id	sid	tid	token	lemma	pos
easat-4382	1	1	edelweiss	edelweiss	PROPN
easat-4382	1	2	applied	apply	VERB
easat-4382	1	3	science	science	NOUN
easat-4382	1	4	and	and	CCONJ
easat-4382	1	5	technology	technology	NOUN
easat-4382	1	6	issn	issn	PROPN
easat-4382	1	7	:	:	PUNCT
easat-4382	1	8	2576	2576	NUM
easat-4382	1	9	-	-	SYM
easat-4382	1	10	8484	8484	NUM
easat-4382	1	11	vol	vol	NOUN
easat-4382	1	12	.	.	PROPN
easat-4382	2	1	9	9	NUM
easat-4382	2	2	,	,	PUNCT
easat-4382	2	3	no	no	INTJ
easat-4382	2	4	.	.	NOUN
easat-4382	2	5	1	1	NUM
easat-4382	2	6	,	,	PUNCT
easat-4382	2	7	1243	1243	NUM
easat-4382	2	8	-	-	SYM
easat-4382	2	9	1261	1261	NUM
easat-4382	2	10	2025	2025	NUM
easat-4382	2	11	publisher	publisher	NOUN
easat-4382	2	12	:	:	PUNCT
easat-4382	2	13	learning	learn	VERB
easat-4382	2	14	gate	gate	NOUN
easat-4382	2	15	doi	doi	PROPN
easat-4382	2	16	:	:	PUNCT
easat-4382	2	17	10.55214/25768484.v9i1.4382	10.55214/25768484.v9i1.4382	NUM
easat-4382	2	18	©	©	PROPN
easat-4382	2	19	2025	2025	NUM
easat-4382	2	20	by	by	ADP
easat-4382	2	21	the	the	DET
easat-4382	2	22	authors	author	NOUN
easat-4382	2	23	;	;	PUNCT
easat-4382	2	24	licensee	licensee	PROPN
easat-4382	2	25	learning	learning	NOUN
easat-4382	2	26	gate	gate	NOUN
easat-4382	3	1	©	©	PROPN
easat-4382	3	2	2025	2025	NUM
easat-4382	3	3	by	by	ADP
easat-4382	3	4	the	the	DET
easat-4382	3	5	authors	author	NOUN
easat-4382	3	6	;	;	PUNCT
easat-4382	3	7	licensee	licensee	PROPN
easat-4382	3	8	learning	learning	NOUN
easat-4382	3	9	gate	gate	NOUN
easat-4382	3	10	history	history	NOUN
easat-4382	3	11	:	:	PUNCT
easat-4382	3	12	received	receive	VERB
easat-4382	3	13	:	:	PUNCT
easat-4382	3	14	4	4	NUM
easat-4382	3	15	december	december	PROPN
easat-4382	3	16	2024	2024	NUM
easat-4382	3	17	;	;	PUNCT
easat-4382	3	18	revised	revise	VERB
easat-4382	3	19	:	:	PUNCT
easat-4382	3	20	9	9	NUM
easat-4382	3	21	january	january	NOUN
easat-4382	3	22	2025	2025	NUM
easat-4382	3	23	;	;	PUNCT
easat-4382	3	24	accepted	accept	VERB
easat-4382	3	25	:	:	PUNCT
easat-4382	3	26	17	17	NUM
easat-4382	3	27	january	january	NOUN
easat-4382	3	28	2025	2025	NUM
easat-4382	3	29	;	;	PUNCT
easat-4382	3	30	published	publish	VERB
easat-4382	3	31	:	:	PUNCT
easat-4382	3	32	22	22	NUM
easat-4382	3	33	january	january	PROPN
easat-4382	3	34	2025	2025	NUM
easat-4382	3	35	*	*	PUNCT
easat-4382	3	36	correspondence	correspondence	NOUN
easat-4382	3	37	:	:	PUNCT
easat-4382	3	38	zlatan.moric@algebra.hr	zlatan.moric@algebra.hr	VERB
easat-4382	3	39	the	the	DET
easat-4382	3	40	role	role	NOUN
easat-4382	3	41	of	of	ADP
easat-4382	3	42	container	container	NOUN
easat-4382	3	43	security	security	NOUN
easat-4382	3	44	in	in	ADP
easat-4382	3	45	application	application	NOUN
easat-4382	3	46	development	development	NOUN
easat-4382	3	47	zlatan	zlatan	ADJ
easat-4382	3	48	morić1	morić1	PROPN
easat-4382	3	49	*	*	PROPN
easat-4382	3	50	,	,	PUNCT
easat-4382	3	51	jasmin	jasmin	PROPN
easat-4382	3	52	redžepagić2	redžepagić2	PROPN
easat-4382	3	53	,	,	PUNCT
easat-4382	3	54	ivan	ivan	PROPN
easat-4382	3	55	bencarić3	bencarić3	PROPN
easat-4382	3	56	,	,	PUNCT
easat-4382	3	57	vedran	vedran	NOUN
easat-4382	3	58	dakić4	dakić4	NOUN
easat-4382	3	59	1,2,3algebra	1,2,3algebra	NUM
easat-4382	4	1	university	university	NOUN
easat-4382	4	2	,	,	PUNCT
easat-4382	4	3	department	department	NOUN
easat-4382	4	4	of	of	ADP
easat-4382	4	5	cybersecurity	cybersecurity	NOUN
easat-4382	4	6	and	and	CCONJ
easat-4382	4	7	operating	operating	NOUN
easat-4382	4	8	systems	system	NOUN
easat-4382	4	9	,	,	PUNCT
easat-4382	4	10	croatia	croatia	PROPN
easat-4382	4	11	;	;	PUNCT
easat-4382	4	12	zlatan.moric@algebra.hr	zlatan.moric@algebra.hr	PROPN
easat-4382	4	13	(	(	PUNCT
easat-4382	4	14	z.m	z.m	PROPN
easat-4382	4	15	.	.	PROPN
easat-4382	4	16	)	)	PUNCT
easat-4382	5	1	jasmin.redzepagic@algebra.hr	jasmin.redzepagic@algebra.hr	PROPN
easat-4382	5	2	(	(	PUNCT
easat-4382	5	3	j.r	j.r	PROPN
easat-4382	5	4	.	.	PROPN
easat-4382	5	5	)	)	PUNCT
easat-4382	6	1	ibencar@algebra.hr	ibencar@algebra.hr	PROPN
easat-4382	6	2	(	(	PUNCT
easat-4382	6	3	i.b	i.b	PROPN
easat-4382	6	4	.	.	PROPN
easat-4382	6	5	)	)	PUNCT
easat-4382	6	6	.	.	PUNCT
easat-4382	7	1	4algebra	4algebra	PROPN
easat-4382	7	2	university	university	NOUN
easat-4382	7	3	,	,	PUNCT
easat-4382	7	4	croatia	croatia	PROPN
easat-4382	7	5	;	;	PUNCT
easat-4382	7	6	vedran.dakic@algebra.hr	vedran.dakic@algebra.hr	PROPN
easat-4382	7	7	(	(	PUNCT
easat-4382	7	8	v.d	v.d	PROPN
easat-4382	7	9	.	.	PROPN
easat-4382	7	10	)	)	PUNCT
easat-4382	7	11	.	.	PUNCT
easat-4382	8	1	abstract	abstract	ADV
easat-4382	8	2	:	:	PUNCT
easat-4382	8	3	this	this	DET
easat-4382	8	4	paper	paper	NOUN
easat-4382	8	5	explores	explore	VERB
easat-4382	8	6	the	the	DET
easat-4382	8	7	importance	importance	NOUN
easat-4382	8	8	of	of	ADP
easat-4382	8	9	container	container	NOUN
easat-4382	8	10	security	security	NOUN
easat-4382	8	11	in	in	ADP
easat-4382	8	12	modern	modern	ADJ
easat-4382	8	13	ap	ap	PROPN
easat-4382	8	14	-	-	PUNCT
easat-4382	8	15	plication	plication	NOUN
easat-4382	8	16	development	development	NOUN
easat-4382	8	17	,	,	PUNCT
easat-4382	8	18	particularly	particularly	ADV
easat-4382	8	19	in	in	ADP
easat-4382	8	20	environments	environment	NOUN
easat-4382	8	21	using	use	VERB
easat-4382	8	22	microservices	microservice	NOUN
easat-4382	8	23	architectures	architecture	NOUN
easat-4382	8	24	and	and	CCONJ
easat-4382	8	25	devops	devop	NOUN
easat-4382	8	26	practices	practice	NOUN
easat-4382	8	27	.	.	PUNCT
easat-4382	9	1	containers	container	NOUN
easat-4382	9	2	,	,	PUNCT
easat-4382	9	3	by	by	ADP
easat-4382	9	4	providing	provide	VERB
easat-4382	9	5	lightweight	lightweight	ADJ
easat-4382	9	6	and	and	CCONJ
