{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T05:13:14Z","timestamp":1755839594381,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":49,"publisher":"ACM","license":[{"start":{"date-parts":[[2023,8,29]],"date-time":"2023-08-29T00:00:00Z","timestamp":1693267200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2023,8,29]]},"DOI":"10.1145\/3600160.3605082","type":"proceedings-article","created":{"date-parts":[[2023,8,9]],"date-time":"2023-08-09T22:54:41Z","timestamp":1691621681000},"page":"1-9","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":3,"title":["Security Architecture in the SILVANUS project"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-7350-9519","authenticated-orcid":false,"given":"Natan","family":"Orzechowski","sequence":"first","affiliation":[{"name":"Warsaw University of Technology, Poland"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7932-7764","authenticated-orcid":false,"given":"Karol","family":"Rzepka","sequence":"additional","affiliation":[{"name":"Warsaw University of Technology, Poland"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7540-2333","authenticated-orcid":false,"given":"Przemys\u0142aw","family":"Szary","sequence":"additional","affiliation":[{"name":"Warsaw University of Technology, Poland"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5955-5890","authenticated-orcid":false,"given":"Krzysztof","family":"Cabaj","sequence":"additional","affiliation":[{"name":"Warsaw University of Technology, Poland"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8509-4127","authenticated-orcid":false,"given":"Wojciech","family":"Mazurczyk","sequence":"additional","affiliation":[{"name":"Warsaw University of Technology, Poland"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1489-1495","authenticated-orcid":false,"given":"Helen C.","family":"Leligou","sequence":"additional","affiliation":[{"name":"Netcompany-Intrasoft, Greece"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0007-7886-7463","authenticated-orcid":false,"given":"Marcin","family":"Przybyszewski","sequence":"additional","affiliation":[{"name":"ITTI Sp. z o.o., Poland"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7122-3306","authenticated-orcid":false,"given":"Rafa\u0142","family":"Kozik","sequence":"additional","affiliation":[{"name":"Bydgoszcz University of Science and Technology, Poland and ITTI Sp. z o.o., Poland"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1405-9911","authenticated-orcid":false,"given":"Micha\u0142","family":"Chora\u015b","sequence":"additional","affiliation":[{"name":"Bydgoszcz University of Science and Technology, Poland and ITTI Sp. z o.o., Poland"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2023,8,29]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"Despina Anastasopoulos Nelly Leligou Fanis Orphanoudakis and Sofia Tsekeridou. 2023. D8.1 - Report on SILVANUS reference architecture. 1\u2013111."},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.3390\/fi14020049"},{"volume-title":"Apache Airavata documentation. https:\/\/docs.airavata.org\/en\/master\/. [Online","year":"2023","key":"e_1_3_2_1_3_1","unstructured":"Apache. 2023. Apache Airavata documentation. https:\/\/docs.airavata.org\/en\/master\/. [Online; accessed 18-May-2023]."},{"volume-title":"https:\/\/auth0.com. [Online","year":"2023","key":"e_1_3_2_1_4_1","unstructured":"Auth0. 2023. Auth0. https:\/\/auth0.com. [Online; accessed 29-May-2023]."},{"key":"e_1_3_2_1_5_1","volume-title":"AWS Security Documentation. https:\/\/docs.aws.amazon.com\/security\/. [Online","author":"AWS.","year":"2023","unstructured":"AWS. 2022. AWS Security Documentation. https:\/\/docs.aws.amazon.com\/security\/. [Online; accessed 24-May-2023]."},{"key":"e_1_3_2_1_6_1","volume-title":"https:\/\/aws.amazon.com\/iam\/. [Online","author":"AWS.","year":"2023","unstructured":"AWS. 2023. AWS IAM. https:\/\/aws.amazon.com\/iam\/. [Online; accessed 31-May-2023]."},{"key":"e_1_3_2_1_7_1","volume-title":"AWS IoT Core Documentation. https:\/\/docs.aws.amazon.com\/iot\/index.html. [Online","author":"AWS.","year":"2023","unstructured":"AWS. 2023. AWS IoT Core Documentation. https:\/\/docs.aws.amazon.com\/iot\/index.html. [Online; accessed 29-May-2023]."