{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,18]],"date-time":"2026-03-18T13:24:11Z","timestamp":1773840251599,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":30,"publisher":"ACM","funder":[{"name":"US National Science Foundation","award":["2312321"],"award-info":[{"award-number":["2312321"]}]},{"DOI":"10.13039\/100000001","name":"NSF (National Science Foundation)","doi-asserted-by":"publisher","award":["2247141"],"award-info":[{"award-number":["2247141"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2025,6,23]]},"DOI":"10.1145\/3696630.3728573","type":"proceedings-article","created":{"date-parts":[[2025,7,28]],"date-time":"2025-07-28T19:09:27Z","timestamp":1753729767000},"page":"514-519","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":1,"title":["Dynamic Application Security Testing for Kubernetes Deployment: An Experience Report from Industry"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-8084-5123","authenticated-orcid":false,"given":"Shazibul Islam","family":"Shamim","sequence":"first","affiliation":[{"name":"Kennesaw State University, Marietta, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0007-3878-2430","authenticated-orcid":false,"given":"Hanyang","family":"Hu","sequence":"additional","affiliation":[{"name":"Company-Z, San Francisco, California, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5056-757X","authenticated-orcid":false,"given":"Akond","family":"Rahman","sequence":"additional","affiliation":[{"name":"Auburn University, Auburn, Alabama, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2025,7,28]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1109\/TLA.2023.10068850"},{"key":"e_1_3_2_1_2_1","volume-title":"2022 IEEE 15th International Conference on Cloud Computing (CLOUD). IEEE, 59\u201369","author":"Blaise Agathe","year":"2022","unstructured":"Agathe Blaise and Filippo Rebecchi. 2022. Stay at the Helm: secure Kubernetes deployments via graph generation and attack reconstruction. In 2022 IEEE 15th International Conference on Cloud Computing (CLOUD). IEEE, 59\u201369."},{"key":"e_1_3_2_1_3_1","volume-title":"2021 IEEE\/ACM 2nd International Workshop on Engineering and Cybersecurity of Critical Systems (EnCyCriS). IEEE, 9\u201312","author":"Bose Dibyendu Brinto","year":"2021","unstructured":"Dibyendu Brinto Bose, Akond Rahman, and Shazibul Islam Shamim. 2021. 'Under-reported' Security Defects in Kubernetes Manifests. In 2021 IEEE\/ACM 2nd International Workshop on Engineering and Cybersecurity of Critical Systems (EnCyCriS). IEEE, 9\u201312."},{"key":"e_1_3_2_1_4_1","volume-title":"Proceedings of the 17th International Conference on Availability, Reliability and Security. 1\u20139.","author":"Cao Clinton","year":"2022","unstructured":"Clinton Cao, Agathe Blaise, Sicco Verwer, and Filippo Rebecchi. 2022. Learning State Machines to Monitor and Detect Anomalies on a Kubernetes Cluster. In Proceedings of the 17th International Conference on Availability, Reliability and Security. 1\u20139."},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1145\/3539606"},{"key":"e_1_3_2_1_6_1","volume-title":"Adidas","author":"Study Case","year":"2025","unstructured":"Case Study: Adidas. 2025. Kubernetes. https:\/\/kubernetes.io\/case-studies\/adidas\/. [Online; accessed 13-January-2025]."},{"key":"e_1_3_2_1_7_1","volume-title":"Denso","author":"Study Case","year":"2025","unstructured":"Case Study: Denso. 2025. Kubernetes. https:\/\/kubernetes.io\/case-studies\/denso\/. [Online; accessed 13-January-2025]."},{"key":"e_1_3_2_1_8_1","volume-title":"CIS Amazon EKS Kubernetes Benchmark v1.2.0. https:\/\/www.cisecurity.org\/benchmark\/kubernetes. [Online","author":"Center for Internet Security(CIS). 2023.","year":"2023","unstructured":"Center for Internet Security(CIS). 2023. CIS Amazon EKS Kubernetes Benchmark v1.2.0. https:\/\/www.cisecurity.org\/benchmark\/kubernetes. [Online; accessed 22-november-2023]."