easat-4382	9	7	portable	portable	ADJ
easat-4382	9	8	virtualization	virtualization	NOUN
easat-4382	9	9	,	,	PUNCT
easat-4382	9	10	have	have	AUX
easat-4382	9	11	transformed	transform	VERB
easat-4382	9	12	application	application	NOUN
easat-4382	9	13	deployment	deployment	NOUN
easat-4382	9	14	,	,	PUNCT
easat-4382	9	15	enabling	enable	VERB
easat-4382	9	16	rapid	rapid	ADJ
easat-4382	9	17	and	and	CCONJ
easat-4382	9	18	consistent	consistent	ADJ
easat-4382	9	19	transitions	transition	NOUN
easat-4382	9	20	across	across	ADP
easat-4382	9	21	development	development	NOUN
easat-4382	9	22	,	,	PUNCT
easat-4382	9	23	testing	testing	NOUN
easat-4382	9	24	,	,	PUNCT
easat-4382	9	25	and	and	CCONJ
easat-4382	9	26	production	production	NOUN
easat-4382	9	27	stages	stage	NOUN
easat-4382	9	28	.	.	PUNCT
easat-4382	10	1	however	however	ADV
easat-4382	10	2	,	,	PUNCT
easat-4382	10	3	their	their	PRON
easat-4382	10	4	architecture	architecture	NOUN
easat-4382	10	5	and	and	CCONJ
easat-4382	10	6	ease	ease	NOUN
easat-4382	10	7	of	of	ADP
easat-4382	10	8	use	use	NOUN
easat-4382	10	9	introduced	introduce	VERB
easat-4382	10	10	unique	unique	ADJ
easat-4382	10	11	vulnerabilities	vulnerability	NOUN
easat-4382	10	12	.	.	PUNCT
easat-4382	11	1	this	this	DET
easat-4382	11	2	paper	paper	NOUN
easat-4382	11	3	investigates	investigate	VERB
easat-4382	11	4	the	the	DET
easat-4382	11	5	implications	implication	NOUN
easat-4382	11	6	of	of	ADP
easat-4382	11	7	these	these	DET
easat-4382	11	8	security	security	NOUN
easat-4382	11	9	concerns	concern	NOUN
easat-4382	11	10	and	and	CCONJ
easat-4382	11	11	outlines	outline	VERB
easat-4382	11	12	best	good	ADJ
easat-4382	11	13	practices	practice	NOUN
easat-4382	11	14	to	to	PART
easat-4382	11	15	mitigate	mitigate	VERB
easat-4382	11	16	them	they	PRON
easat-4382	11	17	.	.	PUNCT
easat-4382	12	1	examining	examine	VERB
easat-4382	12	2	containerization	containerization	NOUN
easat-4382	12	3	fundamentals	fundamental	NOUN
easat-4382	12	4	,	,	PUNCT
easat-4382	12	5	the	the	DET
easat-4382	12	6	paper	paper	NOUN
easat-4382	12	7	identifies	identify	VERB
easat-4382	12	8	core	core	NOUN
easat-4382	12	9	vulnerabilities	vulnerability	NOUN
easat-4382	12	10	,	,	PUNCT
easat-4382	12	11	including	include	VERB
easat-4382	12	12	misconfigurations	misconfiguration	NOUN
easat-4382	12	13	,	,	PUNCT
easat-4382	12	14	runtime	runtime	NOUN
easat-4382	12	15	attacks	attack	NOUN
easat-4382	12	16	,	,	PUNCT
easat-4382	12	17	and	and	CCONJ
easat-4382	12	18	orchestration	orchestration	NOUN
easat-4382	12	19	layer	layer	NOUN
easat-4382	12	20	risks	risk	NOUN
easat-4382	12	21	.	.	PUNCT
easat-4382	13	1	techniques	technique	NOUN
easat-4382	13	2	like	like	ADP
easat-4382	13	3	namespace	namespace	NOUN
easat-4382	13	4	isolation	isolation	NOUN
easat-4382	13	5	,	,	PUNCT
easat-4382	13	6	resource	resource	NOUN
easat-4382	13	7	allocation	allocation	NOUN
easat-4382	13	8	controls	control	NOUN
easat-4382	13	9	,	,	PUNCT
easat-4382	13	10	and	and	CCONJ
easat-4382	13	11	security	security	NOUN
easat-4382	13	12	tools	tool	NOUN
easat-4382	13	13	are	be	AUX
easat-4382	13	14	evaluated	evaluate	VERB
easat-4382	13	15	for	for	ADP
easat-4382	13	16	their	their	PRON
easat-4382	13	17	effectiveness	effectiveness	NOUN
easat-4382	13	18	in	in	ADP
easat-4382	13	19	hardening	harden	VERB
easat-4382	13	20	containerized	containerized	ADJ
easat-4382	13	21	environments	environment	NOUN
easat-4382	13	22	.	.	PUNCT
easat-4382	14	1	advanced	advanced	ADJ
easat-4382	14	2	methods	method	NOUN
easat-4382	14	3	,	,	PUNCT
easat-4382	14	4	such	such	ADJ
easat-4382	14	5	as	as	ADP
easat-4382	14	6	role	role	NOUN
easat-4382	14	7	-	-	PUNCT
easat-4382	14	8	based	base	VERB
easat-4382	14	9	access	access	NOUN
easat-4382	14	10	control	control	NOUN
easat-4382	14	11	,	,	PUNCT
easat-4382	14	12	vulnerability	vulnerability	NOUN
easat-4382	14	13	scanning	scanning	NOUN
easat-4382	14	14	,	,	PUNCT
easat-4382	14	15	and	and	CCONJ
easat-4382	14	16	secrets	secret	NOUN
easat-4382	14	17	management	management	NOUN
easat-4382	14	18	,	,	PUNCT
easat-4382	14	19	are	be	AUX
easat-4382	14	20	emphasized	emphasize	VERB
easat-4382	14	21	for	for	ADP
easat-4382	14	22	securing	secure	VERB
easat-4382	14	23	ci	ci	NOUN
easat-4382	14	24	/	/	SYM
easat-4382	14	25	cd	cd	NOUN
easat-4382	14	26	pipelines	pipeline	NOUN
easat-4382	14	27	.	.	PUNCT
easat-4382	15	1	the	the	DET
easat-4382	15	2	findings	finding	NOUN
easat-4382	15	3	underscore	underscore	VERB
easat-4382	15	4	the	the	DET
easat-4382	15	5	necessity	necessity	NOUN
easat-4382	15	6	of	of	ADP
easat-4382	15	7	integrating	integrate	VERB
easat-4382	15	8	robust	robust	ADJ
easat-4382	15	9	security	security	NOUN
easat-4382	15	10	measures	measure	NOUN
easat-4382	15	11	throughout	throughout	ADP
easat-4382	15	12	the	the	DET
easat-4382	15	13	container	container	NOUN
easat-4382	15	14	lifecycle	lifecycle	NOUN
easat-4382	15	15	to	to	PART
easat-4382	15	16	protect	protect	VERB
easat-4382	15	17	sensitive	sensitive	ADJ
easat-4382	15	18	data	datum	NOUN
easat-4382	15	19	and	and	CCONJ
easat-4382	15	20	maintain	maintain	VERB
easat-4382	15	21	application	application	NOUN
easat-4382	15	22	integrity	integrity	NOUN
easat-4382	15	23	.	.	PUNCT
easat-4382	16	1	by	by	ADP
easat-4382	16	2	adopting	adopt	VERB
easat-4382	16	3	a	a	DET
easat-4382	16	4	comprehensive	comprehensive	ADJ
easat-4382	16	5	container	container	NOUN
easat-4382	16	6	security	security	NOUN
easat-4382	16	7	strategy	strategy	NOUN
easat-4382	16	8	,	,	PUNCT
easat-4382	16	9	organizations	organization	NOUN
easat-4382	16	10	can	can	AUX
easat-4382	16	11	balance	balance	VERB
easat-4382	16	12	the	the	DET
easat-4382	16	13	scalability	scalability	NOUN
