{"id":"https://openalex.org/W7162014548","doi":"https://doi.org/10.3390/computers15050326","title":"Least-Privilege Role-Based Access Control Improvement for Cloud Container Security","display_name":"Least-Privilege Role-Based Access Control Improvement for Cloud Container Security","publication_year":2026,"publication_date":"2026-05-21","ids":{"openalex":"https://openalex.org/W7162014548","doi":"https://doi.org/10.3390/computers15050326"},"language":"en","primary_location":{"id":"doi:10.3390/computers15050326","is_oa":true,"landing_page_url":"https://doi.org/10.3390/computers15050326","pdf_url":null,"source":{"id":"https://openalex.org/S4210228075","display_name":"Computers","issn_l":"2073-431X","issn":["2073-431X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computers","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.3390/computers15050326","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5052373934","display_name":"Waleed K. Abdulraheem","orcid":"https://orcid.org/0009-0001-5043-8276"},"institutions":[{"id":"https://openalex.org/I33926330","display_name":"Al-Balqa Applied University","ror":"https://ror.org/00qedmt22","country_code":"JO","type":"education","lineage":["https://openalex.org/I33926330"]}],"countries":["JO"],"is_corresponding":false,"raw_author_name":"Waleed K. Abdulraheem","raw_affiliation_strings":["Department of Intelligent Systems, Faculty of Artificial Intelligence, Al-Balqa Applied University, Al-Salt 19117, Jordan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Intelligent Systems, Faculty of Artificial Intelligence, Al-Balqa Applied University, Al-Salt 19117, Jordan","institution_ids":["https://openalex.org/I33926330"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5034498465","display_name":"Emad Mohammed Ibbini","orcid":null},"institutions":[{"id":"https://openalex.org/I31079310","display_name":"Al al-Bayt University","ror":"https://ror.org/028jh2126","country_code":"JO","type":"education","lineage":["https://openalex.org/I31079310"]}],"countries":["JO"],"is_corresponding":false,"raw_author_name":"Emad Mohammed Ibbini","raw_affiliation_strings":["Department of Computer Science, Faculty of Information Technology, Al al-Bayt University, Mafraq 25113, Jordan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Faculty of Information Technology, Al al-Bayt University, Mafraq 25113, Jordan","institution_ids":["https://openalex.org/I31079310"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5095307867","display_name":"Hasan Kanaker","orcid":null},"institutions":[{"id":"https://openalex.org/I36622005","display_name":"Petra University","ror":"https://ror.org/039d9es10","country_code":"JO","type":"education","lineage":["https://openalex.org/I36622005"]}],"countries":["JO"],"is_corresponding":false,"raw_author_name":"Hasan Kanaker","raw_affiliation_strings":["Department of Information Security, Faculty of Information Technology, University of Petra, Amman 11942, Jordan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Information Security, Faculty of Information Technology, University of Petra, Amman 11942, Jordan","institution_ids":["https://openalex.org/I36622005"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5014424523","display_name":"Sami Smadi","orcid":"https://orcid.org/0000-0002-2152-4263"},"institutions":[{"id":"https://openalex.org/I85507684","display_name":"Yarmouk University","ror":"https://ror.org/004mbaj56","country_code":"JO","type":"education","lineage":["https://openalex.org/I85507684"]}],"countries":["JO"],"is_corresponding":false,"raw_author_name":"Sami Smadi","raw_affiliation_strings":["Department of Information Technology, Faculty of Information Technology and Computer Sciences, Yarmouk University, Irbid 21163, Jordan"],"raw_orcid":"https://orcid.org/0000-0002-2152-4263","affiliations":[{"raw_affiliation_string":"Department of Information Technology, Faculty of Information Technology and Computer Sciences, Yarmouk University, Irbid 21163, Jordan","institution_ids":["https://openalex.org/I85507684"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5042749439","display_name":"Nader Abdel Karim","orcid":null},"institutions":[{"id":"https://openalex.org/I33926330","display_name":"Al-Balqa