{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,28]],"date-time":"2026-03-28T17:11:00Z","timestamp":1774717860424,"version":"3.50.1"},"reference-count":28,"publisher":"IEEE","license":[{"start":{"date-parts":[[2025,9,8]],"date-time":"2025-09-08T00:00:00Z","timestamp":1757289600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,9,8]],"date-time":"2025-09-08T00:00:00Z","timestamp":1757289600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025,9,8]]},"DOI":"10.1109\/scam67354.2025.00018","type":"proceedings-article","created":{"date-parts":[[2025,10,10]],"date-time":"2025-10-10T17:35:14Z","timestamp":1760117714000},"page":"110-115","source":"Crossref","is-referenced-by-count":2,"title":["FaaSGuard: Secure CI\/CD for Serverless Applications \u2013 An OpenFaaS Case Study"],"prefix":"10.1109","author":[{"given":"Amine","family":"Barrak","sequence":"first","affiliation":[{"name":"Oakland University,Department of Computer Science and Engineering,Rochester,MI,USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Emna","family":"Ksontini","sequence":"additional","affiliation":[{"name":"University of North Carolina Wilmington,Wilmington,NC,USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ridouane","family":"Atike","sequence":"additional","affiliation":[{"name":"University of Quebec at Chicoutimi,Chicoutimi,Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Fehmi","family":"Jaafar","sequence":"additional","affiliation":[{"name":"University of Quebec at Chicoutimi,Chicoutimi,Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1186\/s13677-021-00253-7"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/3579643"},{"key":"ref3","article-title":"Function-as-a-service (faas) platforms: Architectural challenges and emerging directions","volume-title":"International Conference on Utility and Cloud Computing (UCC)","author":"Sharma"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/3133850.3133855"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2022.111589"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1186\/s13677-022-00347-w"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2024.104261"},{"key":"ref8","article-title":"Serverless computing: Security challenges and opportunities","volume-title":"IEEE International Conference on Cloud Engineering (IC2E)","author":"Shen"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/3579639"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1186\/s13677-024-00703-y"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/3366423.3380173"},{"key":"ref12","first-page":"35","article-title":"Exploring the unchartered space of container registry typosquatting","volume-title":"31st USENIX Security Symposium (USENIX Security 22)","author":"Liu"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2023.103140"},{"key":"ref14","volume-title":"Architecting AWS with Terraform: Design resilient and secure Cloud Infrastructures with Terraform on Amazon Web Services","author":"Kavas","year":"2023"},{"key":"ref15","article-title":"Reverse engineering with terraform","author":"Bhatia"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1016\/j.jisa.2021.102843"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3485372"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/CSCloud62866.2024.00027"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2022.23149"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/3442381.3450100"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/3468264.3468575"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-76610-7_9"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1007\/s00450-019-00413-w"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/3468264.3468558"},{"key":"ref25","article-title":"Evaluating the security implications of serverless computing environments: A focus on vulnerabilities and countermeasures","author":"Chowdhury"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2024.3514751"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.3390\/a15070234"},{"key":"ref28","article-title":"Quantitative analysis of cloud function evolution in the aws serverless application repository","author":"Spillner","year":"2019"}],"event":{"name":"2025 IEEE International Conference on Source Code Analysis & Manipulation (SCAM)","location":"Auckland, New Zealand","start":{"date-parts":[[2025,9,8]]},"end":{"date-parts":[[2025,9,9]]}},"container-title":["2025 IEEE International Conference on Source Code Analysis & Manipulation (SCAM)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11190090\/11189990\/11190185.pdf?arnumber=11190185","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T06:09:50Z","timestamp":1760162990000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11190185\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,9,8]]},"references-count":28,"URL":"https:\/\/doi.org\/10.1109\/scam67354.2025.00018","relation":{},"subject":[],"published":{"date-parts":[[2025,9,8]]}}}