easat-4382	16	14	and	and	CCONJ
easat-4382	16	15	agility	agility	NOUN
easat-4382	16	16	of	of	ADP
easat-4382	16	17	containers	container	NOUN
easat-4382	16	18	and	and	CCONJ
easat-4382	16	19	maintain	maintain	VERB
easat-4382	16	20	the	the	DET
easat-4382	16	21	reliability	reliability	NOUN
easat-4382	16	22	and	and	CCONJ
easat-4382	16	23	safety	safety	NOUN
easat-4382	16	24	of	of	ADP
easat-4382	16	25	their	their	PRON
easat-4382	16	26	deployment	deployment	NOUN
easat-4382	16	27	infrastructure	infrastructure	NOUN
easat-4382	16	28	.	.	PUNCT
easat-4382	17	1	keywords	keyword	NOUN
easat-4382	17	2	:	:	PUNCT
easat-4382	17	3	containers	container	NOUN
easat-4382	17	4	,	,	PUNCT
easat-4382	17	5	docker	docker	PROPN
easat-4382	17	6	,	,	PUNCT
easat-4382	17	7	kubernetes	kubernete	NOUN
easat-4382	17	8	,	,	PUNCT
easat-4382	17	9	microservices	microservice	NOUN
easat-4382	17	10	,	,	PUNCT
easat-4382	17	11	pipelines	pipeline	NOUN
easat-4382	17	12	,	,	PUNCT
easat-4382	17	13	security	security	NOUN
easat-4382	17	14	.	.	PUNCT
easat-4382	18	1	1	1	X
easat-4382	18	2	.	.	X
easat-4382	18	3	introduction	introduction	NOUN
easat-4382	18	4	this	this	DET
easat-4382	18	5	paper	paper	NOUN
easat-4382	18	6	examines	examine	VERB
easat-4382	18	7	the	the	DET
easat-4382	18	8	essential	essential	ADJ
easat-4382	18	9	function	function	NOUN
easat-4382	18	10	of	of	ADP
easat-4382	18	11	container	container	NOUN
easat-4382	18	12	security	security	NOUN
easat-4382	18	13	in	in	ADP
easat-4382	18	14	contemporary	contemporary	ADJ
easat-4382	18	15	application	application	NOUN
easat-4382	18	16	development	development	NOUN
easat-4382	18	17	,	,	PUNCT
easat-4382	18	18	highlighting	highlight	VERB
easat-4382	18	19	its	its	PRON
easat-4382	18	20	importance	importance	NOUN
easat-4382	18	21	in	in	ADP
easat-4382	18	22	microservices	microservice	NOUN
easat-4382	18	23	designs	design	NOUN
easat-4382	18	24	and	and	CCONJ
easat-4382	18	25	devops	devop	NOUN
easat-4382	18	26	methodologies	methodology	NOUN
easat-4382	18	27	.	.	PUNCT
easat-4382	19	1	it	it	PRON
easat-4382	19	2	thoroughly	thoroughly	ADV
easat-4382	19	3	analyzes	analyze	VERB
easat-4382	19	4	containerization	containerization	NOUN
easat-4382	19	5	basics	basic	NOUN
easat-4382	19	6	,	,	PUNCT
easat-4382	19	7	highlighting	highlight	VERB
easat-4382	19	8	critical	critical	ADJ
easat-4382	19	9	vulnerabilities	vulnerability	NOUN
easat-4382	19	10	like	like	ADP
easat-4382	19	11	misconfigurations	misconfiguration	NOUN
easat-4382	19	12	,	,	PUNCT
easat-4382	19	13	runtime	runtime	NOUN
easat-4382	19	14	assaults	assault	NOUN
easat-4382	19	15	,	,	PUNCT
easat-4382	19	16	and	and	CCONJ
easat-4382	19	17	orchestration	orchestration	NOUN
easat-4382	19	18	layer	layer	NOUN
easat-4382	19	19	hazards	hazard	NOUN
easat-4382	19	20	.	.	PUNCT
easat-4382	20	1	it	it	PRON
easat-4382	20	2	recommends	recommend	VERB
easat-4382	20	3	robust	robust	ADJ
easat-4382	20	4	security	security	NOUN
easat-4382	20	5	measures	measure	NOUN
easat-4382	20	6	,	,	PUNCT
easat-4382	20	7	encompassing	encompass	VERB
easat-4382	20	8	namespace	namespace	NOUN
easat-4382	20	9	separation	separation	NOUN
easat-4382	20	10	,	,	PUNCT
easat-4382	20	11	resource	resource	NOUN
easat-4382	20	12	allocation	allocation	NOUN
easat-4382	20	13	rules	rule	NOUN
easat-4382	20	14	,	,	PUNCT
easat-4382	20	15	and	and	CCONJ
easat-4382	20	16	adopting	adopt	VERB
easat-4382	20	17	sophisticated	sophisticated	ADJ
easat-4382	20	18	techniques	technique	NOUN
easat-4382	20	19	such	such	ADJ
easat-4382	20	20	as	as	ADP
easat-4382	20	21	role	role	NOUN
easat-4382	20	22	-	-	PUNCT
easat-4382	20	23	based	base	VERB
easat-4382	20	24	access	access	NOUN
easat-4382	20	25	control	control	NOUN
easat-4382	20	26	,	,	PUNCT
easat-4382	20	27	vulnerability	vulnerability	NOUN
easat-4382	20	28	assessment	assessment	NOUN
easat-4382	20	29	,	,	PUNCT
easat-4382	20	30	and	and	CCONJ
easat-4382	20	31	secrets	secret	NOUN
easat-4382	20	32	management	management	NOUN
easat-4382	20	33	.	.	PUNCT
easat-4382	21	1	the	the	DET
easat-4382	21	2	results	result	NOUN
easat-4382	21	3	emphasize	emphasize	VERB
easat-4382	21	4	the	the	DET
easat-4382	21	5	necessity	necessity	NOUN
easat-4382	21	6	of	of	ADP
easat-4382	21	7	incorporating	incorporate	VERB
easat-4382	21	8	stringent	stringent	ADJ
easat-4382	21	9	security	security	NOUN
easat-4382	21	10	measures	measure	NOUN
easat-4382	21	11	throughout	throughout	ADP
easat-4382	21	12	the	the	DET
easat-4382	21	13	container	container	NOUN
easat-4382	21	14	lifecycle	lifecycle	NOUN
easat-4382	21	15	to	to	PART
easat-4382	21	16	maintain	maintain	VERB
easat-4382	21	17	application	application	NOUN
easat-4382	21	18	integrity	integrity	NOUN
easat-4382	21	19	and	and	CCONJ
easat-4382	21	20	protect	protect	VERB
easat-4382	21	21	sensitive	sensitive	ADJ
easat-4382	21	22	information	information	NOUN
easat-4382	21	23	.	.	PUNCT
easat-4382	22	1	this	this	DET
easat-4382	22	2	paper	paper	NOUN
easat-4382	22	3	has	have	VERB
easat-4382	22	4	two	two	NUM
easat-4382	22	5	main	main	ADJ
easat-4382	22	6	contributions	contribution	NOUN
easat-4382	22	7	to	to	ADP
easat-4382	22	8	the	the	DET
easat-4382	22	9	field	field	NOUN
easat-4382	22	10	:	:	PUNCT
easat-4382	22	11	•	•	ADP
easat-4382	22	12	it	it	PRON
easat-4382	22	13	comprehensively	comprehensively	ADV
easat-4382	22	14	examines	examine	VERB
easat-4382	22	15	fundamental	fundamental	ADJ
easat-4382	22	16	vulnerabilities	vulnerability	NOUN
easat-4382	22	17	in	in	ADP
easat-4382	22	18	containerized	containerized	ADJ
easat-4382	22	19	settings	setting	NOUN
easat-4382	22	20	and	and	CCONJ
easat-4382	22	21	their	their	PRON
easat-4382	22	22	consequences	consequence	NOUN
easat-4382	22	23	for	for	ADP