},{"key":"e_1_3_2_1_8_1","volume-title":"What is MFA. https:\/\/aws.amazon.com\/what-is\/mfa\/. [Online","author":"AWS.","year":"2023","unstructured":"AWS. 2023. What is MFA. https:\/\/aws.amazon.com\/what-is\/mfa\/. [Online; accessed 29-May-2023]."},{"key":"e_1_3_2_1_9_1","volume-title":"https:\/\/azure.microsoft.com\/pl-pl\/products\/active-directory. [Online","author":"Azure","year":"2023","unstructured":"Azure. 2023. Azure AD. https:\/\/azure.microsoft.com\/pl-pl\/products\/active-directory. [Online; accessed 31-May-2023]."},{"volume-title":"Bitnami keycloak chart documentation. https:\/\/github.com\/bitnami\/charts\/tree\/main\/bitnami\/keycloak\/. [Online","year":"2023","key":"e_1_3_2_1_10_1","unstructured":"Bitnami. 2023. Bitnami keycloak chart documentation. https:\/\/github.com\/bitnami\/charts\/tree\/main\/bitnami\/keycloak\/. [Online; accessed 18-May-2023]."},{"volume-title":"Keycloak packaged by Bitnami. https:\/\/bitnami.com\/stack\/keycloak\/helm. [Online","year":"2023","key":"e_1_3_2_1_11_1","unstructured":"Bitnami. 2023. Keycloak packaged by Bitnami. https:\/\/bitnami.com\/stack\/keycloak\/helm. [Online; accessed 13-May-2023]."},{"volume-title":"Usability of Single- and Multi-factor Authentication Methods on Tabletops: A Comparative Study","author":"Bruun Anders","key":"e_1_3_2_1_12_1","unstructured":"Anders Bruun, Kenneth Jensen, and Dianna Kristensen. 2014. Usability of Single- and Multi-factor Authentication Methods on Tabletops: A Comparative Study. In Human-Centered Software Engineering, Stefan Sauer, Cristian Bogdan, Peter Forbrig, Regina Bernhaupt, and Marco Winckler (Eds.). Springer Berlin Heidelberg, Berlin, Heidelberg, 299\u2013306."},{"key":"e_1_3_2_1_13_1","volume-title":"pfsense: The definitive guide. Reed Media Services","author":"Buechler M","year":"2009","unstructured":"Christopher\u00a0M Buechler and Jim Pingle. 2009. pfsense: The definitive guide. Reed Media Services (2009)."},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.3390\/s22051703"},{"key":"e_1_3_2_1_15_1","unstructured":"Marcus\u00a0A Christie Anuj Bhandar Supun Nakandala Suresh Marru Eroma Abeysinghe Sudhakar Pamidighantam and Marlon\u00a0E Pierce. 2017. Using keycloak for gateway authentication and authorization. (2017)."},{"key":"e_1_3_2_1_16_1","unstructured":"Eric\u00a0F Crist and Jan\u00a0Just Keijser. 2015. Mastering OpenVPN. Packt Publishing Ltd."},{"key":"e_1_3_2_1_17_1","volume-title":"https:\/\/docs.docker.com. [Online","author":"Documentation Docker","year":"2023","unstructured":"Docker. 2023. Docker Documentation. https:\/\/docs.docker.com. [Online; accessed 29-May-2023]."},{"key":"e_1_3_2_1_18_1","volume-title":"https:\/\/kubernetes.io\/docs\/tasks\/debug\/debug-cluster\/audit\/. [Online","author":"Documentation Kubernetes","year":"2023","unstructured":"Kubernetes Documentation. 2023. Auditing. https:\/\/kubernetes.io\/docs\/tasks\/debug\/debug-cluster\/audit\/. [Online; accessed 29-May-2023]."},{"key":"e_1_3_2_1_19_1","volume-title":"Network Policies. https:\/\/kubernetes.io\/docs\/concepts\/services-networking\/network-policies\/. [Online","author":"Documentation Kubernetes","year":"2023","unstructured":"Kubernetes Documentation. 2023. Network Policies. https:\/\/kubernetes.io\/docs\/concepts\/services-networking\/network-policies\/. [Online; accessed 29-May-2023]."},{"key":"e_1_3_2_1_20_1","volume-title":"https:\/\/kubernetes.io\/docs\/concepts\/storage\/persistent-volumes\/. [Online","author":"Documentation Kubernetes","year":"2023","unstructured":"Kubernetes Documentation. 2023. Persistent Volumes. https:\/\/kubernetes.io\/docs\/concepts\/storage\/persistent-volumes\/. [Online; accessed 29-May-2023]."},{"key":"e_1_3_2_1_21_1","volume-title":"https:\/\/kubernetes.io\/docs\/reference\/access-authn-authz\/rbac\/. [Online","author":"Documentation Kubernetes","year":"2023","unstructured":"Kubernetes Documentation. 2023. RBAC (Role-Based Access Control). https:\/\/kubernetes.io\/docs\/reference\/access-authn-authz\/rbac\/. [Online; accessed 29-May-2023]."