3109430751","https://openalex.org/W3151685851","https://openalex.org/W3157440142","https://openalex.org/W4229542063","https://openalex.org/W4320168450","https://openalex.org/W4367394663","https://openalex.org/W6657723482"],"related_works":["https://openalex.org/W2748952813","https://openalex.org/W4244478748","https://openalex.org/W2410395228","https://openalex.org/W4223488648","https://openalex.org/W2134969820","https://openalex.org/W2251605416","https://openalex.org/W2560439919","https://openalex.org/W4389340727","https://openalex.org/W3150465815","https://openalex.org/W1997222214"],"abstract_inverted_index":{"Modern":[0],"cloud":[1,25,37,105],"applications":[2,26],"increasingly":[3],"depend":[4],"on":[5],"Infrastructure-as-Code":[6],"(IaC)":[7],"practices":[8],"for":[9,85],"infrastructure":[10,47],"automation":[11],"to":[12,30,45,79,118],"help":[13],"manage":[14],"the":[15,22,46,49,59,92,114,123,132,140,143],"complexity":[16],"of":[17,24,51,61,97,142],"deploying":[18],"large-scale":[19],"architectures.":[20],"Additionally,":[21],"deployment":[23],"is":[27,39,67,71],"commonly":[28],"subject":[29],"compliance":[31,56,88,101],"rules.":[32],"Moreover,":[33],"designing":[34],"compliant":[35],"IaC-based":[36,104],"deployments":[38,106],"not":[40],"enough":[41],"since":[42],"runtime":[43,86],"changes":[44],"or":[48],"configuration":[50],"individual":[52],"components":[53],"may":[54],"introduce":[55],"violations.":[57],"Often,":[58],"process":[60],"checking":[62,98],"and":[63,73,81,95,99,120,130,150],"fixing":[64],"such":[65],"violations":[66],"done":[68],"manually,":[69],"which":[70],"time-consuming":[72],"error-prone.":[74],"Therefore,":[75],"this":[76,110],"work":[77],"aims":[78],"define":[80],"implement":[82,121,148],"a":[83,154],"method":[84,129],"IaC":[87,125,133],"management":[89],"that":[90,138],"reduces":[91],"complexity,":[93],"effort,":[94],"uncertainty":[96],"enforcing":[100],"rules":[102],"against":[103],"at":[107],"runtime.":[108],"To":[109],"end,":[111],"we":[112],"follow":[113],"design-science":[115],"research":[116],"methodology":[117],"design":[119],"(i)":[122],"Runtime":[124],"Compliance":[126,134],"Management":[127,135],"(RICMa)":[128],"(ii)":[131],"Framework":[136],"(IaCMF)":[137],"supports":[139],"execution":[141],"RICMa":[144],"method.":[145],"We":[146],"prototypically":[147],"IaCMF":[149],"evaluate":[151],"it":[152],"using":[153],"qualitative":[155],"interview":[156],"study":[157],"with":[158],"industry":[159],"experts.":[160]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2}],"updated_date":"2026-05-08T15:41:06.802602","created_date":"2025-10-10T00:00:00"}