{"id":"https://openalex.org/W7163522581","doi":"https://doi.org/10.1145/3779208.3807484","title":"I <scp>mmu</scp> C <scp>heck</scp> : Selective Immutability for Container Escape Detection in Containerized Microservices","display_name":"I <scp>mmu</scp> C <scp>heck</scp> : Selective Immutability for Container Escape Detection in Containerized Microservices","publication_year":2026,"publication_date":"2026-06-01","ids":{"openalex":"https://openalex.org/W7163522581","doi":"https://doi.org/10.1145/3779208.3807484"},"language":null,"primary_location":{"id":"doi:10.1145/3779208.3807484","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3779208.3807484","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3779208.3807484","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5137816091","display_name":"Asbat El Khairi","orcid":"https://orcid.org/0009-0000-7853-1192"},"institutions":[{"id":"https://openalex.org/I94624287","display_name":"University of Twente","ror":"https://ror.org/006hf6230","country_code":"NL","type":"education","lineage":["https://openalex.org/I94624287"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Asbat El Khairi","raw_affiliation_strings":["University of Twente, Enschede, Netherlands"],"raw_orcid":"https://orcid.org/0009-0000-7853-1192","affiliations":[{"raw_affiliation_string":"University of Twente, Enschede, Netherlands","institution_ids":["https://openalex.org/I94624287"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137866884","display_name":"Amina Bassit","orcid":"https://orcid.org/0000-0002-1331-9702"},"institutions":[{"id":"https://openalex.org/I182937616","display_name":"Hyundai Mobis (South Korea)","ror":"https://ror.org/038b1qn73","country_code":"KR","type":"company","lineage":["https://openalex.org/I182937616","https://openalex.org/I197312522"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Amina Bassit","raw_affiliation_strings":["Mobai, Gj\u00f8vik, Norway"],"raw_orcid":"https://orcid.org/0000-0002-1331-9702","affiliations":[{"raw_affiliation_string":"Mobai, Gj\u00f8vik, Norway","institution_ids":["https://openalex.org/I182937616"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137868410","display_name":"Andreas Peter","orcid":"https://orcid.org/0000-0003-2929-5001"},"institutions":[{"id":"https://openalex.org/I129877168","display_name":"Carl von Ossietzky Universit\u00e4t Oldenburg","ror":"https://ror.org/033n9gh91","country_code":"DE","type":"education","lineage":["https://openalex.org/I129877168"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Andreas Peter","raw_affiliation_strings":["Carl von Ossietzky Universit\u00e4t Oldenburg, Oldenburg, Germany"],"raw_orcid":"https://orcid.org/0000-0003-2929-5001","affiliations":[{"raw_affiliation_string":"Carl von Ossietzky Universit\u00e4t Oldenburg, Oldenburg, Germany","institution_ids":["https://openalex.org/I129877168"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5071672404","display_name":"Andrea Continella","orcid":"https://orcid.org/0000-0002-0329-1830"},"institutions":[{"id":"https://openalex.org/I94624287","display_name":"University of Twente","ror":"https://ror.org/006hf6230","country_code":"NL","type":"education","lineage":["https://openalex.org/I94624287"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Andrea Continella","raw_affiliation_strings":["University of Twente, Enschede, Netherlands"],"raw_orcid":"https://orcid.org/0000-0002-0329-1830","affiliations":[{"raw_affiliation_string":"University of Twente, Enschede, Netherlands","institution_ids":["https://openalex.org/I94624287"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.9117656,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"774","last_page":"787"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9688000082969666,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9688000082969666,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10101","display_name":"Cloud Computing and Resource Management","score":0.008200000040233135,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10639","display_name":"Advanced Software Engineering Methodologies","score":0.002899999963119626,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/microservices","display_name":"Microservices","score":0.6349999904632568},{"id":"https://openalex.org/keywords/container","display_name":"Container (type theory)","score":0.6028000116348267},{"id":"https://openalex.org/keywords/immutability","display_name":"Immutability","score":0.45649999380111694},{"id":"https://openalex.org/keywords/automation","display_name":"Automation","score":0.299699991941452},{"id":"https://openalex.org/keywords/stacker","display_name":"Stacker","score":0.26249998807907104}],"concepts":[{"id":"https://openalex.org/C2778505942","wikidata":"https://www.wikidata.org/wiki/Q18344624","display_name":"Microservices","level":3,"score":0.6349999904632568},{"id":"https://openalex.org/C2781018962","wikidata":"https://www.wikidata.org/wiki/Q5164884","display_name":"Container (type theory)","level":2,"score":0.6028000116348267},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5324000120162964},{"id":"https://openalex.org/C2776126399","wikidata":"https://www.wikidata.org/wiki/Q3942906","display_name":"Immutability","level":3,"score":0.45649999380111694},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.33719998598098755},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.31949999928474426},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.3021000027656555},{"id":"https://openalex.org/C115901376","wikidata":"https://www.wikidata.org/wiki/Q184199","display_name":"Automation","level":2,"score":0.299699991941452},{"id":"https://openalex.org/C2777740907","wikidata":"https://www.wikidata.org/wiki/Q332280","display_name":"Stacker","level":2,"score":0.26249998807907104},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.25839999318122864}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3779208.3807484","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3779208.3807484","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3779208.3807484","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3779208.3807484","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":7,"referenced_works":["https://openalex.org/W2154081981","https://openalex.org/W2239647876","https://openalex.org/W2747669027","https://openalex.org/W2947745012","https://openalex.org/W3200325357","https://openalex.org/W4313187022","https://openalex.org/W4414891361"],"related_works":[],"abstract_inverted_index":{"Container":[0],"escape":[1,37],"attacks":[2],"break":[3],"isolation":[4],"boundaries,":[5],"granting":[6],"threat":[7],"actors":[8],"code":[9],"execution":[10],"on":[11],"the":[12,20],"underlying":[13],"host":[14],"and":[15,31],"potentially":[16],"full":[17],"control":[18],"over":[19],"entire":[21],"cluster.":[22],"Existing":[23],"runtime":[24],"defenses":[25],"exhibit":[26],"an":[27],"inherent":[28],"trade-off.":[29],"Anomaly-":[30],"provenance-based":[32],"detection":[33,64],"mechanisms":[34],"achieve":[35],"broad":[36],"detection,":[38],"yet":[39],"incur":[40],"substantial":[41],"operational":[42],"costs":[43,60],"due":[44],"to":[45],"model":[46],"retraining":[47],"requirements":[48],"or":[49],"system-wide":[50],"provenance":[51],"capture.":[52],"In":[53],"contrast,":[54],"industry":[55],"rule-based":[56],"detectors":[57],"avoid":[58],"these":[59],"but":[61],"offer":[62],"limited":[63],"coverage.":[65]},"counts_by_year":[],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2026-06-05T00:00:00"}