{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,8]],"date-time":"2026-10-08T11:34:29Z","timestamp":1791459269928,"version":"4.3.4"},"reference-count":38,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"2","license":[{"start":{"date-parts":[[2026,2,1]],"date-time":"2026-02-01T00:00:00Z","timestamp":1769904000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,2,1]],"date-time":"2026-02-01T00:00:00Z","timestamp":1769904000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,2,1]],"date-time":"2026-02-01T00:00:00Z","timestamp":1769904000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62472296"],"award-info":[{"award-number":["62472296"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Sichuan Science and Technology Program","award":["2024ZHCG0197"],"award-info":[{"award-number":["2024ZHCG0197"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IIEEE Trans. Software Eng."],"published-print":{"date-parts":[[2026,2]]},"DOI":"10.1109\/tse.2025.3640123","type":"journal-article","created":{"date-parts":[[2025,12,4]],"date-time":"2025-12-04T18:37:09Z","timestamp":1764873429000},"page":"562-577","source":"Crossref","is-referenced-by-count":1,"title":["\u03b4-SCALPEL: Docker Image Slimming Based on Source Code Static Analysis"],"prefix":"10.1109","volume":"52","author":[{"ORCID":"https:\/\/orcid.org\/0009-0008-9963-3997","authenticated-orcid":false,"given":"Jiaxuan","family":"Han","sequence":"first","affiliation":[{"name":"School of Cyber Science and Engineering, Sichuan University, Chengdu, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5871-946X","authenticated-orcid":false,"given":"Cheng","family":"Huang","sequence":"additional","affiliation":[{"name":"School of Cyber Science and Engineering, Sichuan University, Chengdu, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3021-3771","authenticated-orcid":false,"given":"Jiayong","family":"Liu","sequence":"additional","affiliation":[{"name":"School of Cyber Science and Engineering, Sichuan University, Chengdu, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6595-6650","authenticated-orcid":false,"given":"Tianwei","family":"Zhang","sequence":"additional","affiliation":[{"name":"College of Computing and Data Science, Nanyang Technological University, Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/1272996.1273025"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/PDP.2013.41"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/IC2E.2015.74"},{"issue":"2","key":"ref4","first-page":"2","article-title":"Docker: Lightweight Linux containers for consistent development and deployment","volume":"239","author":"Merkel","year":"2014","journal-title":"Linux J."},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/TCC.2019.2935724"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/MCC.2016.100"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.4203\/ccp.111.17"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58951-6_13"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/CLUSTER.2019.8891000"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/ICSME46990.2020.00043"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/3379597.3387498"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/MSR52588.2021.00057"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/ICPADS63350.2024.00027"},{"key":"ref14","article-title":"Attack surface reduction in contemporary operating systems via practical kernel debloating","author":"Kuo","year":"2022"},{"key":"ref15","doi-asserted-by":"crossref","DOI":"10.6028\/NIST.SP.800-190","article-title":"Application container security guide","author":"Souppaya","year":"2017"},{"key":"ref16","article-title":"Optimize your experience with containers. make your containers better, smaller, more secure and do less to get there (free and open source!)","year":"2024"},{"issue":"4","key":"ref17","first-page":"100","article-title":"Vulnerability detection in source code using statice analysis","volume":"7","author":"Liu","year":"2022","journal-title":"J. Cyber Secur."},{"key":"ref18","doi-asserted-by":"crossref","DOI":"10.14722\/ndss.2021.23106","article-title":"Bringing balance to the force: Dynamic analysis of the android application framework","volume-title":"Proc. Netw. Distrib. Syst. Secur. Symp. (NDSS)","author":"Dawoud","year":"2021"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2019.07.088"},{"key":"ref20","first-page":"443","article-title":"Confine: Automated system call policy generation for container attack surface reduction","volume-title":"Proc. 23rd Int. Symp. Res. in Attacks, Intrusions Defenses (RAID)","author":"Ghavamnia","year":"2020"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/SCAM59687.2023.00029"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2018.03.011"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2911732"},{"key":"ref24","article-title":"Set up automated builds","year":"2024"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-94289-6_8"},{"key":"ref26","doi-asserted-by":"crossref","DOI":"10.6028\/NIST.SP.800-190","article-title":"Application container security guide","author":"Souppaya","year":"2017"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/3274694.3274720"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/3481646.3481661"},{"key":"ref29","article-title":"Over 30% of official images in Docker hub contain high-priority security vulnerabilities","year":"2024"},{"key":"ref30","article-title":"Malicious Docker containers earn crypto-miners $ 90,000","year":"2024"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/3106237.3106271"},{"key":"ref32","article-title":"Dockerfile Overview","year":"2024"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/3274694.3274703"},{"key":"ref34","article-title":"Breaking payloads with runtime code stripping and image freezing","author":"Mulliner","year":"2015"},{"key":"ref35","first-page":"869","article-title":"Debloating software through $\\{${Piece-Wise$\\}$} compilation and loading","volume-title":"Proc. 27th USENIX Secur. Symp. (USENIX Security)","author":"Quach","year":"2018"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/3301417.3312501"},{"key":"ref37","article-title":"Application container security guide","year":"2017"},{"key":"ref38","article-title":"Node.js Docker official images","year":"2024"}],"container-title":["IEEE Transactions on Software Engineering"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/32\/11395383\/11278113.pdf?arnumber=11278113","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,2,13]],"date-time":"2026-02-13T20:49:47Z","timestamp":1771015787000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11278113\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,2]]},"references-count":38,"journal-issue":{"issue":"2"},"URL":"https:\/\/doi.org\/10.1109\/tse.2025.3640123","relation":{},"ISSN":["0098-5589","1939-3520","2326-3881"],"issn-type":[{"value":"0098-5589","type":"print"},{"value":"1939-3520","type":"electronic"},{"value":"2326-3881","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,2]]}}}