easat-4382	22	24	contemporary	contemporary	ADJ
easat-4382	22	25	application	application	NOUN
easat-4382	22	26	deployment	deployment	NOUN
easat-4382	22	27	;	;	PUNCT
easat-4382	22	28	•	•	ADP
easat-4382	22	29	it	it	PRON
easat-4382	22	30	delineates	delineate	VERB
easat-4382	22	31	a	a	DET
easat-4382	22	32	thorough	thorough	ADJ
easat-4382	22	33	framework	framework	NOUN
easat-4382	22	34	for	for	ADP
easat-4382	22	35	enterprises	enterprise	NOUN
easat-4382	22	36	to	to	ADP
easat-4382	22	37	reconcile	reconcile	ADJ
easat-4382	22	38	containers	container	NOUN
easat-4382	22	39	'	'	PART
easat-4382	22	40	scalability	scalability	NOUN
easat-4382	22	41	and	and	CCONJ
easat-4382	22	42	agility	agility	NOUN
easat-4382	22	43	with	with	ADP
easat-4382	22	44	their	their	PRON
easat-4382	22	45	infrastructure	infrastructure	NOUN
easat-4382	22	46	's	's	PART
easat-4382	22	47	reliability	reliability	NOUN
easat-4382	22	48	and	and	CCONJ
easat-4382	22	49	safety	safety	NOUN
easat-4382	22	50	,	,	PUNCT
easat-4382	22	51	thereby	thereby	ADV
easat-4382	22	52	solving	solve	VERB
easat-4382	22	53	a	a	DET
easat-4382	22	54	significant	significant	ADJ
easat-4382	22	55	deficiency	deficiency	NOUN
easat-4382	22	56	in	in	ADP
easat-4382	22	57	container	container	NOUN
easat-4382	22	58	security	security	NOUN
easat-4382	22	59	research	research	NOUN
easat-4382	22	60	.	.	PUNCT
easat-4382	23	1	the	the	DET
easat-4382	23	2	rest	rest	NOUN
easat-4382	23	3	of	of	ADP
easat-4382	23	4	this	this	DET
easat-4382	23	5	paper	paper	NOUN
easat-4382	23	6	is	be	AUX
easat-4382	23	7	organized	organize	VERB
easat-4382	23	8	as	as	SCONJ
easat-4382	23	9	follows	follow	VERB
easat-4382	23	10	.	.	PUNCT
easat-4382	24	1	section	section	NOUN
easat-4382	24	2	2	2	NUM
easat-4382	24	3	presents	present	VERB
easat-4382	24	4	the	the	DET
easat-4382	24	5	literature	literature	NOUN
easat-4382	24	6	review	review	NOUN
easat-4382	24	7	related	relate	VERB
easat-4382	24	8	to	to	ADP
easat-4382	24	9	the	the	DET
easat-4382	24	10	research	research	NOUN
easat-4382	24	11	field	field	NOUN
easat-4382	24	12	,	,	PUNCT
easat-4382	24	13	followed	follow	VERB
easat-4382	24	14	by	by	ADP
easat-4382	24	15	the	the	DET
easat-4382	24	16	section	section	NOUN
easat-4382	24	17	about	about	ADP
easat-4382	24	18	the	the	DET
easat-4382	24	19	fundamentals	fundamental	NOUN
easat-4382	24	20	of	of	ADP
easat-4382	24	21	containerization	containerization	NOUN
easat-4382	24	22	and	and	CCONJ
easat-4382	24	23	its	its	PRON
easat-4382	24	24	role	role	NOUN
easat-4382	24	25	in	in	ADP
easat-4382	24	26	modern	modern	ADJ
easat-4382	24	27	application	application	NOUN
easat-4382	24	28	development	development	NOUN
easat-4382	24	29	.	.	PUNCT
easat-4382	25	1	section	section	NOUN
easat-4382	25	2	4	4	NUM
easat-4382	25	3	delves	delf	NOUN
easat-4382	25	4	into	into	ADP
easat-4382	25	5	specific	specific	ADJ
easat-4382	25	6	container	container	NOUN
easat-4382	25	7	security	security	NOUN
easat-4382	25	8	challenges	challenge	NOUN
easat-4382	25	9	,	,	PUNCT
easat-4382	25	10	exploring	explore	VERB
easat-4382	25	11	https://orcid.org/0000-0002-5566-1581	https://orcid.org/0000-0002-5566-1581	PROPN
easat-4382	25	12	https://orcid.org/0009-0004-7184-0987	https://orcid.org/0009-0004-7184-0987	NOUN
easat-4382	25	13	https://orcid.org/0000-0001-8638-6044	https://orcid.org/0000-0001-8638-6044	PROPN
easat-4382	25	14	1244	1244	PROPN
easat-4382	25	15	edelweiss	edelweiss	PROPN
easat-4382	25	16	applied	apply	VERB
easat-4382	25	17	science	science	NOUN
easat-4382	25	18	and	and	CCONJ
easat-4382	25	19	technology	technology	NOUN
easat-4382	25	20	issn	issn	PROPN
easat-4382	25	21	:	:	PUNCT
easat-4382	25	22	2576	2576	NUM
easat-4382	25	23	-	-	SYM
easat-4382	25	24	8484	8484	NUM
easat-4382	25	25	vol	vol	NOUN
easat-4382	25	26	.	.	PROPN
easat-4382	26	1	9	9	NUM
easat-4382	26	2	,	,	PUNCT
easat-4382	26	3	no	no	INTJ
easat-4382	26	4	.	.	NOUN
easat-4382	26	5	1	1	NUM
easat-4382	26	6	:	:	PUNCT
easat-4382	26	7	1243	1243	NUM
easat-4382	26	8	-	-	SYM
easat-4382	26	9	1261	1261	NUM
easat-4382	26	10	,	,	PUNCT
easat-4382	26	11	2025	2025	NUM
easat-4382	26	12	doi	doi	NOUN
easat-4382	26	13	:	:	PUNCT
easat-4382	26	14	10.55214/25768484.v9i1.4382	10.55214/25768484.v9i1.4382	NUM
easat-4382	26	15	©	©	PROPN
easat-4382	26	16	2025	2025	NUM
easat-4382	26	17	by	by	ADP
easat-4382	26	18	the	the	DET
easat-4382	26	19	authors	author	NOUN
easat-4382	26	20	;	;	PUNCT
easat-4382	27	1	licensee	licensee	PROPN
easat-4382	27	2	learning	learn	VERB
easat-4382	27	3	gate	gate	NOUN
easat-4382	27	4	vulnerabilities	vulnerability	NOUN
easat-4382	27	5	and	and	CCONJ
easat-4382	27	6	mitigation	mitigation	NOUN
easat-4382	27	7	strategies	strategy	NOUN
easat-4382	27	8	.	.	PUNCT
easat-4382	28	1	section	section	NOUN
easat-4382	28	2	5	5	NUM
easat-4382	28	3	discusses	discuss	VERB
easat-4382	28	4	the	the	DET
easat-4382	28	5	broader	broad	ADJ
easat-4382	28	6	threat	threat	NOUN
easat-4382	28	7	landscape	landscape	NOUN
easat-4382	28	8	,	,	PUNCT
easat-4382	28	9	including	include	VERB
easat-4382	28	10	image	image	NOUN
easat-4382	28	11	vulnerabilities	vulnerability	NOUN
easat-4382	28	12	,	,	PUNCT
easat-4382	28	13	runtime	runtime	NOUN
easat-4382	28	14	attacks	attack	NOUN
easat-4382	28	15	,	,	PUNCT
easat-4382	28	16	and	and	CCONJ
easat-4382	28	17	orchestration	orchestration	NOUN
easat-4382	28	18	layer	layer	NOUN
easat-4382	28	19	risks	risk	NOUN
easat-4382	28	20	.	.	PUNCT
easat-4382	29	1	sections	section	NOUN
easat-4382	29	2	6	6	NUM
easat-4382	29	3	and	and	CCONJ
easat-4382	29	4	7	7	NUM
easat-4382	29	5	detail	detail	NOUN
easat-4382	29	6	the	the	DET
easat-4382	29	7	essential	essential	ADJ
easat-4382	29	8	components	component	NOUN
