{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T05:02:10Z","timestamp":1750309330405,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":18,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,10,27]],"date-time":"2024-10-27T00:00:00Z","timestamp":1729987200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,10,27]]},"DOI":"10.1145\/3691620.3695279","type":"proceedings-article","created":{"date-parts":[[2024,10,18]],"date-time":"2024-10-18T15:39:19Z","timestamp":1729265959000},"page":"2170-2175","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":1,"title":["Cloud Resource Protection via Automated Security Property Reasoning"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0000-6283-0737","authenticated-orcid":false,"given":"Zhixing","family":"Xu","sequence":"first","affiliation":[{"name":"Amazon Web Services, Cupertino, California, USA"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9145-9279","authenticated-orcid":false,"given":"Shengjian","family":"Guo","sequence":"additional","affiliation":[{"name":"Amazon Web Services, Cupertino, California, USA"}]},{"ORCID":"https:\/\/orcid.org\/0009-0005-1290-8600","authenticated-orcid":false,"given":"Oksana","family":"Tkachuk","sequence":"additional","affiliation":[{"name":"Amazon Web Services, Cupertino, California, USA"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1473-3630","authenticated-orcid":false,"given":"Saeed","family":"Nejati","sequence":"additional","affiliation":[{"name":"Amazon Web Services, Seattle, Washington, USA"}]},{"ORCID":"https:\/\/orcid.org\/0009-0004-1754-559X","authenticated-orcid":false,"given":"Niloofar","family":"Razavi","sequence":"additional","affiliation":[{"name":"Amazon Web Services, Santa Clara, California, USA"}]},{"ORCID":"https:\/\/orcid.org\/0009-0003-8611-7444","authenticated-orcid":false,"given":"George","family":"Argyros","sequence":"additional","affiliation":[{"name":"Amazon Web Services, New York, New York, USA"}]}],"member":"320","published-online":{"date-parts":[[2024,10,27]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"2024. prowler. https:\/\/github.com\/prowler-cloud\/prowler"},{"key":"e_1_3_2_1_2_1","unstructured":"Apache. [n. d.]. Apache Jena. https:\/\/jena.apache.org\/"},{"key":"e_1_3_2_1_3_1","unstructured":"AWS. 2024. Amazon CloudTrail. https:\/\/aws.amazon.com\/cloudtrail\/"},{"key":"e_1_3_2_1_4_1","unstructured":"AWS. 2024. Amazon DynamoDB. https:\/\/aws.amazon.com\/dynamodb\/"},{"key":"e_1_3_2_1_5_1","unstructured":"AWS. 2024. Amazon EC2. https:\/\/aws.amazon.com\/ec2\/"},{"key":"e_1_3_2_1_6_1","unstructured":"AWS. 2024. Amazon S3. https:\/\/aws.amazon.com\/s3\/"},{"key":"e_1_3_2_1_7_1","unstructured":"AWS. 2024. AWS Config. https:\/\/aws.amazon.com\/config"},{"key":"e_1_3_2_1_8_1","unstructured":"AWS. 2024. AWS Identity and Access Management. https:\/\/aws.amazon.com\/iam"},{"key":"e_1_3_2_1_9_1","unstructured":"AWS. 2024. AWS Lambda. https:\/\/aws.amazon.com\/lambda"},{"key":"e_1_3_2_1_10_1","unstructured":"AWS. 2024. Developing Cloudformation hooks. https:\/\/docs.aws.amazon.com\/cloudformation-cli\/latest\/userguide\/hooks.html"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-25543-5_14"},{"volume-title":"Semantic-based automated reasoning for AWS access policies using SMT. In 2018 Formal Methods in Computer Aided Design (FMCAD)","author":"Backes John","key":"e_1_3_2_1_12_1","unstructured":"John Backes, Pauline Bolignano, Byron Cook, Catherine Dodge, Andrew Gacek, Kasper Luckow, Neha Rungta, Oksana Tkachuk, and Carsten Varming. 2018. Semantic-based automated reasoning for AWS access policies using SMT. In 2018 Formal Methods in Computer Aided Design (FMCAD). IEEE, 1--9."},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-81685-8_36"},{"key":"e_1_3_2_1_14_1","unstructured":"AWS Cloudformation. 2024. AWS CloudFormation Linter. https:\/\/github.com\/aws-cloudformation\/cfn-lint"},{"key":"e_1_3_2_1_15_1","unstructured":"World Wide Web Consortium. [n. d.]. SPARQL 1.1 Query Language. https:\/\/www.w3.org\/TR\/sparql11-query\/"},{"key":"e_1_3_2_1_16_1","unstructured":"Rhino Security Labs. 2020. AWS Privilege Escalation Vulnerabilities. https:\/\/rhinosecuritylabs.com\/aws\/aws-privilege-escalation-methods-mitigation"},{"key":"e_1_3_2_1_17_1","unstructured":"nccgroup. 2024. ScoutSuite. https:\/\/github.com\/nccgroup\/ScoutSuite"},{"key":"e_1_3_2_1_18_1","volume-title":"32nd USENIX Security Symposium (USENIX Security 23)","author":"Shevrin Ilia","year":"2023","unstructured":"Ilia Shevrin and Oded Margalit. 2023. Detecting Multi-Step IAM Attacks in AWS Environments via Model Checking. In 32nd USENIX Security Symposium (USENIX Security 23). USENIX Association, Anaheim, CA, 6025--6042. https:\/\/www.usenix.org\/conference\/usenixsecurity23\/presentation\/shevrin"}],"event":{"name":"ASE '24: 39th IEEE\/ACM International Conference on Automated Software Engineering","sponsor":["SIGAI ACM Special Interest Group on Artificial Intelligence","SIGSOFT ACM Special Interest Group on Software Engineering","IEEE CS"],"location":"Sacramento CA USA","acronym":"ASE '24"},"container-title":["Proceedings of the 39th IEEE\/ACM International Conference on Automated Software Engineering"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3691620.3695279","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3691620.3695279","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T00:04:07Z","timestamp":1750291447000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3691620.3695279"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,10,27]]},"references-count":18,"alternative-id":["10.1145\/3691620.3695279","10.1145\/3691620"],"URL":"https:\/\/doi.org\/10.1145\/3691620.3695279","relation":{},"subject":[],"published":{"date-parts":[[2024,10,27]]},"assertion":[{"value":"2024-10-27","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}