{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,10]],"date-time":"2026-03-10T15:31:21Z","timestamp":1773156681331,"version":"3.50.1"},"publisher-location":"Cham","reference-count":26,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783031569494","type":"print"},{"value":"9783031569500","type":"electronic"}],"license":[{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2024]]},"DOI":"10.1007\/978-3-031-56950-0_23","type":"book-chapter","created":{"date-parts":[[2024,3,28]],"date-time":"2024-03-28T03:01:57Z","timestamp":1711594917000},"page":"268-279","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["CloudSec: An Extensible Automated Reasoning Framework for\u00a0Cloud Security Policies"],"prefix":"10.1007","author":[{"given":"Joe","family":"Stubbs","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Smruti","family":"Padhy","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Richard","family":"Cardone","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Steve","family":"Black","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2024,3,29]]},"reference":[{"key":"23_CR1","unstructured":"CloudSec (December 2023). https:\/\/github.com\/applyfmsec\/cloudsec"},{"key":"23_CR2","unstructured":"CVC5: An efficient open-source automatic theorem prover for satisfiability modulo theories (SMT) problems (December 2023). https:\/\/cvc5.github.io\/"},{"key":"23_CR3","unstructured":"Z3 (December 2023). https:\/\/github.com\/Z3Prover\/z3"},{"key":"23_CR4","unstructured":"AWS IAM (December 2023). https:\/\/docs.aws.amazon.com\/IAM\/latest\/UserGuide \/access.html"},{"key":"23_CR5","unstructured":"AzureRBAC (December 2023). https:\/\/learn.microsoft.com\/en-us\/azure\/role-based-access-control\/overview"},{"key":"23_CR6","doi-asserted-by":"publisher","unstructured":"Backes, J., et al.: Semantic-based automated reasoning for AWS access policies using SMT. In: 2018 Formal Methods in Computer Aided Design (FMCAD), pp.\u00a01\u20139 (2018). https:\/\/doi.org\/10.23919\/FMCAD.2018.8602994","DOI":"10.23919\/FMCAD.2018.8602994"},{"key":"23_CR7","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"415","DOI":"10.1007\/978-3-030-99524-9_24","volume-title":"Tools and Algorithms for the Construction and Analysis of Systems","author":"H Barbosa","year":"2022","unstructured":"Barbosa, H., et al.: cvc5: a versatile and industrial-strength SMT solver. In: TACAS 2022. LNCS, vol. 13243, pp. 415\u2013442. Springer, Cham (2022). https:\/\/doi.org\/10.1007\/978-3-030-99524-9_24"},{"key":"23_CR8","doi-asserted-by":"crossref","unstructured":"Beckett, R., Gupta, A., Mahajan, R., Walker, D.: A general approach to network configuration verification. In: Proceedings of the Conference of the ACM Special Interest Group on Data Communication, pp. 155\u2013168. SIGCOMM 2017 (2017)","DOI":"10.1145\/3098822.3098834"},{"key":"23_CR9","doi-asserted-by":"publisher","unstructured":"Bradley, A.R., Manna, Z.: The Calculus of Computation: Decision Procedures with Applications to Verification. Springer, Heidelberg (2007). https:\/\/doi.org\/10.1007\/978-3-540-74113-8","DOI":"10.1007\/978-3-540-74113-8"},{"key":"23_CR10","unstructured":"Casbin (Dec 2022). https:\/\/casbin.org\/"},{"key":"23_CR11","doi-asserted-by":"crossref","unstructured":"Eiers, W., Sankaran, G., Li, A., O\u2019Mahony, E., Prince, B., Bultan, T.: Quantifying permissiveness of access control policies. In: Proceedings of the 44th International Conference on Software Engineering, pp. 1805\u20131817. ICSE 2022 (2022)","DOI":"10.1145\/3510003.3510233"},{"key":"23_CR12","unstructured":"Fogel, A., et al.: A general approach to network configuration analysis. In: Proceedings of the 12th USENIX Conference on Networked Systems Design and Implementation, p. 469\u2013483. NSDI 2015, USENIX Association, USA (2015)"},{"key":"23_CR13","unstructured":"Gario, M., Micheli, A.: PySMT: a solver-agnostic library for fast prototyping of SMT-based algorithms. In: SMT Workshop 2015 (2015)"},{"key":"23_CR14","unstructured":"Google IAM (December 2023). https:\/\/cloud.google.com\/iam\/"},{"key":"23_CR15","doi-asserted-by":"crossref","unstructured":"Jayaraman, K., et al.: Validating datacenters at scale. In: Proceedings of the ACM Special Interest Group on Data Communication, pp. 200\u2013213. SIGCOMM 2019 (2019)","DOI":"10.1145\/3341302.3342094"},{"key":"23_CR16","unstructured":"Jayaraman, K., Bj\u00f8rner, N., Outhred, G., Kaufman, C.: Automated analysis and debugging