{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,11,25]],"date-time":"2025-11-25T06:51:52Z","timestamp":1764053512417,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":47,"publisher":"ACM","license":[{"start":{"date-parts":[[2017,11,3]],"date-time":"2017-11-03T00:00:00Z","timestamp":1509667200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2017,11,3]]},"DOI":"10.1145\/3141235.3141241","type":"proceedings-article","created":{"date-parts":[[2017,10,31]],"date-time":"2017-10-31T12:31:37Z","timestamp":1509453097000},"page":"51-56","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":17,"title":["New Directions for Container Debloating"],"prefix":"10.1145","author":[{"given":"Vaibhav","family":"Rastogi","sequence":"first","affiliation":[{"name":"University of Wisconsin-Madison, Madison, WI, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Chaitra","family":"Niddodi","sequence":"additional","affiliation":[{"name":"University of Illinois at Urbana-Champaign, Urbana-Champaign, IL, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sibin","family":"Mohan","sequence":"additional","affiliation":[{"name":"University of Illinois at Urbana-Champaign, Urbana-Champaign, IL, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Somesh","family":"Jha","sequence":"additional","affiliation":[{"name":"University of Wisconsin-Madison, Madison, WI, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2017,11,3]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Web Article","author":"Abrams V.","year":"2017","unstructured":"Abrams , V. The microcontainer manifesto and the right tool for the job . Web Article , June 2017 . https:\/\/blogs.oracle.com\/developers\/the-microcontainer-manifesto. Abrams, V. The microcontainer manifesto and the right tool for the job. Web Article, June 2017. https:\/\/blogs.oracle.com\/developers\/the-microcontainer-manifesto."},{"key":"e_1_3_2_1_2_1","volume-title":"A survey of symbolic execution techniques. arXiv preprint arXiv:1610.00502","author":"Baldoni R.","year":"2016","unstructured":"Baldoni , R. , Coppa , E. , D'Elia , D. C. , Demetrescu , C. , and Finocchi , I . A survey of symbolic execution techniques. arXiv preprint arXiv:1610.00502 ( 2016 ). Baldoni, R., Coppa, E., D'Elia, D. C., Demetrescu, C., and Finocchi, I. A survey of symbolic execution techniques. arXiv preprint arXiv:1610.00502 (2016)."},{"key":"e_1_3_2_1_3_1","volume-title":"January","author":"Ball T.","year":"2015","unstructured":"Ball , T. , and Daniel , J . Deconstructing dynamic symbolic execution. Tech. rep ., January 2015 . Ball, T., and Daniel, J. Deconstructing dynamic symbolic execution. Tech. rep., January 2015."},{"key":"e_1_3_2_1_4_1","unstructured":"BIGOT J.-T. L. April 2015. http:\/\/blog.yadutaf.fr\/2015\/04\/25\/how-i-shrunk-a-docker-image-by-98-8-featuring-fanotify\/.  BIGOT J.-T. L. April 2015. http:\/\/blog.yadutaf.fr\/2015\/04\/25\/how-i-shrunk-a-docker-image-by-98-8-featuring-fanotify\/."},{"key":"e_1_3_2_1_5_1","first-page":"463","author":"Brumley D.","year":"2011","unstructured":"Brumley , D. , Jager , I. , Avgerinos , T. , and Schwartz , E. J. BAP: A Binary Analysis Platform. Springer Berlin Heidelberg , 2011 , pp. 463 -- 469 . Brumley, D., Jager, I., Avgerinos, T., and Schwartz, E. J. BAP: A Binary Analysis Platform. Springer Berlin Heidelberg, 2011, pp. 463--469.","journal-title":"J. BAP: A Binary Analysis Platform. Springer Berlin Heidelberg"},{"key":"e_1_3_2_1_6_1","first-page":"57","volume-title":"USENIX Security Symposium","author":"Brumley D.","year":"2004","unstructured":"Brumley , D. , and Song , D . Privtrans: Automatically partitioning programs for privilege separation . In USENIX Security Symposium ( 2004 ), pp. 57 -- 72 . Brumley, D., and Song, D. Privtrans: Automatically partitioning programs for privilege separation. In USENIX Security Symposium (2004), pp. 57--72."},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1145\/1966445.1966463"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1109\/ASE.2008.69"},{"key":"e_1_3_2_1_9_1","first-page":"209","volume-title":"Proceedings of the 8th USENIX Conference on Operating Systems Design and Implementation","author":"Cadar C.","year":"2008","unstructured":"Cadar , C. , Dunbar , D. , and Engler , D . Klee: Unassisted and automatic generation of high-coverage tests for complex systems programs . In Proceedings of the 8th USENIX Conference on Operating Systems Design and Implementation ( 2008 ), USENIX Association , pp. 209 -- 224 . Cadar, C., Dunbar, D., and Engler, D. Klee: Unassisted and automatic generation of high-coverage tests for complex systems programs. In Proceedings of the 8th USENIX Conference on Operating Systems Design and Implementation (2008), USENIX Association, pp. 209--224."