{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,11]],"date-time":"2026-03-11T01:46:08Z","timestamp":1773193568044,"version":"3.50.1"},"reference-count":53,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"1","license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Cloud Comput."],"published-print":{"date-parts":[[2026,1]]},"DOI":"10.1109\/tcc.2026.3657486","type":"journal-article","created":{"date-parts":[[2026,1,23]],"date-time":"2026-01-23T20:59:56Z","timestamp":1769201996000},"page":"92-109","source":"Crossref","is-referenced-by-count":1,"title":["Container-Specific Service Mesh-Based System for Mitigating Lateral Movement Attacks"],"prefix":"10.1109","volume":"14","author":[{"ORCID":"https:\/\/orcid.org\/0009-0006-6092-1217","authenticated-orcid":false,"given":"Geonwoo","family":"Yoon","sequence":"first","affiliation":[{"name":"School of Computer Science and Engineering, Pusan National University, Busan, Republic of Korea"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8580-6887","authenticated-orcid":false,"given":"Jinmyeong","family":"Shin","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Engineering, University of California, Merced, CA, USA"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7728-2278","authenticated-orcid":false,"given":"Jae-Seok","family":"Kim","sequence":"additional","affiliation":[{"name":"School of Computer Science and Engineering, Pusan National University, Busan, Republic of Korea"}]},{"ORCID":"https:\/\/orcid.org\/0009-0004-5089-4580","authenticated-orcid":false,"given":"Seunghyuk","family":"Kim","sequence":"additional","affiliation":[{"name":"School of Computer Science and Engineering, Pusan National University, Busan, Republic of Korea"}]},{"ORCID":"https:\/\/orcid.org\/0009-0007-7809-5686","authenticated-orcid":false,"given":"Jaeyoung","family":"Jeong","sequence":"additional","affiliation":[{"name":"School of Computer Science and Engineering, Pusan National University, Busan, Republic of Korea"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3556-5082","authenticated-orcid":false,"given":"Yoon-Ho","family":"Choi","sequence":"additional","affiliation":[{"name":"School of Computer Science and Engineering, Pusan National University, Busan, Republic of Korea"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/MCC.2017.4250939"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2911732"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/TPSISA52974.2021.00016"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1002\/cpe.5668"},{"key":"ref5","article-title":"Lateral movement","year":"2024"},{"key":"ref6","article-title":"Hildegard: New teamtnt cryptojacking malware targeting kubernetes","author":"Chen","year":"2024"},{"key":"ref7","article-title":"Service mesh","year":"2024"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/SOSE.2019.00026"},{"key":"ref9","article-title":"istio","year":"2024"},{"key":"ref10","article-title":"linkerd","year":"2024"},{"key":"ref11","article-title":"The state of kubernetes security report: 2024 edition","year":"2024"},{"key":"ref12","article-title":"kubernetes","year":"2024"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2023.3310281"},{"key":"ref14","first-page":"443","article-title":"Confine: Automated system call policy generation for container attack surface reduction","volume-title":"Proc. 23rd Int. Symp. Res. Attacks, Intrusions Defenses","author":"Ghavamnia","year":"2020"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/HOTI51249.2020.00024"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1007\/s42979-023-02186-1"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.58496\/BJML\/2024\/014"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/SecDev45635.2020.00025"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/SERA65747.2025.11154503"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/3579639"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2020.3047416"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134015"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/ISPA-BDCloud-SocialCom-SustainCom51426.2020.00151"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP43922.2022.9747341"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/3698038.3698533"},{"key":"ref26","article-title":"Aws app mesh","year":"2025"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/3366615.3368356"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.32604\/cmc.2021.019432"},{"key":"ref29","article-title":"Automating security hardening for containers","author":"Davidovi\u0107","year":"2023"},{"key":"ref30","first-page":"3093","article-title":"Hopper: Modeling and detecting lateral movement","volume-title":"Proc. 30th USENIX Secur. Symp. Assoc.","author":"Ho","year":"2021"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/SP54263.2024.00009"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2019.2907754"},{"issue":"6","key":"ref33","first-page":"211","article-title":"Anomaly detection and automated mitigation for microservices security with AI","volume":"7","author":"Ramamoorthi","year":"2024","journal-title":"Appl. Res. Artif. Intell. Cloud Comput."},{"key":"ref35","article-title":"Using the linux kernel tracepoints","author":"Desnoyers","year":"2024"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/3588771"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833669"},{"key":"ref38","first-page":"257","article-title":"Detecting lateral movement in enterprise computer networks with unsupervised graph AI","volume-title":"Proc. 23rd Int. Symp. Res. Attacks, Intrusions Defenses","author":"Bowman","year":"2020"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/ETFA54631.2023.10275683"},{"key":"ref40","article-title":"CVE-2024-46257","year":"2024"},{"key":"ref41","article-title":"CVE-2024-49368","year":"2024"},{"key":"ref42","article-title":"CVE-2019-11043","year":"2019"},{"key":"ref44","article-title":"BPF ring buffer","year":"2024"},{"key":"ref45","article-title":"Share process namespace between containers in a pod","year":"2025"},{"key":"ref46","article-title":"Security risks for sidecar containers in kubernetes","author":"Halinen","year":"2024"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/TC.2013.13"},{"key":"ref48","first-page":"135","article-title":"A modern and sophisticated host based intrusion detection data set","volume":"11","author":"Grimmer","year":"2019","journal-title":"IT Sicherheit als Voraussetzung f\u00fcr eine erfolgreiche Digitalisierung"},{"key":"ref49","article-title":"Security risks for sidecar containers in kubernetes","author":"Halinen","year":"2023"},{"key":"ref50","article-title":"MITRE ATT&CK","year":"2024"},{"key":"ref51","article-title":"SAVE","year":"2025"},{"key":"ref52","article-title":"What is CI\/CD","author":"Hat","year":"2024"},{"key":"ref53","article-title":"ADFA IDS datasets","year":"2024"},{"key":"ref54","article-title":"Postgresql","year":"2024"},{"key":"ref55","doi-asserted-by":"crossref","DOI":"10.1109\/TCC.2026.3657486","article-title":"Container-specific service mesh-based system for mitigating lateral movement attacks","author":"Yoon","year":"2026"}],"container-title":["IEEE Transactions on Cloud Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/6245519\/11427054\/11362971.pdf?arnumber=11362971","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,3,10]],"date-time":"2026-03-10T05:21:53Z","timestamp":1773120113000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11362971\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,1]]},"references-count":53,"journal-issue":{"issue":"1"},"URL":"https:\/\/doi.org\/10.1109\/tcc.2026.3657486","relation":{},"ISSN":["2168-7161","2372-0018"],"issn-type":[{"value":"2168-7161","type":"electronic"},{"value":"2372-0018","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,1]]}}}