{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,1]],"date-time":"2026-02-01T03:10:00Z","timestamp":1769915400045,"version":"3.49.0"},"publisher-location":"New York, NY, USA","reference-count":28,"publisher":"ACM","license":[{"start":{"date-parts":[[2025,3,30]],"date-time":"2025-03-30T00:00:00Z","timestamp":1743292800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100006374","name":"HORIZON EUROPE Framework Programme","doi-asserted-by":"publisher","award":["101135423"],"award-info":[{"award-number":["101135423"]}],"id":[{"id":"10.13039\/501100006374","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2025,3,30]]},"DOI":"10.1145\/3721889.3721924","type":"proceedings-article","created":{"date-parts":[[2025,4,23]],"date-time":"2025-04-23T00:18:43Z","timestamp":1745367523000},"page":"20-25","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":1,"title":["An evaluation of commonly used Kubernetes security scanning tools"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-3456-2311","authenticated-orcid":false,"given":"Ioanna Angeliki","family":"Kapetanidou","sequence":"first","affiliation":[{"name":"Information Technologies Institute, Centre of Research and Technology Hellas, Thessaloniki, Greece"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6954-4861","authenticated-orcid":false,"given":"Alexandros","family":"Nizamis","sequence":"additional","affiliation":[{"name":"Information Technologies Institute, Centre of Research and Technology Hellas, Thessaloniki, Greece"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6381-8326","authenticated-orcid":false,"given":"Konstantinos","family":"Votis","sequence":"additional","affiliation":[{"name":"Information Technologies Institute, Centre of Research and Technology Hellas, Thessaloniki, Greece"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2025,4,22]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"https:\/\/github.com\/madhuakula\/kubernetes-goat. [Accessed","author":"Akula Madhu","year":"2025","unstructured":"Madhu Akula. 2024. Kubernetes Goat. https:\/\/github.com\/madhuakula\/kubernetes-goat. [Accessed 21 January 2025]."},{"key":"e_1_3_2_1_2_1","volume-title":"SSRF in the Kubernetes World. https:\/\/madhuakula.com\/kubernetes-goat\/docs\/scenarios\/scenario-3\/ssrf-in-the-kubernetes-world\/welcome\/. [Accessed","author":"Akula Madhu","year":"2025","unstructured":"Madhu Akula. 2024. SSRF in the Kubernetes World. https:\/\/madhuakula.com\/kubernetes-goat\/docs\/scenarios\/scenario-3\/ssrf-in-the-kubernetes-world\/welcome\/. [Accessed 27 January 2025]."},{"key":"e_1_3_2_1_3_1","volume-title":"Trivy Built-in Configuration Audit Policies. https:\/\/aquasecurity.github.io\/trivy-operator\/v0.24.1\/docs\/configuration-auditing\/built-in-policies\/. [Accessed","year":"2025","unstructured":"Aquasecurity. 2024. Trivy Built-in Configuration Audit Policies. https:\/\/aquasecurity.github.io\/trivy-operator\/v0.24.1\/docs\/configuration-auditing\/built-in-policies\/. [Accessed 04 March 2025]."},{"key":"e_1_3_2_1_4_1","volume-title":"Trivy Vulnerability Scanning Configuration. https:\/\/aquasecurity.github.io\/trivy-operator\/v0.24.1\/docs\/vulnerability-scanning\/trivy\/. [Accessed","year":"2025","unstructured":"Aquasecurity. 2024. Trivy Vulnerability Scanning Configuration. https:\/\/aquasecurity.github.io\/trivy-operator\/v0.24.1\/docs\/vulnerability-scanning\/trivy\/. [Accessed 04 March 2025]."},{"key":"e_1_3_2_1_5_1","volume-title":"https:\/\/github.com\/aquasecurity\/trivy. [Accessed","year":"2025","unstructured":"Aquasecurity. 2025. Trivy. https:\/\/github.com\/aquasecurity\/trivy. [Accessed 20 January 2025]."},{"key":"e_1_3_2_1_6_1","volume-title":"kubescape. https:\/\/github.com\/kubescape\/kubescape. [Accessed","author":"ARMO.","year":"2025","unstructured":"ARMO. 2025. kubescape. https:\/\/github.com\/kubescape\/kubescape. [Accessed 20 January 2025]."},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1109\/EuCNC\/6GSummit51104.2021.9482526"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/3624486.3624504"},{"key":"e_1_3_2_1_9_1","volume-title":"https:\/\/github.com\/bridgecrewio\/checkov. [Accessed","author":"Cloud Prisma","year":"2025","unstructured":"Prisma Cloud. 2025. Checkov. https:\/\/github.com\/bridgecrewio\/checkov. [Accessed 20 January 2025]."},{"key":"e_1_3_2_1_10_1","volume-title":"Open Policy Agent Gatekeeper. https:\/\/github.com\/open-policy-agent\/gatekeeper. [Accessed","author":"CNCF.","year":"2025","unstructured":"CNCF. 2025. Open Policy Agent Gatekeeper. https:\/\/github.com\/open-policy-agent\/gatekeeper. [Accessed 20 January 2025]."