Applied University","ror":"https://ror.org/00qedmt22","country_code":"JO","type":"education","lineage":["https://openalex.org/I33926330"]}],"countries":["JO"],"is_corresponding":false,"raw_author_name":"Nader Abdel Karim","raw_affiliation_strings":["Department of Intelligent Systems, Faculty of Artificial Intelligence, Al-Balqa Applied University, Al-Salt 19117, Jordan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Intelligent Systems, Faculty of Artificial Intelligence, Al-Balqa Applied University, Al-Salt 19117, Jordan","institution_ids":["https://openalex.org/I33926330"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135170236","display_name":"Hussam N. Fakhouri","orcid":null},"institutions":[{"id":"https://openalex.org/I33926330","display_name":"Al-Balqa Applied University","ror":"https://ror.org/00qedmt22","country_code":"JO","type":"education","lineage":["https://openalex.org/I33926330"]}],"countries":["JO"],"is_corresponding":false,"raw_author_name":"Hussam N. Fakhouri","raw_affiliation_strings":["Department of Intelligent Systems, Faculty of Artificial Intelligence, Al-Balqa Applied University, Al-Salt 19117, Jordan"],"raw_orcid":"https://orcid.org/0000-0002-9170-3291","affiliations":[{"raw_affiliation_string":"Department of Intelligent Systems, Faculty of Artificial Intelligence, Al-Balqa Applied University, Al-Salt 19117, Jordan","institution_ids":["https://openalex.org/I33926330"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5117107765","display_name":"Layla Albdour","orcid":null},"institutions":[{"id":"https://openalex.org/I145019703","display_name":"Al-Zaytoonah University of Jordan","ror":"https://ror.org/04a5b0p13","country_code":"JO","type":"education","lineage":["https://openalex.org/I145019703"]}],"countries":["JO"],"is_corresponding":false,"raw_author_name":"Layla Albdour","raw_affiliation_strings":["Cyber Security Department, Faculty of Science and Information Technology, Al-Zaytoonah University of Jordan, Amman 11733, Jordan"],"raw_orcid":"https://orcid.org/0000-0001-5088-2724","affiliations":[{"raw_affiliation_string":"Cyber Security Department, Faculty of Science and Information Technology, Al-Zaytoonah University of Jordan, Amman 11733, Jordan","institution_ids":["https://openalex.org/I145019703"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5135150367","display_name":"Sandi Fakhouri","orcid":"https://orcid.org/0000-0002-8011-9671"},"institutions":[{"id":"https://openalex.org/I114972647","display_name":"University of Jordan","ror":"https://ror.org/05k89ew48","country_code":"JO","type":"education","lineage":["https://openalex.org/I114972647"]}],"countries":["JO"],"is_corresponding":false,"raw_author_name":"Sandi Fakhouri","raw_affiliation_strings":["Department of Computer Science, School of Information Technology, The University of Jordan, Amman 11942, Jordan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, School of Information Technology, The University of Jordan, Amman 11942, Jordan","institution_ids":["https://openalex.org/I114972647"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1600,"currency":"CHF","value_usd":1782},"apc_paid":{"value":1600,"currency":"CHF","value_usd":1782},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.62467859,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"15","issue":"5","first_page":"326","last_page":"326"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.921999990940094,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.921999990940094,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.01209999993443489,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12203","display_name":"Mobile Agent-Based Network Management","score":0.00800000037997961,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.6729000210762024},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.5640000104904175},{"id":"https://openalex.org/keywords/metaheuristic","display_name":"Metaheuristic","score":0.4749000072479248},{"id":"https://openalex.org/keywords/container","display_name":"Container (type theory)","score":0.4641000032424927},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.44190001487731934},{"id":"https://openalex.org/keywords/provisioning","display_name":"Provisioning","score":0.4178999960422516},{"id":"https://openalex.org/keywords/role-based-access-control","display_name":"Role-based