},{"key":"e_1_3_2_1_22_1","volume-title":"https:\/\/kubernetes.io\/docs\/concepts\/configuration\/secret\/. [Online","author":"Documentation Kubernetes","year":"2023","unstructured":"Kubernetes Documentation. 2023. Secrets. https:\/\/kubernetes.io\/docs\/concepts\/configuration\/secret\/. [Online; accessed 29-May-2023]."},{"key":"e_1_3_2_1_23_1","volume-title":"https:\/\/kubernetes.io\/docs\/tasks\/configure-pod-container\/security-context\/. [Online","author":"Documentation Kubernetes","year":"2023","unstructured":"Kubernetes Documentation. 2023. Security Context. https:\/\/kubernetes.io\/docs\/tasks\/configure-pod-container\/security-context\/. [Online; accessed 29-May-2023]."},{"key":"e_1_3_2_1_24_1","volume-title":"The Kubernetes API. https:\/\/kubernetes.io\/docs\/concepts\/overview\/kubernetes-api\/. [Online","author":"Documentation Kubernetes","year":"2023","unstructured":"Kubernetes Documentation. 2023. The Kubernetes API. https:\/\/kubernetes.io\/docs\/concepts\/overview\/kubernetes-api\/. [Online; accessed 29-May-2023]."},{"key":"e_1_3_2_1_25_1","volume-title":"https:\/\/fluxcd.io\/flux\/. [Online","author":"Documentation CD.","year":"2023","unstructured":"FluxCD. 2023. FluxCD Documentation. https:\/\/fluxcd.io\/flux\/. [Online; accessed 29-May-2023]."},{"key":"e_1_3_2_1_26_1","volume-title":"https:\/\/openid.net\/connect\/. [Online","author":"Foundation D\u00a0Connect","year":"2023","unstructured":"OpenID\u00a0Connect Foundation. 2023. OIDC Documentation. https:\/\/openid.net\/connect\/. [Online; accessed 29-May-2023]."},{"volume-title":"GitHub Actions Documentation. https:\/\/docs.github.com\/en\/actions. [Online","year":"2023","key":"e_1_3_2_1_27_1","unstructured":"GitHub. 2023. GitHub Actions Documentation. https:\/\/docs.github.com\/en\/actions. [Online; accessed 22-May-2023]."},{"volume-title":"Google Authenticator Documentation. https:\/\/github.com\/google\/google-authenticator\/wiki. [Online","year":"2023","key":"e_1_3_2_1_28_1","unstructured":"Google. 2019. Google Authenticator Documentation. https:\/\/github.com\/google\/google-authenticator\/wiki. [Online; accessed 24-May-2023]."},{"key":"e_1_3_2_1_29_1","volume-title":"https:\/\/www.keycloak.org. [Online","author":"Hat Red","year":"2023","unstructured":"Red Hat. 2023. Keycloak. https:\/\/www.keycloak.org. [Online; accessed 31-May-2023]."},{"key":"e_1_3_2_1_30_1","volume-title":"Keycloak documentation: configuring database. https:\/\/www.keycloak.org\/server\/db. [Online","author":"Hat Red","year":"2023","unstructured":"Red Hat. 2023. Keycloak documentation: configuring database. https:\/\/www.keycloak.org\/server\/db. [Online; accessed 18-May-2023]."},{"volume-title":"Hetzner Container Storage Interface driver. https:\/\/github.com\/hetznercloud\/csi-driver. [Online","year":"2023","key":"e_1_3_2_1_31_1","unstructured":"Hetzner. 2023. Hetzner Container Storage Interface driver. https:\/\/github.com\/hetznercloud\/csi-driver. [Online; accessed 29-May-2023]."},{"volume-title":"Hetzner DDoS Protection. https:\/\/www.hetzner.com\/unternehmen\/ddos-schutz. [Online","year":"2023","key":"e_1_3_2_1_32_1","unstructured":"Hetzner. 2023. Hetzner DDoS Protection. https:\/\/www.hetzner.com\/unternehmen\/ddos-schutz. [Online; accessed 29-May-2023]."},{"volume-title":"Hetzner Load Balancer. https:\/\/docs.hetzner.com\/cloud\/load-balancers\/overview. [Online","year":"2023","key":"e_1_3_2_1_33_1","unstructured":"Hetzner. 2023. Hetzner Load Balancer. https:\/\/docs.hetzner.com\/cloud\/load-balancers\/overview. [Online; accessed 29-May-2023]."},{"key":"e_1_3_2_1_34_1","volume-title":"HTTP Basic Authentication. https:\/\/www.ibm.com\/docs\/en\/cics-ts\/5.4?topic=concepts-http-basic-authentication. [Online","author":"IBM.","year":"2023","unstructured":"IBM. 2023. HTTP Basic Authentication. https:\/\/www.ibm.com\/docs\/en\/cics-ts\/5.4?topic=concepts-http-basic-authentication. [Online; accessed 29-May-2023]."},{"key":"e_1_3_2_1_35_1","volume-title":"https:\/\/www.pingidentity.com\/en.html. [Online","author":"Identity Ping","year":"2023","unstructured":"Ping Identity. 