},{"key":"e_1_3_2_1_9_1","volume-title":"https:\/\/www.cisecurity.org\/. [Online","author":"Center for Internet Security(CIS). 2024.","year":"2024","unstructured":"Center for Internet Security(CIS). 2024. https:\/\/www.cisecurity.org\/. [Online; accessed 12-march-2024]."},{"key":"e_1_3_2_1_10_1","unstructured":"Center for Information Security (CIS). 2024. CIS Kubernetes Benchmarks. https:\/\/www.cisecurity.org\/benchmark\/kubernetes"},{"key":"e_1_3_2_1_11_1","volume-title":"2022 IEEE International Conference on Software Analysis, Evolution and Reengineering (SANER). IEEE, 420\u2013431","author":"Haque Mubin Ul","year":"2022","unstructured":"Mubin Ul Haque, M Mehdi Kholoosi, and M Ali Babar. 2022. Kgsecconfig: a knowledge graph based approach for secured container orchestrator configuration. In 2022 IEEE International Conference on Software Analysis, Evolution and Reengineering (SANER). IEEE, 420\u2013431."},{"key":"e_1_3_2_1_12_1","volume-title":"Proceedings of the 9th Workshop on Scientific Cloud Computing","author":"Hariri Sahand","year":"2018","unstructured":"Sahand Hariri and Matias Carrasco Kind. 2018. Batch and Online Anomaly Detection for Scientific Applications in a Kubernetes Environment. In Proceedings of the 9th Workshop on Scientific Cloud Computing (Tempe, AZ, USA) (ScienceCloud'18). Association for Computing Machinery, New York, NY, USA, Article 3, 7 pages. 10.1145\/3217880.3217883"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","unstructured":"Kacper Kamieniarz and Wojciech Mazurczyk. 2024. A Comparative Study on the Security of Kubernetes Deployments. In 2024 International Wireless Communications and Mobile Computing (IWCMC). 0718\u20130723. 10.1109\/IWCMC61514.2024.10592468","DOI":"10.1109\/IWCMC61514.2024.10592468"},{"key":"e_1_3_2_1_14_1","volume-title":"https:\/\/aquasecurity.github.io\/kube-bench\/v0.6.15\/. [Online","year":"2024","unstructured":"Kubebench. 2024. Kubebench. https:\/\/aquasecurity.github.io\/kube-bench\/v0.6.15\/. [Online; accessed 15-March-2024]."},{"key":"e_1_3_2_1_15_1","volume-title":"https:\/\/github.com\/aquasecurity\/kube-bench\/tree\/main\/cfg\/eks-1.2.0. [Online","year":"2025","unstructured":"Kubebench. 2025. Kubebench-eks. https:\/\/github.com\/aquasecurity\/kube-bench\/tree\/main\/cfg\/eks-1.2.0. [Online; accessed 15-January-2025]."},{"key":"e_1_3_2_1_16_1","unstructured":"Kubernetes. 2021. Production-Grade Container Orchestration. https:\/\/kubernetes.io\/"},{"key":"e_1_3_2_1_17_1","volume-title":"https:\/\/hub.armosec.io\/docs\/controls. [Online","year":"2024","unstructured":"Kubescape. 2024. Kubescape. https:\/\/hub.armosec.io\/docs\/controls. [Online; accessed 15-March-2024]."},{"key":"e_1_3_2_1_18_1","volume-title":"k8s-interface. https:\/\/github.com\/kubescape\/k8s-interface\/. [Online","year":"2025","unstructured":"Kubescape. 2025. k8s-interface. https:\/\/github.com\/kubescape\/k8s-interface\/. [Online; accessed 15-January-2025]."},{"key":"e_1_3_2_1_19_1","volume-title":"Static Application Security Testing (SAST) Tools for Smart Contracts: How Far Are We? arXiv preprint arXiv:2404.18186","author":"Li Kaixuan","year":"2024","unstructured":"Kaixuan Li, Yue Xue, Sen Chen, Han Liu, Kairan Sun, Ming Hu, Haijun Wang, Yang Liu, and Yixiang Chen. 2024. Static Application Security Testing (SAST) Tools for Smart Contracts: How Far Are We? arXiv preprint arXiv:2404.18186 (2024)."},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"crossref","DOI":"10.1007\/978-1-4842-6494-2","volume-title":"Hacking Kubernetes: Threat-Driven Analysis and Defense","author":"Martin Andrew","year":"2021","unstructured":"Andrew Martin and Michael Hausenblas. 2021. Hacking Kubernetes: Threat-Driven Analysis and Defense. O'Reilly Media."},{"key":"e_1_3_2_1_21_1","unstructured":"S. Miles. 