access control","score":0.40610000491142273},{"id":"https://openalex.org/keywords/namespace","display_name":"Namespace","score":0.37290000915527344},{"id":"https://openalex.org/keywords/grasp","display_name":"GRASP","score":0.36399999260902405}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6883999705314636},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.6729000210762024},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.5640000104904175},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.4794999957084656},{"id":"https://openalex.org/C109718341","wikidata":"https://www.wikidata.org/wiki/Q1385229","display_name":"Metaheuristic","level":2,"score":0.4749000072479248},{"id":"https://openalex.org/C2781018962","wikidata":"https://www.wikidata.org/wiki/Q5164884","display_name":"Container (type theory)","level":2,"score":0.4641000032424927},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.44190001487731934},{"id":"https://openalex.org/C172191483","wikidata":"https://www.wikidata.org/wiki/Q1071806","display_name":"Provisioning","level":2,"score":0.4178999960422516},{"id":"https://openalex.org/C45567728","wikidata":"https://www.wikidata.org/wiki/Q1702839","display_name":"Role-based access control","level":3,"score":0.40610000491142273},{"id":"https://openalex.org/C2778383056","wikidata":"https://www.wikidata.org/wiki/Q873636","display_name":"Namespace","level":2,"score":0.37290000915527344},{"id":"https://openalex.org/C171268870","wikidata":"https://www.wikidata.org/wiki/Q1486676","display_name":"GRASP","level":2,"score":0.36399999260902405},{"id":"https://openalex.org/C5119721","wikidata":"https://www.wikidata.org/wiki/Q220501","display_name":"Quality of service","level":2,"score":0.34940001368522644},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.32199999690055847},{"id":"https://openalex.org/C2780138299","wikidata":"https://www.wikidata.org/wiki/Q3404265","display_name":"Privilege (computing)","level":2,"score":0.31029999256134033},{"id":"https://openalex.org/C2777210771","wikidata":"https://www.wikidata.org/wiki/Q4927124","display_name":"Block (permutation group theory)","level":2,"score":0.3077000081539154},{"id":"https://openalex.org/C147764199","wikidata":"https://www.wikidata.org/wiki/Q6865248","display_name":"Minification","level":2,"score":0.30480000376701355},{"id":"https://openalex.org/C12725497","wikidata":"https://www.wikidata.org/wiki/Q810247","display_name":"Baseline (sea)","level":2,"score":0.3027999997138977},{"id":"https://openalex.org/C206729178","wikidata":"https://www.wikidata.org/wiki/Q2271896","display_name":"Scheduling (production processes)","level":2,"score":0.29269999265670776},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.29249998927116394},{"id":"https://openalex.org/C111335779","wikidata":"https://www.wikidata.org/wiki/Q3454686","display_name":"Reduction (mathematics)","level":2,"score":0.28519999980926514},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.27129998803138733},{"id":"https://openalex.org/C66746571","wikidata":"https://www.wikidata.org/wiki/Q1134833","display_name":"ENCODE","level":3,"score":0.2630000114440918},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.26030001044273376},{"id":"https://openalex.org/C137836250","wikidata":"https://www.wikidata.org/wiki/Q984063","display_name":"Optimization problem","level":2,"score":0.2565000057220459},{"id":"https://openalex.org/C126831891","wikidata":"https://www.wikidata.org/wiki/Q221673","display_name":"Host (biology)","level":2,"score":0.2540000081062317},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.2538999915122986},{"id":"https://openalex.org/C2776036281","wikidata":"https://www.wikidata.org/wiki/Q48769818","display_name":"Constraint (computer-aided design)","level":2,"score":0.2533999979496002},{"id":"https://openalex.org/C2778820799","wikidata":"https://www.wikidata.org/wiki/Q3454688","display_name":"Cost