easat-4382	29	9	of	of	ADP
easat-4382	29	10	container	container	NOUN
easat-4382	29	11	security	security	NOUN
easat-4382	29	12	,	,	PUNCT
easat-4382	29	13	such	such	ADJ
easat-4382	29	14	as	as	ADP
easat-4382	29	15	runtime	runtime	NOUN
easat-4382	29	16	,	,	PUNCT
easat-4382	29	17	image	image	NOUN
easat-4382	29	18	,	,	PUNCT
easat-4382	29	19	and	and	CCONJ
easat-4382	29	20	host	host	NOUN
easat-4382	29	21	security	security	NOUN
easat-4382	29	22	.	.	PUNCT
easat-4382	30	1	section	section	NOUN
easat-4382	30	2	8	8	NUM
easat-4382	30	3	highlights	highlight	NOUN
easat-4382	30	4	security	security	NOUN
easat-4382	30	5	best	good	ADJ
easat-4382	30	6	practices	practice	NOUN
easat-4382	30	7	for	for	ADP
easat-4382	30	8	container	container	NOUN
easat-4382	30	9	development	development	NOUN
easat-4382	30	10	and	and	CCONJ
easat-4382	30	11	deployment	deployment	NOUN
easat-4382	30	12	,	,	PUNCT
easat-4382	30	13	focusing	focus	VERB
easat-4382	30	14	on	on	ADP
easat-4382	30	15	automation	automation	NOUN
easat-4382	30	16	and	and	CCONJ
easat-4382	30	17	shift	shift	NOUN
easat-4382	30	18	-	-	PUNCT
easat-4382	30	19	left	leave	VERB
easat-4382	30	20	strategies	strategy	NOUN
easat-4382	30	21	.	.	PUNCT
easat-4382	31	1	finally	finally	ADV
easat-4382	31	2	,	,	PUNCT
easat-4382	31	3	sections	section	NOUN
easat-4382	31	4	9	9	NUM
easat-4382	31	5	and	and	CCONJ
easat-4382	31	6	10	10	NUM
easat-4382	31	7	discuss	discuss	VERB
easat-4382	31	8	emerging	emerge	VERB
easat-4382	31	9	trends	trend	NOUN
easat-4382	31	10	in	in	ADP
easat-4382	31	11	container	container	NOUN
easat-4382	31	12	security	security	NOUN
easat-4382	31	13	,	,	PUNCT
easat-4382	31	14	such	such	ADJ
easat-4382	31	15	as	as	ADP
easat-4382	31	16	zero	zero	NUM
easat-4382	31	17	-	-	PUNCT
easat-4382	31	18	trust	trust	NOUN
easat-4382	31	19	architectures	architecture	NOUN
easat-4382	31	20	and	and	CCONJ
easat-4382	31	21	ai	ai	AUX
easat-4382	31	22	-	-	PUNCT
easat-4382	31	23	driven	drive	VERB
easat-4382	31	24	threat	threat	NOUN
easat-4382	31	25	detection	detection	NOUN
easat-4382	31	26	,	,	PUNCT
easat-4382	31	27	setting	set	VERB
easat-4382	31	28	the	the	DET
easat-4382	31	29	stage	stage	NOUN
easat-4382	31	30	for	for	ADP
easat-4382	31	31	future	future	ADJ
easat-4382	31	32	research	research	NOUN
easat-4382	31	33	and	and	CCONJ
easat-4382	31	34	development	development	NOUN
easat-4382	31	35	in	in	ADP
easat-4382	31	36	the	the	DET
easat-4382	31	37	field	field	NOUN
easat-4382	31	38	,	,	PUNCT
easat-4382	31	39	as	as	ADV
easat-4382	31	40	well	well	ADV
easat-4382	31	41	as	as	ADP
easat-4382	31	42	the	the	DET
easat-4382	31	43	paper	paper	NOUN
easat-4382	31	44	's	's	PART
easat-4382	31	45	conclusions	conclusion	NOUN
easat-4382	31	46	.	.	PUNCT
easat-4382	32	1	2	2	X
easat-4382	32	2	.	.	NUM
easat-4382	32	3	related	relate	VERB
easat-4382	32	4	works	work	NOUN
easat-4382	32	5	containers	container	NOUN
easat-4382	32	6	are	be	AUX
easat-4382	32	7	a	a	DET
easat-4382	32	8	light	light	ADJ
easat-4382	32	9	and	and	CCONJ
easat-4382	32	10	portable	portable	ADJ
easat-4382	32	11	form	form	NOUN
easat-4382	32	12	of	of	ADP
easat-4382	32	13	virtualization	virtualization	NOUN
easat-4382	32	14	that	that	PRON
easat-4382	32	15	can	can	AUX
easat-4382	32	16	package	package	VERB
easat-4382	32	17	an	an	DET
easat-4382	32	18	application	application	NOUN
easat-4382	32	19	and	and	CCONJ
easat-4382	32	20	all	all	DET
easat-4382	32	21	its	its	PRON
easat-4382	32	22	dependencies	dependency	NOUN
easat-4382	32	23	in	in	ADP
easat-4382	32	24	the	the	DET
easat-4382	32	25	form	form	NOUN
easat-4382	32	26	of	of	ADP
easat-4382	32	27	an	an	DET
easat-4382	32	28	"	"	PUNCT
easat-4382	32	29	image	image	NOUN
easat-4382	32	30	,	,	PUNCT
easat-4382	32	31	"	"	PUNCT
easat-4382	32	32	which	which	PRON
easat-4382	32	33	allows	allow	VERB
easat-4382	32	34	them	they	PRON
easat-4382	32	35	to	to	PART
easat-4382	32	36	run	run	VERB
easat-4382	32	37	consistently	consistently	ADV
easat-4382	32	38	across	across	ADP
easat-4382	32	39	different	different	ADJ
easat-4382	32	40	computing	computing	NOUN
easat-4382	32	41	environments	environment	NOUN
easat-4382	33	1	[	[	X
easat-4382	33	2	1	1	NUM
easat-4382	33	3	]	]	PUNCT
easat-4382	33	4	.	.	PUNCT
easat-4382	34	1	in	in	ADP
easat-4382	34	2	contrast	contrast	NOUN
easat-4382	34	3	to	to	ADP
easat-4382	34	4	standard	standard	ADJ
easat-4382	34	5	virtual	virtual	ADJ
easat-4382	34	6	machines	machine	NOUN
easat-4382	34	7	,	,	PUNCT
easat-4382	34	8	which	which	PRON
easat-4382	34	9	require	require	VERB
easat-4382	34	10	separate	separate	ADJ
easat-4382	34	11	operating	operating	NOUN
easat-4382	34	12	system	system	NOUN
easat-4382	34	13	instances	instance	NOUN
easat-4382	34	14	for	for	ADP
easat-4382	34	15	each	each	DET
easat-4382	34	16	application	application	NOUN
easat-4382	34	17	,	,	PUNCT
easat-4382	34	18	containers	container	NOUN
easat-4382	34	19	share	share	VERB
easat-4382	34	20	the	the	DET
easat-4382	34	21	host	host	NOUN
easat-4382	34	22	operating	operating	NOUN
easat-4382	34	23	system	system	NOUN
easat-4382	34	24	kernel	kernel	NOUN
easat-4382	34	25	but	but	CCONJ
easat-4382	34	26	isolate	isolate	VERB
easat-4382	34	27	application	application	NOUN
easat-4382	34	28	processes	process	NOUN
easat-4382	34	29	,	,	PUNCT
easat-4382	34	30	creating	create	VERB
easat-4382	34	31	a	a	DET
easat-4382	34	32	much	much	ADV
easat-4382	34	33	more	more	ADJ
easat-4382	34	34	resource	resource	NOUN
easat-4382	34	35	-	-	PUNCT
easat-4382	34	36	efficient	efficient	ADJ
easat-4382	34	37	model	model	NOUN
easat-4382	34	38	[	[	X
easat-4382	34	39	2	2	NUM
easat-4382	34	40	]	]	PUNCT
easat-4382	34	41	.	.	PUNCT
easat-4382	35	1	technologies	technology	NOUN