},{"key":"e_1_3_2_1_11_1","volume-title":"https:\/\/github.com\/controlplaneio\/kubesec. [Accessed","year":"2025","unstructured":"controlplane. 2024. Kubesec. https:\/\/github.com\/controlplaneio\/kubesec. [Accessed 20 January 2025]."},{"key":"e_1_3_2_1_12_1","volume-title":"Sagar Sen, Vilija Balionyte-Merle","author":"Dautov Rustem","year":"2024","unstructured":"Rustem Dautov, Hui Song, Dumitru Roman, Erik Johannes Husom, Sagar Sen, Vilija Balionyte-Merle, Donatella Firmani, Francesco Leotta, Jerin George Mathew, Jacopo Rossi, et al. 2024. INTEND: Human-Like Intelligence for Intent-Based Data Operations in the Cognitive Computing Continuum. In Companion Proceedings of the 8th International Joint Conference on Rules and Reasoning co-located with 20th Reasoning Web Summer School (RW 2024) and 16th DecisionCAMP 2024 as part of Declarative AI 2024. Technical University of Aachen."},{"key":"e_1_3_2_1_13_1","unstructured":"Oscar Eriksson. 2023. An evaluation of honeypots with compliant kubernetes."},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/3642975.3678964"},{"key":"e_1_3_2_1_15_1","unstructured":"Red Hat. 2024. The state of Kubernetes security report: 2024 edition. https:\/\/www.redhat.com\/en\/engage\/state-kubernetes-security-report-2024."},{"key":"e_1_3_2_1_16_1","volume-title":"A Comparative Study on the Security of Kubernetes Deployments. In 2024 International Wireless Communications and Mobile Computing (IWCMC)","author":"Kamieniarz Kacper","unstructured":"Kacper Kamieniarz and Wojciech Mazurczyk. 2024. A Comparative Study on the Security of Kubernetes Deployments. In 2024 International Wireless Communications and Mobile Computing (IWCMC). IEEE, 0718--0723."},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.60087\/jklst.v3.n4.p274"},{"key":"e_1_3_2_1_18_1","volume-title":"vCluster. https:\/\/github.com\/loft-sh\/vcluster. [Accessed","year":"2025","unstructured":"loft. 2025. vCluster. https:\/\/github.com\/loft-sh\/vcluster. [Accessed 21 January 2025]."},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/3642975.3678963"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICE\/ITMC61926.2024.10794207"},{"key":"e_1_3_2_1_21_1","volume-title":"https:\/\/github.com\/prometheus-operator\/kube-prometheus. [Accessed","year":"2025","unstructured":"Prometheus-operator. 2024. Kube-prometheus. https:\/\/github.com\/prometheus-operator\/kube-prometheus. [Accessed 21 January 2025]."},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/3579639"},{"key":"e_1_3_2_1_23_1","volume-title":"Farzana Ahamed Bhuiyan, and Akond Rahman","author":"Islam Shamim Md Shazibul","year":"2020","unstructured":"Md Shazibul Islam Shamim, Farzana Ahamed Bhuiyan, and Akond Rahman. 2020. Xi commandments of kubernetes security: A systematization of knowledge related to kubernetes security practices. 2020 IEEE Secure Development (SecDev) (2020), 58--64."},{"key":"e_1_3_2_1_24_1","volume-title":"kubeLinter. https:\/\/github.com\/stackrox\/kube-linter. [Accessed","year":"2025","unstructured":"StackRox. 2024. kubeLinter. https:\/\/github.com\/stackrox\/kube-linter. [Accessed 20 January 2025]."},{"key":"e_1_3_2_1_25_1","volume-title":"https:\/\/github.com\/stackrox\/kube-linter. [Accessed","year":"2025","unstructured":"Tenable. 2024. Terrascan. https:\/\/github.com\/stackrox\/kube-linter. [Accessed 20 January 2025]."},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.3390\/s22229003"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1109\/FMEC59375.2023.10306090"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1109\/MASCOTS50786.2020.9285946"}],"event":{"name":"EuroSys '25: Twentieth European Conference on Computer Systems","location":"Rotterdam Netherlands","acronym":"EuroSys '25","sponsor":["SIGOPS ACM Special Interest Group on Operating Systems"]},"container-title":["Proceedings of the 2nd International Workshop on MetaOS for the Cloud-Edge-IoT Continuum"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3721889.3721924","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3721889.3721924","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,23]],"date-time":"2025-08-23T18:38:56Z","timestamp":1755974336000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3721889.3721924"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,3,30]]},"references-count":28,"alternative-id":["10.1145\/3721889.3721924","10.1145\/3721889"],"URL":"https:\/\/doi.org\/10.1145\/3721889.3721924","relation":{},"subject":[],"published":{"date-parts":[[2025,3,30]]},"assertion":[{"value":"2025-04-22","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}