{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,30]],"date-time":"2026-01-30T05:38:06Z","timestamp":1769751486647,"version":"3.49.0"},"publisher-location":"Cham","reference-count":38,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783031485893","type":"print"},{"value":"9783031485909","type":"electronic"}],"license":[{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2023]]},"DOI":"10.1007\/978-3-031-48590-9_20","type":"book-chapter","created":{"date-parts":[[2023,11,25]],"date-time":"2023-11-25T08:02:05Z","timestamp":1700899325000},"page":"205-216","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":3,"title":["Cloud-Native Application Security Training and\u00a0Testing with\u00a0Cyber Ranges"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-1077-2771","authenticated-orcid":false,"given":"Enrico","family":"Russo","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0025-7191","authenticated-orcid":false,"given":"Giacomo","family":"Longo","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4566-1382","authenticated-orcid":false,"given":"Meriem","family":"Guerar","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2272-2376","authenticated-orcid":false,"given":"Alessio","family":"Merlo","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2023,11,26]]},"reference":[{"key":"20_CR1","unstructured":"CoreDNS: DNS and Service Discovery. https:\/\/coredns.io\/. Accessed June 2023"},{"key":"20_CR2","unstructured":"Openwrt. https:\/\/openwrt.org\/. Accessed Sept 2022"},{"key":"20_CR3","unstructured":"Appsecco: Breaking and Pwning Apps and Servers on AWS and Azure - Free Training Courseware and Labs. https:\/\/github.com\/appsecco\/breaking-and-pwning-apps-and-servers-aws-azure-training. Accessed Sept 2022"},{"key":"20_CR4","unstructured":"AWS (Amazon Web Services): Penetration Testing. https:\/\/aws.amazon.com\/security\/penetration-testing\/. Accessed Aug 2022"},{"key":"20_CR5","unstructured":"AWS (Amazon Web Services): Use IMDSv2. https:\/\/docs.aws.amazon.com\/AWSEC2\/latest\/UserGuide\/configuring-instance-metadata-service.html. Accessed June 2023"},{"key":"20_CR6","unstructured":"Bishop Fox: IAM Vulnerable. https:\/\/github.com\/BishopFox\/iam-vulnerable. Accessed Aug 2022"},{"key":"20_CR7","unstructured":"Canonical: cloud-inig the standard for customising cloud instances. https:\/\/cloud-init.io\/. Accessed June 2023"},{"key":"20_CR8","unstructured":"Costas, L., Sokratis, K.K., Pitropakis, N.: Cloud security, privacy and trust baselines. In: Vacca, J.R. (ed.) Cloud Computing Security, chap. 4. CRC Press (2016)"},{"key":"20_CR9","unstructured":"CTFd: CTFd. https:\/\/github.com\/CTFd\/CTFd. Accessed Sept 2022"},{"key":"20_CR10","doi-asserted-by":"publisher","unstructured":"Demetrio, L., Lagorio, G., Ribaudo, M., Russo, E., Valenza, A.: ZenHackAdemy: ethical hacking @ DIBRIS. In: Proceedings of the 11th International Conference on Computer Supported Education. SCITEPRESS - Science and Technology Publications (2019). https:\/\/doi.org\/10.5220\/0007747104050413","DOI":"10.5220\/0007747104050413"},{"key":"20_CR11","doi-asserted-by":"crossref","unstructured":"Deterding, S., Dixon, D., Khaled, R., Nacke, L.: From game design elements to gamefulness: defining \u201cgamification\u201d. In: Proceedings of the 15th International Academic MindTrek Conference: Envisioning Future Media Environments, pp. 9\u201315 (2011)","DOI":"10.1145\/2181037.2181040"},{"key":"20_CR12","unstructured":"DisruptOps: IncidentResponseGenerator. https:\/\/github.com\/disruptops\/IncidentResponseGenerator. Accessed Sept 2022"},{"key":"20_CR13","unstructured":"F5: NGINX: Advanced Load Balancer, Web Server, and Reverse Proxy. https:\/\/www.nginx.com\/. Accessed June 2023"},{"key":"20_CR14","unstructured":"HashiCorp: Terraform Documentation. https:\/\/www.terraform.io\/docs. Accessed Sept 2022"},{"key":"20_CR15","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1016\/j.jss.2017.01.001","volume":"126","author":"N Kratzke","year":"2017","unstructured":"Kratzke, N., Quint, P.: Understanding cloud-native applications after 10 years of cloud computing - a systematic mapping study. J. Syst. Softw. 126, 1\u201316 (2017)","journal-title":"J. Syst. Softw."},{"key":"20_CR16","doi-asserted-by":"publisher","unstructured":"Longo, G., Orlich, A., Musante, S., Merlo, A., Russo, E.: MaCySTe: a virtual testbed for maritime cybersecurity. SoftwareX 23, 101426 (2023). https:\/\/doi.org\/10.1016\/j.softx.2023.101426","DOI":"10.1016\/j.softx.2023.101426"},{"key":"20_CR17","unstructured":"Maxime Leblanc: Damn Vulnerable Cloud Application. https:\/\/github.com\/m6a-UdS\/dvca. Accessed Sept 2022"},{"key":"20_CR18","unstructured":"Ministry of Innovation Technology and Digitalisation: Strategia Cloud Italia (2021). https:\/\/docs.italia.it\/italia\/cloud-italia\/strategia-cloud-italia-docs\/it\/stabile\/index.html. Accessed Aug 2022"},{"key":"20_CR19","unstructured":"NCC Group: Sadcloud. https:\/\/github.com\/nccgroup\/sadcloud. Accessed Sept 