},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.31"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/1866307.1866373"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.14778\/2350229.2350262"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/2110356.2110358"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/1461928.1461949"},{"key":"e_1_3_2_1_15_1","volume-title":"Web Article","author":"Churchville F.","year":"2017","unstructured":"Churchville , F. Popularity of application containers begins to shadow devops, paas . Web Article , January 2017 . http:\/\/searchmicroservices.techtarget.com\/news\/450410820\/Popularity-of-application-containers-begins-to-shadow-DevOps-PaaS. Churchville, F. Popularity of application containers begins to shadow devops, paas. Web Article, January 2017. http:\/\/searchmicroservices.techtarget.com\/news\/450410820\/Popularity-of-application-containers-begins-to-shadow-DevOps-PaaS."},{"key":"e_1_3_2_1_16_1","volume-title":"Optimizing docker images","author":"deHamer B.","year":"2014","unstructured":"deHamer , B. Optimizing docker images . CenturyLink Developer Center Blog , July 2014 . https:\/\/www.ctl.io\/developers\/blog\/post\/optimizing-docker-images\/. deHamer, B. Optimizing docker images. CenturyLink Developer Center Blog, July 2014. https:\/\/www.ctl.io\/developers\/blog\/post\/optimizing-docker-images\/."},{"key":"e_1_3_2_1_17_1","unstructured":"Docker. Website. https:\/\/www.docker.com\/.  Docker. Website. https:\/\/www.docker.com\/."},{"key":"e_1_3_2_1_18_1","unstructured":"Docker security. Docker documentation. https:\/\/docs.docker.com\/engine\/security\/security\/.  Docker security. Docker documentation. https:\/\/docs.docker.com\/engine\/security\/security\/."},{"key":"e_1_3_2_1_19_1","volume-title":"Blog","author":"Dowideit S.","year":"2015","unstructured":"Dowideit , S. Slim application containers (using docker) . Blog , April 2015 . http:\/\/fosiki.com\/blog\/2015\/04\/28\/slim-application-containers-using-docker\/. Dowideit, S. Slim application containers (using docker). Blog, April 2015. http:\/\/fosiki.com\/blog\/2015\/04\/28\/slim-application-containers-using-docker\/."},{"key":"e_1_3_2_1_20_1","volume-title":"LIPIcs-Leibniz International Proceedings in Informatics","volume":"18","author":"Godefroid P.","year":"2012","unstructured":"Godefroid , P. Test generation using symbolic execution . In LIPIcs-Leibniz International Proceedings in Informatics ( 2012 ), vol. 18 , Schloss Dagstuhl-LeibnizZentrum fuer Informatik. Godefroid, P. Test generation using symbolic execution. In LIPIcs-Leibniz International Proceedings in Informatics (2012), vol. 18, Schloss Dagstuhl-LeibnizZentrum fuer Informatik."},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/1065010.1065036"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/2090147.2094081"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-11164-3_21"},{"key":"e_1_3_2_1_24_1","unstructured":"on: Docker official images are moving to alpine linux. https:\/\/news.ycombinator.com\/item?id=11046768.  on: Docker official images are moving to alpine linux. https:\/\/news.ycombinator.com\/item?id=11046768."},{"key":"e_1_3_2_1_25_1","unstructured":"Jeon J. Micinski K. K. and Foster J. S. Symdroid: Symbolic execution for dalvik bytecode.  Jeon J. Micinski K. K. and Foster J. S. Symdroid: Symbolic execution for dalvik bytecode."},{"key":"e_1_3_2_1_26_1","volume-title":"HotOS","author":"Krohn M. N.","year":"2005","unstructured":"Krohn , M. N. , Efstathopoulos , P. , Frey , C. , Kaashoek , M. F. , Kohler , E. , Mazieres , D. , Morris , R. , Osborne , M. , VanDeBogart , S. , and Ziegler , D . Make least privilege a right (not a privilege) . In HotOS ( 2005 ). Krohn, M. N., Efstathopoulos, P., Frey, C., Kaashoek, M. F., Kohler, E., Mazieres, D., Morris, R., Osborne, M., VanDeBogart, S., and Ziegler, D. Make least privilege a right (not a privilege). In HotOS (2005)."},{"key":"e_1_3_2_1_27_1","unstructured":"Kumar A. May 2015. https:\/\/medium.com\/@aneeshep\/working-with-dockers-64c8bc4b5f92#.f3i10qkyt.  Kumar A. May 2015. https:\/\/medium.com\/@aneeshep\/working-with-dockers-64c8bc4b5f92#.f3i10qkyt."