{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,27]],"date-time":"2026-09-27T04:52:41Z","timestamp":1790484761505,"version":"4.1.0"},"reference-count":37,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2015,9]]},"DOI":"10.1109\/cns.2015.7346869","type":"proceedings-article","created":{"date-parts":[[2015,12,8]],"date-time":"2015-12-08T22:19:48Z","timestamp":1449613188000},"page":"559-567","source":"Crossref","is-referenced-by-count":53,"title":["Securing the infrastructure and the workloads of linux containers"],"prefix":"10.1109","author":[{"given":"Massimiliano","family":"Mattetti","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Alexandra","family":"Shulman-Peleg","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yair","family":"Allouche","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Antonio","family":"Corradi","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Shlomi","family":"Dolev","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Luca","family":"Foschini","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref33","doi-asserted-by":"crossref","first-page":"54","DOI":"10.1007\/3-540-36084-0_4","article-title":"Undermining an anomaly-based intrusion detection system using common exploits","author":"tan","year":"2002","journal-title":"Recent Advances in Intrusion Detection"},{"key":"ref32","author":"systems","year":"2015","journal-title":"IBM x-force threat intelligence quarterly lq 2015"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4302-3970-3_6"},{"key":"ref30","article-title":"Improving host security with system call policies","volume":"3","author":"provos","year":"2003","journal-title":"Usenix Security"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/FITS.2003.1264934"},{"key":"ref36","article-title":"An introduction to arp spoofing","author":"whalen","year":"2001","journal-title":"Node99 [Online Document]"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/586110.586145"},{"key":"ref34","author":"turnbull","year":"2014","journal-title":"The Docker Book Containerization is the new virtualization"},{"key":"ref10","year":"0","journal-title":"Tomoyo"},{"key":"ref11","year":"2014","journal-title":"Cloud foundry foundation"},{"key":"ref12","year":"2014","journal-title":"Docker Vulnerability statistics"},{"key":"ref13","year":"2014","journal-title":"Docker image insecurity"},{"key":"ref14","year":"2014","journal-title":"Linux kernel Vulnerability statistics"},{"key":"ref15","year":"2014","journal-title":"Shocker-docker breakout poc"},{"key":"ref16","year":"2015","journal-title":"AppArmor"},{"key":"ref17","year":"2015","journal-title":"Application security on cloud"},{"key":"ref18","year":"2015","journal-title":"Docker inc"},{"key":"ref19","author":"buecker","year":"2011","journal-title":"IBM Security Solutions Architecture for Network Server and Endpoint"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/1972551.1972557"},{"key":"ref4","year":"0","journal-title":"For containers security is problem #1"},{"key":"ref27","author":"kovalev","year":"2014","journal-title":"Effusion-a new sophisticated injector for nginx web servers"},{"key":"ref3","year":"0","journal-title":"Docker hub official repositories"},{"key":"ref6","year":"0","journal-title":"Integrity Measurement Architecture (IMA)"},{"key":"ref29","article-title":"Docker: lightweight linux containers for consistent development and deployment","volume":"239","author":"merkel","year":"2014","journal-title":"Linux Journal"},{"key":"ref5","year":"0","journal-title":"Grsecurity"},{"key":"ref8","year":"0","journal-title":"Selinux"},{"key":"ref7","year":"0","journal-title":"OSSEC"},{"key":"ref2","year":"0","journal-title":"Containers and docker How secure are they?"},{"key":"ref9","year":"0","journal-title":"Smack"},{"key":"ref1","year":"0","journal-title":"Cloud security Virtualization containers and related issues"},{"key":"ref20","article-title":"Analysis of docker security","author":"bui","year":"2015","journal-title":"arXiv preprint arXiv 1501 02967"},{"key":"ref22","year":"2013","journal-title":"Cloud Computing Vulnerability Incidents A Statistical Overview"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/762476.762477"},{"key":"ref24","article-title":"An updated performance comparison of virtual machines and linux containers","volume":"28","author":"felter","year":"2014","journal-title":"Technology"},{"key":"ref23","first-page":"261","article-title":"Problem solving with systemtap","author":"eigler","year":"2006","journal-title":"Proc of the Ottawa Linux Symposium"},{"key":"ref26","article-title":"Russian underground 101","author":"goncharov","year":"2012","journal-title":"Trend Micro Incorporated Research Paper"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2008.54"}],"event":{"name":"2015 IEEE Conference on Communications and Network Security (CNS)","location":"Florence, Italy","start":{"date-parts":[[2015,9,28]]},"end":{"date-parts":[[2015,9,30]]}},"container-title":["2015 IEEE Conference on Communications and Network Security (CNS)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/7336674\/7346791\/07346869.pdf?arnumber=7346869","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2017,6,24]],"date-time":"2017-06-24T01:10:46Z","timestamp":1498266646000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/7346869\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2015,9]]},"references-count":37,"URL":"https:\/\/doi.org\/10.1109\/cns.2015.7346869","relation":{},"subject":[],"published":{"date-parts":[[2015,9]]}}}