of network connectivity policies. Tech. Rep. MSR-TR-2014-102, Microsoft (2014)"},{"key":"23_CR17","unstructured":"KeyCloak (December 2023). https:\/\/www.keycloak.org\/"},{"key":"23_CR18","doi-asserted-by":"publisher","unstructured":"Kroening, D., Strichman, O.: Decision Procedures: An Algorithmic Point of View. In: Juraj, H., Mogens, N. (eds.) Texts in Theoretical Computer Science. An EATCS Series, Springer, Heidelberg (2017). https:\/\/doi.org\/10.1007\/978-3-662-50497-0","DOI":"10.1007\/978-3-662-50497-0"},{"key":"23_CR19","unstructured":"Kubernetes (December 2023). https:\/\/kubernetes.io\/docs\/reference\/access-authn-authz\/rbac\/"},{"key":"23_CR20","doi-asserted-by":"publisher","unstructured":"Liu, A., Du, X., Wang, N., Wang, X., Wu, X., Zhou, J.: Implement security analysis of access control policy based on constraint by SMT. In: 2022 IEEE 5th International Conference on Electronics Technology (ICET), pp. 1043\u20131049 (2022). https:\/\/doi.org\/10.1109\/ICET55676.2022.9824517","DOI":"10.1109\/ICET55676.2022.9824517"},{"key":"23_CR21","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"337","DOI":"10.1007\/978-3-540-78800-3_24","volume-title":"Tools and Algorithms for the Construction and Analysis of Systems","author":"L de Moura","year":"2008","unstructured":"de Moura, L., Bj\u00f8rner, N.: Z3: an efficient SMT solver. In: Ramakrishnan, C.R., Rehof, J. (eds.) TACAS 2008. LNCS, vol. 4963, pp. 337\u2013340. Springer, Heidelberg (2008). https:\/\/doi.org\/10.1007\/978-3-540-78800-3_24"},{"key":"23_CR22","unstructured":"Open Policy Agent (December 2022). https:\/\/www.openpolicyagent.org\/"},{"key":"23_CR23","doi-asserted-by":"publisher","first-page":"3","DOI":"10.1007\/978-3-031-13185-1_1","volume-title":"Computer Aided Verification","author":"N Rungta","year":"2022","unstructured":"Rungta, N.: A billion SMT queries a\u0103day (invited paper). In: Shoham, S., Vizel, Y. (eds.) Computer Aided Verification, pp. 3\u201318. Springer International Publishing, Cham (2022). https:\/\/doi.org\/10.1007\/978-3-031-13185-1_1"},{"key":"23_CR24","series-title":"Advances in Intelligent Systems and Computing","doi-asserted-by":"publisher","first-page":"878","DOI":"10.1007\/978-3-030-73100-7_61","volume-title":"Advances in Information and Communication","author":"J Stubbs","year":"2021","unstructured":"Stubbs, J., et al.: Tapis: an API platform for reproducible, distributed computational research. In: Arai, K. (ed.) FICC 2021. AISC, vol. 1363, pp. 878\u2013900. Springer, Cham (2021). https:\/\/doi.org\/10.1007\/978-3-030-73100-7_61"},{"key":"23_CR25","doi-asserted-by":"crossref","unstructured":"Tang, A., et al.: Campion: debugging router configuration differences. In: Proceedings of the 2021 ACM SIGCOMM 2021 Conference, pp. 748-761. SIGCOMM 2021 (2021)","DOI":"10.1145\/3452296.3472925"},{"key":"23_CR26","unstructured":"Tapis: Tapis permissions (2022) (December 2023). https:\/\/tapis.readthedocs.io\/en\/latest\/technical\/ security.html#id3"}],"container-title":["Lecture Notes in Networks and Systems","Proceedings of the Second International Conference on Advances in Computing Research (ACR\u201924)"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-56950-0_23","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,3,28]],"date-time":"2024-03-28T03:12:51Z","timestamp":1711595571000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-56950-0_23"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024]]},"ISBN":["9783031569494","9783031569500"],"references-count":26,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-56950-0_23","relation":{},"ISSN":["2367-3370","2367-3389"],"issn-type":[{"value":"2367-3370","type":"print"},{"value":"2367-3389","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024]]},"assertion":[{"value":"29 March 2024","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ACR","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Advances in Computing Research","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Madrid","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Spain","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2024","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"3 June 2024","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"5 June 2024","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"acr2023a","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/iicser.org\/ACR24","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}