2020. Kubernetes: A Step-By-Step Guide For Beginners To Build Manage Develop and Intelligently Deploy Applications By Using Kubernetes (2020 Edition). Independently Published. https:\/\/books.google.com\/books?id=M4VmzQEACAAJ"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/3579639"},{"key":"e_1_3_2_1_23_1","unstructured":"RedHat. 2024. The state of Kubernetes security report: 2024 edition. https:\/\/www.redhat.com\/en\/engage\/state-kubernetes-security-report-2024"},{"key":"e_1_3_2_1_24_1","unstructured":"Johnny Saldana. 2015. The Coding Manual for Qualitative Researchers. SAGE."},{"key":"e_1_3_2_1_25_1","volume-title":"Proceedings of the IEEE\/ACM 47th International Conference on Software Engineering","author":"Shamim Shazibul Islam","year":"2025","unstructured":"Shazibul Islam Shamim, Hanyang Hu, and Akond Rahman. 2025. On Prescription or Off Prescription? An Empirical Study of Community-prescribed Security Configurations for Kubernetes. In Proceedings of the IEEE\/ACM 47th International Conference on Software Engineering (Ottawa, Canada) (ICSE '25). Association for Computing Machinery, New York, NY, USA, 13 pages."},{"key":"e_1_3_2_1_26_1","volume-title":"Kubanomaly: anomaly detection for the docker orchestration platform with neural network approaches. Engineering reports 1, 5","author":"Tien Chin-Wei","year":"2019","unstructured":"Chin-Wei Tien, Tse-Yung Huang, Chia-Wei Tien, Ting-Chun Huang, and Sy-Yen Kuo. 2019. Kubanomaly: anomaly detection for the docker orchestration platform with neural network approaches. Engineering reports 1, 5 (2019), e12080."},{"key":"e_1_3_2_1_27_1","volume-title":"https:\/\/aquasecurity.github.io\/trivy\/. [Online","year":"2024","unstructured":"Trivy. 2024. Trivy. https:\/\/aquasecurity.github.io\/trivy\/. [Online; accessed 15-March-2024]."},{"key":"e_1_3_2_1_28_1","volume-title":"trivy-kubernetes. https:\/\/github.com\/aquasecurity\/trivy-kubernetes. [Online","year":"2025","unstructured":"Trivy. 2025. trivy-kubernetes. https:\/\/github.com\/aquasecurity\/trivy-kubernetes. [Online; accessed 15-January-2025]."},{"key":"e_1_3_2_1_29_1","volume-title":"2022 14th International Conference on COMmunication Systems & NETworkS (COMSNETS). IEEE, 129\u2013137","author":"Zhu Hui","year":"2022","unstructured":"Hui Zhu and Christian Gehrmann. 2022. Kub-Sec, an automatic Kubernetes cluster AppArmor profile generation engine. In 2022 14th International Conference on COMmunication Systems & NETworkS (COMSNETS). IEEE, 129\u2013137."},{"key":"e_1_3_2_1_30_1","volume-title":"Crypto mining attacks in information systems: An emerging threat to cyber security. Journal of Computer Information Systems","author":"Zimba Aaron","year":"2018","unstructured":"Aaron Zimba, Zhaoshun Wang, Mwenge Mulenga, and Nickson Herbert Odongo. 2018. Crypto mining attacks in information systems: An emerging threat to cyber security. Journal of Computer Information Systems (2018)."}],"event":{"name":"FSE Companion '25: 33rd ACM International Conference on the Foundations of Software Engineering","location":"Clarion Hotel Trondheim Trondheim Norway","acronym":"FSE Companion '25","sponsor":["SIGSOFT ACM Special Interest Group on Software Engineering"]},"container-title":["Proceedings of the 33rd ACM International Conference on the Foundations of Software Engineering"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3696630.3728573","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,7,28]],"date-time":"2025-07-28T19:17:36Z","timestamp":1753730256000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3696630.3728573"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,6,23]]},"references-count":30,"alternative-id":["10.1145\/3696630.3728573","10.1145\/3696630"],"URL":"https:\/\/doi.org\/10.1145\/3696630.3728573","relation":{},"subject":[],"published":{"date-parts":[[2025,6,23]]},"assertion":[{"value":"2025-07-28","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}