},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/2635868.2635913"},{"key":"e_1_3_2_1_29_1","first-page":"442","volume-title":"JDart: A Dynamic Symbolic Analysis Framework","author":"Luckow K.","year":"2016","unstructured":"Luckow , K. , Dimja\u0161evi\u0107 , M. , Giannakopoulou , D. , Howar , F. , Isberner , M. , Kahsai , T. , Rakamari\u0107 , Z. , and Raman , V . JDart: A Dynamic Symbolic Analysis Framework . Springer Berlin Heidelberg , 2016 , pp. 442 -- 459 . Luckow, K., Dimja\u0161evi\u0107, M., Giannakopoulou, D., Howar, F., Isberner, M., Kahsai, T., Rakamari\u0107, Z., and Raman, V. JDart: A Dynamic Symbolic Analysis Framework. Springer Berlin Heidelberg, 2016, pp. 442--459."},{"key":"e_1_3_2_1_30_1","unstructured":"Linux containers. Website. https:\/\/linuxcontainers.org\/.  Linux containers. Website. https:\/\/linuxcontainers.org\/."},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/1858996.1859035"},{"key":"e_1_3_2_1_32_1","unstructured":"Quest K. C. https:\/\/github.com\/cloudimmunity\/docker-slim.  Quest K. C. https:\/\/github.com\/cloudimmunity\/docker-slim."},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/3106237.3106271"},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/1806799.1806864"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1109\/PROC.1975.9939"},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.21236\/ADA484701"},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1145\/2491411.2491447"},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/1081706.1081750"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1145\/2591062.2594450"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/2807591.2807635"},{"key":"e_1_3_2_1_41_1","volume-title":"A vocabulary of program slicing-based techniques. ACM computing surveys (CSUR) 44, 3","author":"Silva J.","year":"2012","unstructured":"Silva , J. A vocabulary of program slicing-based techniques. ACM computing surveys (CSUR) 44, 3 ( 2012 ), 12. Silva, J. A vocabulary of program slicing-based techniques. ACM computing surveys (CSUR) 44, 3 (2012), 12."},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-89862-7_1"},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-79124-9_10"},{"key":"e_1_3_2_1_44_1","volume-title":"A survey of program slicing techniques. Centrum voor Wiskunde en Informatica","author":"Tip F.","year":"1994","unstructured":"Tip , F. A survey of program slicing techniques. Centrum voor Wiskunde en Informatica , 1994 . Tip, F. A survey of program slicing techniques. Centrum voor Wiskunde en Informatica, 1994."},{"key":"e_1_3_2_1_46_1","volume-title":"June","author":"van Holsteijn M.","year":"2015","unstructured":"van Holsteijn , M. How to create the smallest possible docker container of any image. Xebia blog , June 2015 . http:\/\/blog.xebia.com\/how-to-create-the-smallest-possible-docker-container-of-any-image\/. van Holsteijn, M. How to create the smallest possible docker container of any image. Xebia blog, June 2015. http:\/\/blog.xebia.com\/how-to-create-the-smallest-possible-docker-container-of-any-image\/."},{"key":"e_1_3_2_1_47_1","volume-title":"Web Article","author":"Vaughan-Nichols S. J.","year":"2017","unstructured":"Vaughan-Nichols , S. J. What is docker and why is it so darn popular ? Web Article , May 2017 . http:\/\/www.zdnet.com\/article\/what-is-docker-and-why-is-it-so-darn-popular\/. Vaughan-Nichols, S. J. What is docker and why is it so darn popular? Web Article, May 2017. http:\/\/www.zdnet.com\/article\/what-is-docker-and-why-is-it-so-darn-popular\/."},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1145\/1050849.1050865"}],"event":{"name":"CCS '17: 2017 ACM SIGSAC Conference on Computer and Communications Security","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"],"location":"Dallas Texas USA","acronym":"CCS '17"},"container-title":["Proceedings of the 2017 Workshop on Forming an Ecosystem Around Software Transformation"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3141235.3141241","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3141235.3141241","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T03:37:13Z","timestamp":1750217833000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3141235.3141241"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017,11,3]]},"references-count":47,"alternative-id":["10.1145\/3141235.3141241","10.1145\/3141235"],"URL":"https:\/\/doi.org\/10.1145\/3141235.3141241","relation":{},"subject":[],"published":{"date-parts":[[2017,11,3]]},"assertion":[{"value":"2017-11-03","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}