easat-4382	35	2	like	like	ADP
easat-4382	35	3	docker	docker	PROPN
easat-4382	35	4	can	can	AUX
easat-4382	35	5	build	build	VERB
easat-4382	35	6	,	,	PUNCT
easat-4382	35	7	deploy	deploy	VERB
easat-4382	35	8	,	,	PUNCT
easat-4382	35	9	and	and	CCONJ
easat-4382	35	10	manage	manage	VERB
easat-4382	35	11	these	these	DET
easat-4382	35	12	containers	container	NOUN
easat-4382	35	13	[	[	X
easat-4382	35	14	3	3	X
easat-4382	35	15	]	]	PUNCT
easat-4382	35	16	and	and	CCONJ
easat-4382	35	17	their	their	PRON
easat-4382	35	18	images	image	NOUN
easat-4382	35	19	,	,	PUNCT
easat-4382	35	20	while	while	SCONJ
easat-4382	35	21	orchestration	orchestration	NOUN
easat-4382	35	22	platforms	platform	NOUN
easat-4382	35	23	like	like	ADP
easat-4382	35	24	kubernetes	kubernete	NOUN
easat-4382	35	25	[	[	X
easat-4382	35	26	4	4	NUM
easat-4382	35	27	]	]	SYM
easat-4382	35	28	automate	automate	ADJ
easat-4382	35	29	containerized	containerized	ADJ
easat-4382	35	30	applications	application	NOUN
easat-4382	35	31	'	'	PART
easat-4382	35	32	deployment	deployment	NOUN
easat-4382	35	33	,	,	PUNCT
easat-4382	35	34	scaling	scaling	NOUN
easat-4382	35	35	,	,	PUNCT
easat-4382	35	36	and	and	CCONJ
easat-4382	35	37	management	management	NOUN
easat-4382	35	38	over	over	ADP
easat-4382	35	39	many	many	ADJ
easat-4382	35	40	machines	machine	NOUN
easat-4382	35	41	organized	organize	VERB
easat-4382	35	42	in	in	ADP
easat-4382	35	43	clusters	cluster	NOUN
easat-4382	35	44	.	.	PUNCT
easat-4382	36	1	due	due	ADP
easat-4382	36	2	to	to	ADP
easat-4382	36	3	their	their	PRON
easat-4382	36	4	efficiency	efficiency	NOUN
easat-4382	36	5	,	,	PUNCT
easat-4382	36	6	scalability	scalability	NOUN
easat-4382	36	7	,	,	PUNCT
easat-4382	36	8	and	and	CCONJ
easat-4382	36	9	flexibility	flexibility	NOUN
easat-4382	36	10	,	,	PUNCT
easat-4382	36	11	containers	container	NOUN
easat-4382	36	12	have	have	AUX
easat-4382	36	13	become	become	VERB
easat-4382	36	14	popular	popular	ADJ
easat-4382	36	15	in	in	ADP
easat-4382	36	16	application	application	NOUN
easat-4382	36	17	development	development	NOUN
easat-4382	36	18	,	,	PUNCT
easat-4382	36	19	especially	especially	ADV
easat-4382	36	20	in	in	ADP
easat-4382	36	21	environments	environment	NOUN
easat-4382	36	22	that	that	PRON
easat-4382	36	23	follow	follow	VERB
easat-4382	36	24	devops	devop	NOUN
easat-4382	36	25	and	and	CCONJ
easat-4382	36	26	ci	ci	NOUN
easat-4382	36	27	/	/	SYM
easat-4382	36	28	cd	cd	NOUN
easat-4382	36	29	principles	principle	NOUN
easat-4382	36	30	.	.	PUNCT
easat-4382	37	1	containers	container	NOUN
easat-4382	37	2	can	can	AUX
easat-4382	37	3	provide	provide	VERB
easat-4382	37	4	faster	fast	ADJ
easat-4382	37	5	software	software	NOUN
easat-4382	37	6	delivery	delivery	NOUN
easat-4382	37	7	by	by	ADP
easat-4382	37	8	ensuring	ensure	VERB
easat-4382	37	9	consistent	consistent	ADJ
easat-4382	37	10	behavior	behavior	NOUN
easat-4382	37	11	from	from	ADP
easat-4382	37	12	development	development	NOUN
easat-4382	37	13	through	through	ADP
easat-4382	37	14	production	production	NOUN
easat-4382	37	15	.	.	PUNCT
easat-4382	38	1	additionally	additionally	ADV
easat-4382	38	2	,	,	PUNCT
easat-4382	38	3	they	they	PRON
easat-4382	38	4	reduce	reduce	VERB
easat-4382	38	5	infrastructure	infrastructure	NOUN
easat-4382	38	6	costs	cost	NOUN
easat-4382	38	7	and	and	CCONJ
easat-4382	38	8	enhance	enhance	VERB
easat-4382	38	9	application	application	NOUN
easat-4382	38	10	portability	portability	NOUN
easat-4382	38	11	,	,	PUNCT
easat-4382	38	12	making	make	VERB
easat-4382	38	13	them	they	PRON
easat-4382	38	14	ideal	ideal	ADJ
easat-4382	38	15	for	for	ADP
easat-4382	38	16	modern	modern	ADJ
easat-4382	38	17	,	,	PUNCT
easat-4382	38	18	microservice	microservice	NOUN
easat-4382	38	19	-	-	PUNCT
easat-4382	38	20	based	base	VERB
easat-4382	38	21	architecture	architecture	NOUN
easat-4382	38	22	.	.	PUNCT
easat-4382	39	1	the	the	DET
easat-4382	39	2	popularity	popularity	NOUN
easat-4382	39	3	of	of	ADP
easat-4382	39	4	containers	container	NOUN
easat-4382	39	5	has	have	AUX
easat-4382	39	6	paralleled	parallel	VERB
easat-4382	39	7	the	the	DET
easat-4382	39	8	rise	rise	NOUN
easat-4382	39	9	of	of	ADP
easat-4382	39	10	devops	devop	NOUN
easat-4382	39	11	[	[	X
easat-4382	39	12	5	5	NUM
easat-4382	39	13	]	]	PUNCT
easat-4382	39	14	a	a	DET
easat-4382	39	15	development	development	NOUN
easat-4382	39	16	approach	approach	NOUN
easat-4382	39	17	emphasizing	emphasize	VERB
easat-4382	39	18	collaboration	collaboration	NOUN
easat-4382	39	19	,	,	PUNCT
easat-4382	39	20	automation	automation	NOUN
easat-4382	39	21	,	,	PUNCT
easat-4382	39	22	and	and	CCONJ
easat-4382	39	23	continuous	continuous	ADJ
easat-4382	39	24	improvement	improvement	NOUN
easat-4382	39	25	between	between	ADP
easat-4382	39	26	software	software	NOUN
easat-4382	39	27	development	development	NOUN
easat-4382	39	28	and	and	CCONJ
easat-4382	39	29	it	it	PRON
easat-4382	39	30	operations	operation	NOUN
easat-4382	39	31	.	.	PUNCT
easat-4382	40	1	containers	container	NOUN
easat-4382	40	2	play	play	VERB
easat-4382	40	3	a	a	DET
easat-4382	40	4	significant	significant	ADJ
easat-4382	40	5	role	role	NOUN
easat-4382	40	6	in	in	ADP
easat-4382	40	7	devops	devop	NOUN
easat-4382	40	8	by	by	ADP
easat-4382	40	9	providing	provide	VERB
easat-4382	40	10	rapid	rapid	ADJ
easat-4382	40	11	but	but	CCONJ
easat-4382	40	12	consistent	consistent	ADJ
easat-4382	40	13	deployments	deployment	NOUN
easat-4382	40	14	.	.	PUNCT
easat-4382	41	1	at	at	ADP
easat-4382	41	2	the	the	DET
easat-4382	41	3	same	same	ADJ
easat-4382	41	4	time	time	NOUN
easat-4382	41	5	,	,	PUNCT
easat-4382	41	6	they	they	PRON
easat-4382	41	7	enable	enable	VERB
easat-4382	41	8	continuous	continuous	ADJ