2022"},{"key":"20_CR20","unstructured":"Netflix: Four Reasons We Choose Amazon\u2019s Cloud as Our Computing Platform. https:\/\/netflixtechblog.com\/four-reasons-we-choose-amazons-cloud-as-our-computing-platform-4aceb692afec. Accessed Sept 2022"},{"key":"20_CR21","unstructured":"NIST (National Institute of Standards and Technology): Cyber Ranges. https:\/\/www.nist.gov\/system\/files\/documents\/2018\/02\/13\/cyber_ranges.pdf. Accessed Aug 2022"},{"key":"20_CR22","unstructured":"OffSec Services: The most advanced Penetration Testing Distribution. https:\/\/www.kali.org\/. Accessed June 2023"},{"key":"20_CR23","doi-asserted-by":"crossref","unstructured":"O\u2019Hara, B.M.: CCSP (ISC)2 Certified Cloud Security Professional Official Study Guide. Sybex (2017)","DOI":"10.1002\/9781119419372"},{"key":"20_CR24","unstructured":"OWASP: Serverless-Goat. https:\/\/github.com\/OWASP\/Serverless-Goat. Accessed Aug 2022"},{"key":"20_CR25","unstructured":"OWASP (Open Web Application Security Project) Foundation: OWASP Cloud-Native Application Security Top 10. https:\/\/owasp.org\/www-project-cloud-native-application-security-top-10\/"},{"key":"20_CR26","unstructured":"Pallets: Flask, web development, one drop at a time (2010). https:\/\/flask.palletsprojects.com\/en\/2.2.x\/. Accessed Sept 2022"},{"key":"20_CR27","doi-asserted-by":"publisher","unstructured":"Raimondi, M., Longo, G., Merlo, A., Armando, A., Russo, E.: Training the maritime security operations centre teams. In: 2022 IEEE International Conference on Cyber Security and Resilience (CSR), pp. 388\u2013393 (2022). https:\/\/doi.org\/10.1109\/CSR54599.2022.9850324","DOI":"10.1109\/CSR54599.2022.9850324"},{"key":"20_CR28","unstructured":"Rhino Security Labs: CloudGoat. https:\/\/github.com\/RhinoSecurityLabs\/cloudgoat. Accessed Aug 2022"},{"key":"20_CR29","unstructured":"Rob, V., Stive, S.: Architecting Cloud Native .NET Applications for Azure. Microsoft Developer Division, .NET, and Visual Studio Product Teams (2020)"},{"key":"20_CR30","unstructured":"Nolette, R.: AWS Detonation Lab. https:\/\/github.com\/sonofagl1tch\/AWSDetonationLab. Accessed Sept 2022"},{"key":"20_CR31","unstructured":"Scott Piper. Summit Route: flAWS. http:\/\/flaws.cloud\/. Accessed Sept 2022"},{"key":"20_CR32","unstructured":"Piper, S.: Summit Route: flAWS 2. http:\/\/flaws2.cloud\/. Accessed Sept 2022"},{"key":"20_CR33","unstructured":"Services, A.W.: AWS Named as a Leader in the 2022 Gartner Cloud Infrastructure and Platform Services (CIPS) Magic Quadrant for the 12th Consecutive Year. https:\/\/aws.amazon.com\/it\/blogs\/aws\/aws-named-as-a-leader-in-the-2022-gartner-cloud-infrastructure-platform-services-cips-magic-quadrant-for-the-12th-consecutive-year\/. Accessed Sept 2022"},{"key":"20_CR34","unstructured":"Pulec, S.: Moto - Mock AWS Services. https:\/\/github.com\/spulec\/moto. Accessed Sept 2022"},{"key":"20_CR35","unstructured":"The Apache Software Foundation: Apache Guacamole. https:\/\/guacamole.apache.org\/. Accessed June 2023"},{"key":"20_CR36","unstructured":"The MITRE Corporation: Cloud Matrix. https:\/\/attack.mitre.org\/matrices\/enterprise\/cloud\/. Accessed Sept 2022"},{"key":"20_CR37","unstructured":"The MITRE Corporation: MITRE ATT &CK. https:\/\/attack.mitre.org\/"},{"key":"20_CR38","unstructured":"The PostgreSQL Global Development Group: PostgreSQL: The World\u2019s Most Advanced Open Source Relational Database. https:\/\/www.postgresql.org\/. Accessed June 2023"}],"container-title":["Lecture Notes in Networks and Systems","Proceedings of the 15th International Conference on Ubiquitous Computing & Ambient Intelligence (UCAmI 2023)"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-48590-9_20","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,11,25]],"date-time":"2023-11-25T08:05:11Z","timestamp":1700899511000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-48590-9_20"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023]]},"ISBN":["9783031485893","9783031485909"],"references-count":38,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-48590-9_20","relation":{},"ISSN":["2367-3370","2367-3389"],"issn-type":[{"value":"2367-3370","type":"print"},{"value":"2367-3389","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023]]},"assertion":[{"value":"26 November 2023","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"UCAmI","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Ubiquitous Computing and Ambient Intelligence","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Riviera Maya","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Mexico","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2023","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"28 November 2023","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"29 November 2023","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"15","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"ucami2023","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/ucami.org\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}