{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,12]],"date-time":"2026-02-12T08:10:16Z","timestamp":1770883816914,"version":"3.50.1"},"reference-count":42,"publisher":"IEEE","license":[{"start":{"date-parts":[[2023,5,17]],"date-time":"2023-05-17T00:00:00Z","timestamp":1684281600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2023,5,17]],"date-time":"2023-05-17T00:00:00Z","timestamp":1684281600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2023,5,17]]},"DOI":"10.1109\/svcc56964.2023.10165511","type":"proceedings-article","created":{"date-parts":[[2023,6,30]],"date-time":"2023-06-30T13:20:30Z","timestamp":1688131230000},"page":"1-8","source":"Crossref","is-referenced-by-count":2,"title":["HoneyContainer: Container-based Webshell Command Injection Defending and Backtracking"],"prefix":"10.1109","author":[{"given":"Kuan-Chien","family":"Wang","sequence":"first","affiliation":[{"name":"National Central University,Computer Science and Information Engineering,Taoyuan,Taiwan"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Wei-Jun","family":"Cheng","sequence":"additional","affiliation":[{"name":"National Central University,Computer Science and Information Engineering,Taoyuan,Taiwan"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jie","family":"Zhang","sequence":"additional","affiliation":[{"name":"National Central University,Computer Science and Information Engineering,Taoyuan,Taiwan"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Min-Te","family":"Sun","sequence":"additional","affiliation":[{"name":"National Central University,Computer Science and Information Engineering,Taoyuan,Taiwan"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Kazuya","family":"Sakai","sequence":"additional","affiliation":[{"name":"Tokyo Metropolitan University, Hino,Electrical Engineering and Computer Science,Tokyo,Japan"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Wei-Shinn","family":"Ku","sequence":"additional","affiliation":[{"name":"Auburn University,Computer Science and Software Engineering,Auburn,AL,USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref13","article-title":"ptrace(2) — Linux manual page","year":"2022"},{"key":"ref35","first-page":"273","article-title":"Performance evaluation of container runtimes","author":"espe","year":"2020","journal-title":"CLOSER"},{"key":"ref12","article-title":"gVisor","year":"2022"},{"key":"ref34","article-title":"Introduction to linux containers","year":"2022"},{"key":"ref15","article-title":"Python Flask Framework","year":"2022"},{"key":"ref37","article-title":"cri-o: LIGHTWEIGHT CONTAINER RUNTIME FOR KUBERNETES","year":"2022"},{"key":"ref14","article-title":"Falcosecurity\/Falco: Cloud Native Runtime Security","year":"2022"},{"key":"ref36","article-title":"containerd","year":"2022"},{"key":"ref31","first-page":"81","article-title":"{BASTION}: A security enforcement network stack for container networks","author":"nam","year":"2020","journal-title":"2020 USENIX Annual Technical Conference (USENIX ATC)"},{"key":"ref30","article-title":"Analysis of docker security","author":"bui","year":"2015","journal-title":"arXiv preprint arXiv 1501 02967"},{"key":"ref11","article-title":"runc","year":"2022"},{"key":"ref33","first-page":"101","article-title":"Blending containers and virtual machines: a study of firecracker and gvisor","author":"caraza-harter","year":"2020","journal-title":"Proceedings of ACM SIGPLAN\/SIGOPS International Conference on Virtual Execution Environments"},{"key":"ref10","article-title":"Google Cloud Platform","year":"2022"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/CLOUD.2018.00030"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/3171592.3171593"},{"key":"ref1","article-title":"Detect and prevent web shell malware","year":"2020"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/TSMCA.2007.904779"},{"key":"ref39","first-page":"10","article-title":"Qemu, a fast and portable dynamic translator","volume":"41","author":"bellard","year":"2005","journal-title":"USENIX Annual Technical Conference"},{"key":"ref16","article-title":"tsenart\/vegeta: HTTP load testing tool and library","year":"2022"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.5220\/0010440502150223"},{"key":"ref19","first-page":"443","article-title":"Confine: Automated system call policy generation for container attack surface reduction","author":"ghavamnia","year":"2020","journal-title":"RAID 2020"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/3132747.3132763"},{"key":"ref24","author":"burns","year":"2019","journal-title":"Kubernetes Up and Running Dive Into the Future of Infrastructure"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/IOTSMS48152.2019.8939164"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-10-5026-8_1"},{"key":"ref25","first-page":"419","article-title":"Firecracker: Lightweight virtualization for serverless applications","volume":"20","author":"agache","year":"2020","journal-title":"NSDI"},{"key":"ref20","article-title":"Docker","year":"0"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1017\/S1351324916000334"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/CNS53000.2021.9705039"},{"key":"ref22","article-title":"Linux Control Groups","year":"2022"},{"key":"ref21","first-page":"1073","article-title":"Houdini’s escape: Breaking the resource rein of linux control groups","author":"gao","year":"2019","journal-title":"ACM CCS"},{"key":"ref28","article-title":"AWS Fargate","year":"2022"},{"key":"ref27","article-title":"AWS Lambda","year":"2022"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/SCC.2016.123"},{"key":"ref8","article-title":"Amazon Web Services","year":"2022"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2882517"},{"key":"ref9","article-title":"Microsoft Azure","year":"2022"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.3390\/fi12010012"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/DSC.2018.00030"},{"key":"ref6","first-page":"336","article-title":"A webshell detection technology based on http traffic analysis","author":"yang","year":"2018","journal-title":"International Conference on Innovative Mobile and Internet Services in Ubiquitous Computing"},{"key":"ref5","first-page":"1","article-title":"Webshell detection techniques in web applications","author":"tu","year":"2014","journal-title":"Fifth International Conference on Computing Communications and Networking Technologies (ICCCNT)"},{"key":"ref40","first-page":"199","article-title":"Cntr: Lightweight {OS} containers","author":"thalheim","year":"2018","journal-title":"2018 USENIX Annual Technical Conference (USENIX ATC 18)"}],"event":{"name":"2023 Silicon Valley Cybersecurity Conference (SVCC)","location":"San Jose, CA, USA","start":{"date-parts":[[2023,5,17]]},"end":{"date-parts":[[2023,5,19]]}},"container-title":["2023 Silicon Valley Cybersecurity Conference (SVCC)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/10164830\/10164852\/10165511.pdf?arnumber=10165511","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,7,17]],"date-time":"2023-07-17T13:34:25Z","timestamp":1689600865000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10165511\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,5,17]]},"references-count":42,"URL":"https:\/\/doi.org\/10.1109\/svcc56964.2023.10165511","relation":{},"subject":[],"published":{"date-parts":[[2023,5,17]]}}}