reduction","level":2,"score":0.25270000100135803},{"id":"https://openalex.org/C206588197","wikidata":"https://www.wikidata.org/wiki/Q846574","display_name":"Reuse","level":2,"score":0.25029999017715454}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.3390/computers15050326","is_oa":true,"landing_page_url":"https://doi.org/10.3390/computers15050326","pdf_url":null,"source":{"id":"https://openalex.org/S4210228075","display_name":"Computers","issn_l":"2073-431X","issn":["2073-431X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computers","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:49ff867dfca9468984ddcfd46cd376f2","is_oa":true,"landing_page_url":"https://doaj.org/article/49ff867dfca9468984ddcfd46cd376f2","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Computers, Vol 15, Iss 5, p 326 (2026)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.3390/computers15050326","is_oa":true,"landing_page_url":"https://doi.org/10.3390/computers15050326","pdf_url":null,"source":{"id":"https://openalex.org/S4210228075","display_name":"Computers","issn_l":"2073-431X","issn":["2073-431X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computers","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.5435067415237427}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Role-Based":[0],"Access":[1],"Control":[2],"(RBAC)":[3],"is":[4,188,193],"the":[5,23,189,209,213],"de-facto":[6],"mechanism":[7],"for":[8,63,218],"preserving":[9],"Kubernetes":[10,119],"and":[11,31,54,65,105,137,160,163,170,177,192,205],"other":[12],"cloud-native":[13],"container":[14],"platforms,":[15],"however":[16],"real":[17],"deployments":[18],"occasionally":[19],"drift":[20],"away":[21],"from":[22],"principle":[24],"of":[25,198,215],"least":[26],"privilege":[27],"as":[28,47,85,87,149,180],"clusters,":[29],"teams,":[30],"services":[32],"improve.":[33],"This":[34],"paper":[35],"introduces":[36],"an":[37,70],"automated":[38],"RBAC":[39,120,220],"hardening":[40],"framework":[41],"that":[42,74,133,186],"formulates":[43],"least-privilege":[44,164],"policy":[45],"design":[46],"a":[48,60,128,141,150,157,181,196],"limited":[49],"optimization":[50],"problem":[51],"over":[52],"RoleBindings":[53],"ClusterRoleBindings.":[55],"The":[56],"objective":[57],"combines":[58],"(i)":[59],"permission-risk":[61],"score":[62],"namespaced":[64],"cluster-scoped":[66],"actions":[67],"with":[68],"(ii)":[69],"operational":[71],"complexity":[72],"term":[73],"discourages":[75],"overly":[76],"large":[77],"binding":[78,103],"sets.":[79],"Solid":[80],"limitations":[81],"encode":[82],"functional":[83],"requirements":[84,107],"well":[86],"practical":[88],"security":[89],"policies,":[90],"which":[91],"includes":[92],"namespace":[93],"allowlists,":[94],"role":[95],"scoping":[96],"rules,":[97],"administrative":[98],"restrictions":[99],"on":[100,156],"cluster-wide":[101],"bindings,":[102],"budgets,":[104],"separation-of-duty":[106],"expressed":[108],"by":[109,126],"utilizing":[110,127],"capability":[111],"classes.":[112],"To":[113],"allow":[114],"optimizer-agnostic":[115],"search":[116,154],"while":[117],"protecting":[118],"semantics,":[121],"we":[122],"analyze":[123],"candidate":[124],"policies":[125],"unified":[129],"penalty-based":[130],"fitness":[131],"function":[132],"compines":[134],"risk,":[135],"complexity,":[136],"constraint":[138],"violations":[139],"into":[140],"single":[142],"scalar":[143],"value.":[144],"We":[145],"utilized":[146],"ten":[147],"metaheuristic":[148,216],"benchmark":[151],"including":[152],"baseline":[153],"paths":[155],"Kubernetes-inspired":[158],"instance":[159],"report":[161],"feasibility":[162,187],"quality":[165],"metrics":[166],"(precision,":[167],"recall,":[168],"F1,":[169],"over-privilege":[171],"ratio)":[172],"parallel":[173],"to":[174,195,202],"RB/CRB":[175],"counts":[176],"excess":[178],"risk":[179],"structural":[182],"indicators.":[183],"Outcomes":[184],"present":[185],"prime":[190],"challenge,":[191],"restricted":[194],"subset":[197],"optimizers":[199],"reliably":[200],"arrives":[201],"entirely":[203],"feasible":[204],"compact":[206],"arrangements":[207],"within":[208],"exact":[210],"budget,":[211],"indicating":[212],"practicality":[214],"enhancement":[217],"systematic":[219],"reduction":[221],"in":[222],"containerized":[223],"cloud":[224],"computing":[225],"environments.":[226]},"counts_by_year":[],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2026-05-22T00:00:00"}