arcvix-logic-driven-container-security.bib

% SPDX-License-Identifier: MPL-2.0
% Bibliography for "Logic-Driven Container Security" (Stapeln)
% All references are real, verifiable publications.

@inproceedings{brady2021,
  author    = {Edwin Brady},
  title     = {Idris 2: Quantitative Type Theory in Practice},
  booktitle = {Proceedings of the 35th European Conference on Object-Oriented Programming ({ECOOP})},
  series    = {LIPIcs},
  volume    = {194},
  year      = {2021},
  doi       = {10.4230/LIPIcs.ECOOP.2021.9},
  publisher = {Schloss Dagstuhl},
}

@inproceedings{byrd2010,
  author    = {William E. Byrd and Eric Holk and Daniel P. Friedman},
  title     = {{miniKanren}, Live and Untagged: Quine Generation via Relational Interpreters (Programming Pearl)},
  booktitle = {Proceedings of the 2012 Workshop on Scheme and Functional Programming},
  year      = {2012},
}

@article{byrd2017,
  author    = {William E. Byrd and Michael Ballantyne and Gregory Rosenblatt and Matthew Might},
  title     = {A Unified Approach to Solving Seven Programming Problems (Functional Pearl)},
  journal   = {Proceedings of the ACM on Programming Languages},
  volume    = {1},
  number    = {ICFP},
  pages     = {8:1--8:26},
  year      = {2017},
  doi       = {10.1145/3110252},
}

@misc{casaos2024,
  author    = {{CasaOS Project}},
  title     = {{CasaOS}: A Simple, Easy-to-Use, Elegant Open-Source Home Cloud System},
  year      = {2024},
  url       = {https://casaos.io/},
}

@misc{chainguard2024,
  author    = {{Chainguard, Inc.}},
  title     = {Chainguard Images: Minimal, Hardened Container Base Images},
  year      = {2024},
  url       = {https://www.chainguard.dev/},
}

@misc{cis2024,
  author    = {{Center for Internet Security}},
  title     = {{CIS} Docker Benchmark v1.6.0},
  year      = {2024},
  url       = {https://www.cisecurity.org/benchmark/docker},
}

@inproceedings{colmerauer1993,
  author    = {Alain Colmerauer and Philippe Roussel},
  title     = {The Birth of {Prolog}},
  booktitle = {History of Programming Languages {II}},
  pages     = {331--367},
  publisher = {ACM},
  year      = {1993},
  doi       = {10.1145/154766.155362},
}

@misc{conftest2024,
  author    = {{Open Policy Agent Project}},
  title     = {Conftest: Write Tests Against Structured Configuration Data},
  year      = {2024},
  url       = {https://www.conftest.dev/},
}

@misc{corelogic,
  author    = {David Nolen},
  title     = {core.logic: A Logic Programming Library for {Clojure}},
  year      = {2024},
  url       = {https://github.com/clojure/core.logic},
}

@misc{cue2024,
  author    = {{CUE Project}},
  title     = {{CUE}: Validate, Define, and Use Dynamic and Text-Based Data},
  year      = {2024},
  url       = {https://cuelang.org/},
}

@article{deCaro2024,
  author    = {Fabio De Caro and Cristina Ferraris and Stefano Ferretti},
  title     = {Gamification in Cybersecurity Education: A Systematic Review},
  journal   = {Computers \& Security},
  volume    = {136},
  pages     = {103542},
  year      = {2024},
  doi       = {10.1016/j.cose.2023.103542},
}

@misc{dhall2024,
  author    = {{Dhall Project}},
  title     = {Dhall: A Programmable Configuration Language},
  year      = {2024},
  url       = {https://dhall-lang.org/},
}

@misc{dockerdesktop2024,
  author    = {{Docker, Inc.}},
  title     = {Docker Desktop: The \#1 Containerization Tool for Developers},
  year      = {2024},
  url       = {https://www.docker.com/products/docker-desktop/},
}

@misc{elixir2024,
  author    = {Jos\'{e} Valim},
  title     = {Elixir: A Dynamic, Functional Language for Building Scalable Applications},
  year      = {2024},
  url       = {https://elixir-lang.org/},
}

@book{friedman2005,
  author    = {Daniel P. Friedman and William E. Byrd and Oleg Kiselyov},
  title     = {The Reasoned Schemer},
  publisher = {MIT Press},
  year      = {2005},
  isbn      = {9780262562140},
}

@article{hendrix2016,
  author    = {Maurice Hendrix and Ali Al-Sherbaz and Bloom Sherrell},
  title     = {Game Based Cyber Security Training: Are Serious Games Suitable for Cyber Security Training?},
  journal   = {International Journal of Serious Games},
  volume    = {3},
  number    = {1},
  pages     = {53--61},
  year      = {2016},
  doi       = {10.17083/ijsg.v3i1.107},
}

@inproceedings{jha2002,
  author    = {Somesh Jha and Oleg Sheyner and Jeannette M. Wing},
  title     = {Two Formal Analyses of Attack Graphs},
  booktitle = {Proceedings of the 15th {IEEE} Computer Security Foundations Workshop ({CSFW})},
  pages     = {49--63},
  year      = {2002},
  doi       = {10.1109/CSFW.2002.1021806},
  publisher = {IEEE},
}

