{"id":"W7125604082","doi":"10.1109/cascon66301.2025.00041","title":"Survey on Kubernetes Misconfiguration Vulnerabilities and Best Practices","year":2025,"lang":"","type":"article","venue":"","topic":"Security and Verification in Computing","field":"Computer Science","cited_by":0,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of Waterloo","funders":"","keywords":"Best practice; Container (type theory); Orchestration; Set (abstract data type); Root cause; Mainstream; Data breach; Security bug; Vulnerability (computing)","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["scholarly_communication"],"consensus_categories":[],"category_scores_codex":[0.001903881,0.000244675,0.0002452811,0.0001954995,0.0006428484,0.001629805,0.000568735,0.0001537756,0.0001298912],"category_scores_gemma":[0.002724871,0.0002424349,0.00004405988,0.0006140271,0.0002129058,0.0008096211,0.0002191419,0.0003304676,0.0000802469],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00005250416,"about_ca_system_score_gemma":0.0002818173,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.003969882,"about_ca_topic_score_gemma":0.0007288721,"domain_scores_codex":[0.9972271,0.0008143823,0.0005353119,0.0008407815,0.0002863387,0.0002961202],"domain_scores_gemma":[0.9939795,0.004428396,0.0004737531,0.0006804919,0.000353435,0.00008440312],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"theoretical_or_conceptual","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.00005835066,0.0005499268,0.01311089,0.0002050905,0.00009318836,0.000001849583,0.003679664,0.0003285632,0.0001403498,0.7648267,0.006123617,0.2108818],"study_design_scores_gemma":[0.0007504089,0.0007230404,0.1170155,0.000514887,0.00004724821,0.000005540581,0.001398141,0.8343694,0.006985023,0.009837533,0.02763698,0.0007163147],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.394799,0.006555534,0.296124,0.02466541,0.006391364,0.001195888,0.00003161118,0.0003470124,0.2698902],"genre_scores_gemma":[0.9826872,0.0003003957,0.001971617,0.001041669,0.0001082893,0.000009690856,0.00000890854,0.000005728103,0.01386649],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.8340408,"threshold_uncertainty_score":0.9994066,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.09632792803865485,"score_gpt":0.3515863306268055,"score_spread":0.2552584025881506,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}