2023. Ping Identity. https:\/\/www.pingidentity.com\/en.html. [Online; accessed 31-May-2023]."},{"volume-title":"JWT Introduction. https:\/\/jwt.io\/introduction. [Online","year":"2023","key":"e_1_3_2_1_36_1","unstructured":"jwt.io. 2023. JWT Introduction. https:\/\/jwt.io\/introduction. [Online; accessed 29-May-2023]."},{"volume-title":"Keycloak Authorization Services. https:\/\/www.keycloak.org\/docs\/latest\/authorization_services\/index.html. [Online","year":"2023","key":"e_1_3_2_1_37_1","unstructured":"Keycloak. 2023. Keycloak Authorization Services. https:\/\/www.keycloak.org\/docs\/latest\/authorization_services\/index.html. [Online; accessed 29-May-2023]."},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.adhoc.2013.05.003"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1109\/eScience.2016.7870911"},{"key":"e_1_3_2_1_40_1","volume-title":"Kerberos documentation. https:\/\/web.mit.edu\/kerberos\/krb5-latest\/doc\/. [Online","author":"Massachusetts\u00a0Institute of Technology. 2022.","year":"2023","unstructured":"Massachusetts\u00a0Institute of Technology. 2022. Kerberos documentation. https:\/\/web.mit.edu\/kerberos\/krb5-latest\/doc\/. [Online; accessed 24-May-2023]."},{"volume-title":"What is token based authentication. https:\/\/www.okta.com\/identity-101\/what-is-token-based-authentication\/, year =","year":"2023","key":"e_1_3_2_1_41_1","unstructured":"Okta. [n.d.]. What is token based authentication. https:\/\/www.okta.com\/identity-101\/what-is-token-based-authentication\/, year = 2023, note = \"[Online; accessed 29-May-2023]\"."},{"volume-title":"https:\/\/www.okta.com. [Online","year":"2023","key":"e_1_3_2_1_42_1","unstructured":"Okta. 2023. Okta. https:\/\/www.okta.com. [Online; accessed 31-May-2023]."},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.3390\/cryptography2010001"},{"volume-title":"SSL and TLS: Theory and Practice","author":"Oppliger Rolf","key":"e_1_3_2_1_44_1","unstructured":"Rolf Oppliger. 2016. SSL and TLS: Theory and Practice. Artech House."},{"key":"e_1_3_2_1_45_1","volume-title":"OWASP Top 10 Web Application Security Risks. https:\/\/owasp.org\/Top10\/A01_2021-Broken_Access_Control\/. [Online","author":"OWASP.","year":"2023","unstructured":"OWASP. 2023. OWASP Top 10 Web Application Security Risks. https:\/\/owasp.org\/Top10\/A01_2021-Broken_Access_Control\/. [Online; accessed 31-May-2023]."},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.2316\/P.2012.785-070"},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.1145\/3538969.3544470"},{"key":"e_1_3_2_1_48_1","unstructured":"Stian Thorgersen and Pedro\u00a0Igor Silva. 2021. Keycloak - Identity and Access Management for Modern Applications: Harness the Power of Keycloak OpenID Connect and OAuth 2.0 Protocols to Secure Applications. Packt Birmingham."},{"volume-title":"What is certificate based authentication. https:\/\/www.yubico.com\/resources\/glossary\/what-is-certificate-based-authentication\/. [Online","year":"2023","key":"e_1_3_2_1_49_1","unstructured":"Yubico. 2023. What is certificate based authentication. https:\/\/www.yubico.com\/resources\/glossary\/what-is-certificate-based-authentication\/. [Online; accessed 29-May-2023]."}],"event":{"name":"ARES 2023: The 18th International Conference on Availability, Reliability and Security","acronym":"ARES 2023","location":"Benevento Italy"},"container-title":["Proceedings of the 18th International Conference on Availability, Reliability and Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3600160.3605082","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3600160.3605082","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T17:49:17Z","timestamp":1750182557000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3600160.3605082"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,8,29]]},"references-count":49,"alternative-id":["10.1145\/3600160.3605082","10.1145\/3600160"],"URL":"https:\/\/doi.org\/10.1145\/3600160.3605082","relation":{},"subject":[],"published":{"date-parts":[[2023,8,29]]},"assertion":[{"value":"2023-08-29","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}