@inproceedings{kiselyov2005,
  author    = {Oleg Kiselyov and Chung-chieh Shan and Daniel P. Friedman and Amr Sabry},
  title     = {Backtracking, Interleaving, and Terminating Monad Transformers},
  booktitle = {Proceedings of the 10th {ACM} {SIGPLAN} International Conference on Functional Programming ({ICFP})},
  pages     = {192--203},
  year      = {2005},
  doi       = {10.1145/1086365.1086390},
  publisher = {ACM},
}

@misc{lens2024,
  author    = {{Mirantis, Inc.}},
  title     = {Lens: The Kubernetes {IDE}},
  year      = {2024},
  url       = {https://k8slens.dev/},
}

@misc{nickel2024,
  author    = {{Tweag} and {the Nickel Contributors}},
  title     = {Nickel: Better Configuration for Less},
  year      = {2024},
  url       = {https://nickel-lang.org/},
}

@book{nielsen1994,
  author    = {Jakob Nielsen},
  title     = {Usability Engineering},
  publisher = {Morgan Kaufmann},
  year      = {1993},
  isbn      = {9780125184069},
}

@misc{nvd2024,
  author    = {{National Institute of Standards and Technology}},
  title     = {National Vulnerability Database {API} 2.0},
  year      = {2024},
  url       = {https://nvd.nist.gov/developers/vulnerabilities},
}

@misc{oci2024,
  author    = {{Open Container Initiative}},
  title     = {{OCI} Image Specification v1.1 and Runtime Specification v1.2},
  year      = {2024},
  url       = {https://opencontainers.org/},
}

@misc{opa2024,
  author    = {{Open Policy Agent Project}},
  title     = {Open Policy Agent: Policy-Based Control for Cloud Native Environments},
  year      = {2024},
  url       = {https://www.openpolicyagent.org/},
}

@inproceedings{ou2005,
  author    = {Xinming Ou and Wayne F. Boyer and Miles A. McQueen},
  title     = {A Scalable Approach to Attack Graph Generation},
  booktitle = {Proceedings of the 13th {ACM} Conference on Computer and Communications Security ({CCS})},
  pages     = {336--345},
  year      = {2006},
  doi       = {10.1145/1180405.1180446},
  publisher = {ACM},
}

@misc{phoenix2024,
  author    = {{Phoenix Framework}},
  title     = {Phoenix: Peace of Mind from Prototype to Production},
  year      = {2024},
  url       = {https://www.phoenixframework.org/},
}

@misc{podman2024,
  author    = {{Containers/Podman Project}},
  title     = {Podman: A Tool for Managing {OCI} Containers and Pods},
  year      = {2024},
  url       = {https://podman.io/},
}

@misc{portainer2024,
  author    = {{Portainer.io}},
  title     = {Portainer: Container Management Made Easy},
  year      = {2024},
  url       = {https://www.portainer.io/},
}

@misc{racketkanren,
  author    = {{Racket Community}},
  title     = {Faster {miniKanren} for {Racket}},
  year      = {2024},
  url       = {https://github.com/michaelballantyne/faster-minikanren},
}

@misc{rancher2024,
  author    = {{SUSE}},
  title     = {Rancher: Complete Container Management Platform},
  year      = {2024},
  url       = {https://www.rancher.com/},
}

@misc{rescript2024,
  author    = {{ReScript Association}},
  title     = {{ReScript}: Fast, Simple, Fully Typed {JavaScript} from the Future},
  year      = {2024},
  url       = {https://rescript-lang.org/},
}

@misc{rust2024,
  author    = {{The Rust Project}},
  title     = {The Rust Programming Language},
  year      = {2024},
  url       = {https://www.rust-lang.org/},
}

@misc{rustler2024,
  author    = {{Rustler Contributors}},
  title     = {Rustler: Safe Rust Bridge for Creating Erlang {NIF} Functions},
  year      = {2024},
  url       = {https://github.com/rusterlium/rustler},
}

@inproceedings{scholefield2019,
  author    = {Sam Scholefield and Lynsay A. Shepherd},
  title     = {Gamification Techniques for Raising Cyber Security Awareness},
  booktitle = {{HCI} for Cybersecurity, Privacy and Trust},
  pages     = {191--203},
  publisher = {Springer},
  year      = {2019},
  doi       = {10.1007/978-3-030-22351-9_13},
}

@article{secguru2017,
  author    = {Peyman Kazemian and George Varghese and Nick McKeown},
  title     = {Header Space Analysis: Static Checking for Networks},
  journal   = {{IEEE/ACM} Transactions on Networking},
  volume    = {25},
  number    = {4},
  pages     = {2345--2358},
  year      = {2017},
  doi       = {10.1109/TNET.2017.2707124},
}

@misc{sentinel2024,
  author    = {{HashiCorp}},
  title     = {Sentinel: Policy as Code Framework},
  year      = {2024},
  url       = {https://www.hashicorp.com/sentinel},
}

@techreport{sysdig2025,
  author    = {{Sysdig, Inc.}},
  title     = {2025 Container Security and Usage Report},
  year      = {2025},
  url       = {https://sysdig.com/2025-container-security-report/},
}

@misc{yacht2024,
  author    = {{SelfhostedPro}},
  title     = {Yacht: A Web Interface for Managing Docker Containers},
  year      = {2024},
  url       = {https://yacht.sh/},
}