{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,12]],"date-time":"2026-06-12T06:13:48Z","timestamp":1781244828083,"version":"3.54.1"},"publisher-location":"New York, NY, USA","reference-count":25,"publisher":"ACM","license":[{"start":{"date-parts":[[2017,12,5]],"date-time":"2017-12-05T00:00:00Z","timestamp":1512432000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2017,12,5]]},"DOI":"10.1145\/3147213.3147229","type":"proceedings-article","created":{"date-parts":[[2017,12,1]],"date-time":"2017-12-01T15:03:47Z","timestamp":1512140627000},"page":"171-180","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":45,"title":["Integrating Continuous Security Assessments in Microservices and Cloud Native Applications"],"prefix":"10.1145","author":[{"given":"Kennedy A.","family":"Torkura","sequence":"first","affiliation":[{"name":"Hasso Plattner Institute, University of Potsdam, Potsdam, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Muhammad I.H.","family":"Sukmana","sequence":"additional","affiliation":[{"name":"Hasso Plattner Institute, University of Potsdam, Potsdam, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Christoph","family":"Meinel","sequence":"additional","affiliation":[{"name":"Hasso Plattner Institute, University of Potsdam, Potsdam, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2017,12,5]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"Cloud Security Alliance. 2011. Domain 4: Complaince and Audit Management. (2011). https:\/\/cloudsecurityalliance.org\/wp-content\/uploads\/2011\/09\/Domain-4.doc"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10515-013-0133-z"},{"key":"e_1_3_2_1_3_1","volume-title":"An analysis of the cloud computing security problem. arXiv preprint arXiv:1609.01107","author":"Almorsy Mohamed","year":"2016","unstructured":"Mohamed Almorsy, John Grundy, and Ingo M\u00fcller. 2016. An analysis of the cloud computing security problem. arXiv preprint arXiv:1609.01107 (2016)."},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10207-016-0334-0"},{"key":"e_1_3_2_1_5_1","volume-title":"et almbox","author":"Della-Libera Giovanni","year":"2002","unstructured":"Giovanni Della-Libera, Martin Gudgin, Phillip Hallam-Baker, Maryann Hondo, Hans Granqvist, Chris Kaler, Hiroshi Maruyama, Michael McIntosh, Anthony Nadalin, Nataraj Nagaratnam, et almbox. 2002. Web services security policy language (WS-SecurityPolicy). Public Draft Specification (Juli 2005) (2002)."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/MCC.2016.105"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.5555\/2631411"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2010.115"},{"key":"e_1_3_2_1_9_1","unstructured":"Jayanth Gummaraju Tarun Desikan and Yoshio Turner. 2015. Over 30% of official images in docker hub contain high priority security vulnerabilities. Technical Report. Technical report BanyanOps."},{"key":"e_1_3_2_1_10_1","unstructured":"A. Homer J. Sharp L. Brader M. Narumoto and T. Swanson. 2014. Cloud Design Patterns. Microsoft Press."},{"key":"e_1_3_2_1_11_1","unstructured":"SANS Institute. 2016. Reducing Attack Surface: SANS Second Survey on Continuous Monitoring Programs. (2016). https:\/\/www.sans.org\/reading-room\/whitepapers\/analyst\/reducing-attack-surface-sans%E2%80%99-second-survey-continuous-monitoring-programs-37417"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1109\/WIIAT.2008.379"},{"key":"e_1_3_2_1_13_1","volume-title":"ClouNS-a Cloud-Native Application Reference Model for Enterprise Architects Enterprise Distributed Object Computing Workshop (EDOCW)","author":"Kratzke Nane","year":"2016","unstructured":"Nane Kratzke and Ren\u00e9 Peinl. 2016. ClouNS-a Cloud-Native Application Reference Model for Enterprise Architects Enterprise Distributed Object Computing Workshop (EDOCW), 2016 IEEE 20th International. IEEE, 1--10."},{"key":"e_1_3_2_1_14_1","volume-title":"Native Cloud Applications: Why Monolithic Virtualization Is Not Their Foundation International Conference on Cloud Computing and Services Science. Springer, 16--40","author":"Leymann Frank","year":"2016","unstructured":"Frank Leymann, Uwe Breitenb\u00fccher, Sebastian Wagner, and Johannes Wettinger. 2016. Native Cloud Applications: Why Monolithic Virtualization Is Not Their Foundation International Conference on Cloud Computing and Services Science. Springer, 16--40."},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-00199-4_8"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1109\/2.708449"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-04474-8_18"},{"key":"e_1_3_2_1_18_1","volume-title":"Electronics and Microelectronics (MIPRO), 2015 38th International Convention on. IEEE, 235--240","author":"Savchenko Dmitry I","year":"2015","unstructured":"Dmitry I Savchenko, Gleb I Radchenko, and Ossi Taipale. 2015. Microservices validation: Mjolnirr platform case study Information and Communication Technology, Electronics and Microelectronics (MIPRO), 2015 38th International Convention on. IEEE, 235--240."},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/511446.511498"},{"key":"e_1_3_2_1_20_1","volume-title":"Migrating to Cloud-Native Application Architectures","author":"Stine Matt","unstructured":"Matt Stine. 2015. Migrating to Cloud-Native Application Architectures. O'Reilly Media, Inc.1005 Gravenstein Highway North, Sebastopol, CA 95472."},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2010.07.006"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1109\/CloudCom.2015.93"},{"key":"e_1_3_2_1_23_1","volume-title":"Telecommunications Network Strategy and Planning Symposium (Networks)","author":"Thanh Tran Quang","year":"2016","unstructured":"Tran Quang Thanh, Stefan Covaci, Thomas Magedanz, Panagiotis Gouvas, and Anastasios Zafeiropoulos. 2016. Embedding security and privacy into the development and operation of cloud applications and services. In Telecommunications Network Strategy and Planning Symposium (Networks), 2016 17th International. IEEE, 31--36."},{"key":"e_1_3_2_1_24_1","volume-title":"DSN'09","author":"Vieira Marco","year":"2009","unstructured":"Marco Vieira, Nuno Antunes, and Henrique Madeira. 2009. Using web security scanners to detect vulnerabilities in web services Dependable Systems & Networks, 2009. DSN'09. IEEE\/IFIP International Conference on. IEEE, 566--571."},{"key":"e_1_3_2_1_25_1","volume-title":"OWASP Foundation","author":"Wichers Dave","year":"2013","unstructured":"Dave Wichers. 2013. Owasp top-10 2013. OWASP Foundation, February (2013)."}],"event":{"name":"UCC '17: 10th International Conference on Utility and Cloud Computing","location":"Austin Texas USA","acronym":"UCC '17","sponsor":["IEEE TCSC IEEE Technical Committee on Scalable Computing","SIGARCH ACM Special Interest Group on Computer Architecture"]},"container-title":["Proceedings of the10th International Conference on Utility and Cloud Computing"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3147213.3147229","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3147213.3147229","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,11,18]],"date-time":"2025-11-18T14:01:13Z","timestamp":1763474473000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3147213.3147229"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017,12,5]]},"references-count":25,"alternative-id":["10.1145\/3147213.3147229","10.1145\/3147213"],"URL":"https:\/\/doi.org\/10.1145\/3147213.3147229","relation":{},"subject":[],"published":{"date-parts":[[2017,12,5]]},"assertion":[{"value":"2017-12-05","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}