easat-4382	41	9	integration	integration	NOUN
easat-4382	41	10	and	and	CCONJ
easat-4382	41	11	continuous	continuous	ADJ
easat-4382	41	12	deployment	deployment	NOUN
easat-4382	41	13	(	(	PUNCT
easat-4382	41	14	ci	ci	NOUN
easat-4382	41	15	/	/	SYM
easat-4382	41	16	cd	cd	PROPN
easat-4382	41	17	)	)	PUNCT
easat-4382	41	18	pipelines	pipeline	NOUN
easat-4382	41	19	,	,	PUNCT
easat-4382	41	20	which	which	PRON
easat-4382	41	21	are	be	AUX
easat-4382	41	22	a	a	DET
easat-4382	41	23	critical	critical	ADJ
easat-4382	41	24	part	part	NOUN
easat-4382	41	25	of	of	ADP
easat-4382	41	26	devops	devop	NOUN
easat-4382	41	27	.	.	PUNCT
easat-4382	42	1	with	with	ADP
easat-4382	42	2	containers	container	NOUN
easat-4382	42	3	,	,	PUNCT
easat-4382	42	4	applications	application	NOUN
easat-4382	42	5	and	and	CCONJ
easat-4382	42	6	all	all	DET
easat-4382	42	7	the	the	DET
easat-4382	42	8	requirements	requirement	NOUN
easat-4382	42	9	that	that	PRON
easat-4382	42	10	form	form	VERB
easat-4382	42	11	their	their	PRON
easat-4382	42	12	dependencies	dependency	NOUN
easat-4382	42	13	can	can	AUX
easat-4382	42	14	be	be	AUX
easat-4382	42	15	bundled	bundle	VERB
easat-4382	42	16	into	into	ADP
easat-4382	42	17	isolated	isolate	VERB
easat-4382	42	18	,	,	PUNCT
easat-4382	42	19	portable	portable	ADJ
easat-4382	42	20	units	unit	NOUN
easat-4382	42	21	,	,	PUNCT
easat-4382	42	22	ensuring	ensure	VERB
easat-4382	42	23	they	they	PRON
easat-4382	42	24	function	function	VERB
easat-4382	42	25	uniformly	uniformly	ADV
easat-4382	42	26	across	across	ADP
easat-4382	42	27	development	development	NOUN
easat-4382	42	28	,	,	PUNCT
easat-4382	42	29	testing	testing	NOUN
easat-4382	42	30	,	,	PUNCT
easat-4382	42	31	and	and	CCONJ
easat-4382	42	32	production	production	NOUN
easat-4382	42	33	environments	environment	NOUN
easat-4382	42	34	.	.	PUNCT
easat-4382	43	1	this	this	DET
easat-4382	43	2	consistency	consistency	NOUN
easat-4382	43	3	minimizes	minimize	VERB
easat-4382	43	4	the	the	DET
easat-4382	43	5	"	"	PUNCT
easat-4382	43	6	it	it	PRON
easat-4382	43	7	works	work	VERB
easat-4382	43	8	on	on	ADP
easat-4382	43	9	my	my	PRON
easat-4382	43	10	machine	machine	NOUN
easat-4382	43	11	"	"	PUNCT
easat-4382	43	12	problem	problem	NOUN
easat-4382	43	13	,	,	PUNCT
easat-4382	43	14	streamlines	streamlines	NOUN
easat-4382	43	15	testing	testing	NOUN
easat-4382	43	16	,	,	PUNCT
easat-4382	43	17	and	and	CCONJ
easat-4382	43	18	can	can	AUX
easat-4382	43	19	accelerate	accelerate	VERB
easat-4382	43	20	delivery	delivery	NOUN
easat-4382	43	21	.	.	PUNCT
easat-4382	44	1	additionally	additionally	ADV
easat-4382	44	2	,	,	PUNCT
easat-4382	44	3	container	container	NOUN
easat-4382	44	4	orchestration	orchestration	NOUN
easat-4382	44	5	platforms	platform	NOUN
easat-4382	44	6	like	like	ADP
easat-4382	44	7	kubernetes	kubernete	NOUN
easat-4382	44	8	automate	automate	ADJ
easat-4382	44	9	tasks	task	NOUN
easat-4382	44	10	such	such	ADJ
easat-4382	44	11	as	as	ADP
easat-4382	44	12	scaling	scale	VERB
easat-4382	44	13	and	and	CCONJ
easat-4382	44	14	managing	manage	VERB
easat-4382	44	15	deployments	deployment	NOUN
easat-4382	44	16	,	,	PUNCT
easat-4382	44	17	allowing	allow	VERB
easat-4382	44	18	teams	team	NOUN
easat-4382	44	19	to	to	PART
easat-4382	44	20	handle	handle	VERB
easat-4382	44	21	complex	complex	ADJ
easat-4382	44	22	applications	application	NOUN
easat-4382	44	23	more	more	ADV
easat-4382	44	24	quickly	quickly	ADV
easat-4382	44	25	than	than	ADP
easat-4382	44	26	when	when	SCONJ
easat-4382	44	27	using	use	VERB
easat-4382	44	28	traditional	traditional	ADJ
easat-4382	44	29	approaches	approach	NOUN
easat-4382	44	30	.	.	PUNCT
easat-4382	45	1	figure	figure	NOUN
easat-4382	45	2	1	1	NUM
easat-4382	45	3	.	.	X
easat-4382	45	4	ci	ci	PROPN
easat-4382	45	5	/	/	SYM
easat-4382	45	6	cd	cd	NOUN
easat-4382	45	7	pipeline	pipeline	NOUN
easat-4382	45	8	(	(	PUNCT
easat-4382	45	9	from	from	ADP
easat-4382	45	10	red	red	ADJ
easat-4382	45	11	hat	hat	NOUN
easat-4382	46	1	[	[	X
easat-4382	46	2	6	6	NUM
easat-4382	46	3	]	]	PUNCT
easat-4382	46	4	.	.	PUNCT
easat-4382	47	1	this	this	DET
easat-4382	47	2	automation	automation	NOUN
easat-4382	47	3	fits	fit	VERB
easat-4382	47	4	perfectly	perfectly	ADV
easat-4382	47	5	with	with	ADP
easat-4382	47	6	devops	devop	NOUN
easat-4382	47	7	principles	principle	NOUN
easat-4382	47	8	,	,	PUNCT
easat-4382	47	9	providing	provide	VERB
easat-4382	47	10	efficiency	efficiency	NOUN
easat-4382	47	11	and	and	CCONJ
easat-4382	47	12	supporting	support	VERB
easat-4382	47	13	agile	agile	ADJ
easat-4382	47	14	methodologies	methodology	NOUN
easat-4382	47	15	where	where	SCONJ
easat-4382	47	16	frequent	frequent	ADJ
easat-4382	47	17	,	,	PUNCT
easat-4382	47	18	reliable	reliable	ADJ
easat-4382	47	19	software	software	NOUN
easat-4382	47	20	updates	update	NOUN
easat-4382	47	21	are	be	AUX
easat-4382	47	22	critical	critical	ADJ
easat-4382	47	23	.	.	PUNCT
easat-4382	48	1	as	as	ADP
easat-4382	48	2	a	a	DET
easat-4382	48	3	result	result	NOUN
easat-4382	48	4	,	,	PUNCT
easat-4382	48	5	containers	container	NOUN
easat-4382	48	6	have	have	AUX
easat-4382	48	7	become	become	VERB
easat-4382	48	8	an	an	DET
easat-4382	48	9	indispensable	indispensable	ADJ
easat-4382	48	10	part	part	NOUN
easat-4382	48	11	of	of	ADP
easat-4382	48	12	a	a	DET
easat-4382	48	13	modern	modern	ADJ
easat-4382	48	14	devops	devop	NOUN
easat-4382	48	15	process	process	NOUN
easat-4382	48	16	,	,	PUNCT
easat-4382	48	17	allowing	allow	VERB
easat-4382	48	18	organizations	organization	NOUN
easat-4382	48	19	to	to	PART
easat-4382	48	20	innovate	innovate	VERB
easat-4382	48	21	faster	fast	ADV
easat-4382	48	22	while	while	SCONJ
easat-4382	48	23	maintaining	maintain	VERB
easat-4382	48	24	high	high	ADJ
easat-4382	48	25	standards	standard	NOUN
easat-4382	48	26	of	of	ADP
easat-4382	48	27	quality	quality	NOUN
easat-4382	48	28	and	and	CCONJ
easat-4382	48	29	reliability	reliability	NOUN
easat-4382	48	30	.	.	PUNCT
easat-4382	49	1	as	as	ADP
easat-4382	49	2	with	with	ADP
easat-4382	49	3	all	all	DET
easat-4382	49	4	new	new	ADJ
easat-4382	49	5	technologies	technology	NOUN
easat-4382	49	6	,	,	PUNCT
easat-4382	49	7	containers	container	NOUN
easat-4382	49	8	also	also	ADV
easat-4382	49	9	raise	raise	VERB
easat-4382	49	10	various	various	ADJ
easat-4382	49	11	security	security	NOUN
easat-4382	49	12	concerns	concern	NOUN
easat-4382	49	13	that	that	PRON
easat-4382	49	14	must	must	AUX
easat-4382	49	15	be	be	AUX
easat-4382	49	16	addressed	address	VERB
easat-4382	49	17	[	[	PUNCT
easat-4382	49	18	6	6	NUM
easat-4382	49	19	]	]	PUNCT
easat-4382	49	20	.	.	PUNCT
easat-4382	50	1	their	their	PRON
easat-4382	50	2	security	security	NOUN
easat-4382	50	3	plays	play	VERB
easat-4382	50	4	a	a	DET
easat-4382	50	5	critical	critical	ADJ
easat-4382	50	6	role	role	NOUN
easat-4382	50	7	because	because	SCONJ
easat-4382	50	8	while	while	SCONJ
easat-4382	50	9	offering	offer	VERB
easat-4382	50	10	powerful	powerful	ADJ
easat-4382	50	11	benefits	benefit	NOUN
easat-4382	50	12	like	like	ADP
easat-4382	50	13	scalability	scalability	NOUN
easat-4382	50	14	and	and	CCONJ
easat-4382	50	15	1245	1245	NUM
easat-4382	50	16	edelweiss	edelweiss	PROPN
easat-4382	50	17	applied	apply	VERB
easat-4382	50	18	science	science	NOUN
easat-4382	50	19	and	and	CCONJ
easat-4382	50	20	technology	technology	NOUN
easat-4382	50	21	issn	issn	PROPN
easat-4382	50	22	:	:	PUNCT
easat-4382	50	23	2576	2576	NUM
easat-4382	50	24	-	-	SYM
easat-4382	50	25	8484	8484	NUM
easat-4382	50	26	vol	vol	NOUN
easat-4382	50	27	.	.	PROPN
easat-4382	51	1	9	9	NUM
easat-4382	51	2	,	,	PUNCT
easat-4382	51	3	no	no	INTJ
easat-4382	51	4	.	.	NOUN
easat-4382	51	5	1	1	NUM
easat-4382	51	6	:	:	PUNCT
easat-4382	51	7	1243	1243	NUM
easat-4382	51	8	-	-	SYM
easat-4382	51	9	1261	1261	NUM
easat-4382	51	10	,	,	PUNCT
easat-4382	51	11	2025	2025	NUM
easat-4382	51	12	doi	doi	NOUN
easat-4382	51	13	:	:	PUNCT
easat-4382	51	14	10.55214/25768484.v9i1.4382	10.55214/25768484.v9i1.4382	NUM
easat-4382	51	15	©	©	PROPN
easat-4382	51	16	2025	2025	NUM
easat-4382	51	17	by	by	ADP
easat-4382	51	18	the	the	DET
easat-4382	51	19	authors	author	NOUN
easat-4382	51	20	;	;	PUNCT
easat-4382	51	21	licensee	licensee	PROPN
easat-4382	51	22	learning	learning	PROPN
easat-4382	51	23	gate	gate	PROPN
easat-4382	51	24	consistency	consistency	NOUN
easat-4382	51	25	,	,	PUNCT
easat-4382	51	26	containers	container	NOUN
easat-4382	51	27	also	also	ADV
easat-4382	51	28	introduce	introduce	VERB
easat-4382	51	29	unique	unique	ADJ
easat-4382	51	30	vulnerabilities	vulnerability	NOUN
easat-4382	51	31	that	that	PRON
easat-4382	51	32	can	can	AUX
easat-4382	51	33	compromise	compromise	VERB
easat-4382	51	34	application	application	NOUN
easat-4382	51	35	integrity	integrity	NOUN
easat-4382	51	36	and	and	CCONJ
easat-4382	51	37	data	datum	NOUN
easat-4382	51	38	protection	protection	NOUN
easat-4382	51	39	.	.	PUNCT
easat-4382	52	1	containers	container	NOUN
easat-4382	52	2	share	share	VERB
easat-4382	52	3	the	the	DET
easat-4382	52	4	host	host	NOUN
easat-4382	52	5	operating	operating	NOUN
easat-4382	52	6	system	system	NOUN
easat-4382	52	7	kernel	kernel	NOUN
easat-4382	52	8	,	,	PUNCT
easat-4382	52	9	which	which	PRON
easat-4382	52	10	can	can	AUX
easat-4382	52	11	increase	increase	VERB
easat-4382	52	12	the	the	DET
easat-4382	52	13	risk	risk	NOUN
easat-4382	52	14	of	of	ADP
easat-4382	52	15	"	"	PUNCT
easat-4382	52	16	breakout	breakout	ADJ
easat-4382	52	17	"	"	PUNCT
easat-4382	52	18	attacks	attack	NOUN
easat-4382	52	19	—	—	PUNCT
easat-4382	52	20	where	where	SCONJ
easat-4382	52	21	malicious	malicious	ADJ
easat-4382	52	22	processes	process	NOUN
easat-4382	52	23	in	in	ADP
easat-4382	52	24	a	a	DET
easat-4382	52	25	container	container	NOUN
easat-4382	52	26	access	access	NOUN
easat-4382	52	27	or	or	CCONJ
easat-4382	52	28	exploit	exploit	VERB
easat-4382	52	29	the	the	DET
easat-4382	52	30	host	host	NOUN
easat-4382	52	31	or	or	CCONJ
easat-4382	52	32	other	other	ADJ
easat-4382	52	33	containers	container	NOUN
easat-4382	52	34	[	[	X
easat-4382	52	35	7	7	NUM
easat-4382	52	36	]	]	PUNCT
easat-4382	52	37	.	.	PUNCT
easat-4382	53	1	in	in	ADP
easat-4382	53	2	modern	modern	ADJ
easat-4382	53	3	application	application	NOUN
easat-4382	53	4	development	development	NOUN
easat-4382	53	5	,	,	PUNCT
easat-4382	53	6	where	where	SCONJ
easat-4382	53	7	microservices	microservice	NOUN
easat-4382	53	8	architectures	architecture	NOUN
easat-4382	53	9	are	be	AUX
easat-4382	53	10	common	common	ADJ
easat-4382	53	11	,	,	PUNCT
easat-4382	53	12	a	a	DET
easat-4382	53	13	single	single	ADJ
easat-4382	53	14	vulnerability	vulnerability	NOUN
easat-4382	53	15	in	in	ADP
easat-4382	53	16	one	one	NUM
easat-4382	53	17	container	container	NOUN
easat-4382	53	18	can	can	AUX
easat-4382	53	19	expose	expose	VERB
easat-4382	53	20	the	the	DET
easat-4382	53	21	entire	entire	ADJ
easat-4382	53	22	system	system	NOUN
easat-4382	53	23	to	to	ADP
easat-4382	53	24	risks	risk	NOUN
easat-4382	53	25	.	.	PUNCT
easat-4382	54	1	additionally	additionally	ADV
easat-4382	54	2	,	,	PUNCT
easat-4382	54	3	the	the	DET
easat-4382	54	4	extensive	extensive	ADJ
easat-4382	54	5	use	use	NOUN
easat-4382	54	6	of	of	ADP
easat-4382	54	7	third	third	ADJ
easat-4382	54	8	-	-	PUNCT
easat-4382	54	9	party	party	NOUN
easat-4382	54	10	container	container	NOUN
easat-4382	54	11	images	image	NOUN
easat-4382	54	12	from	from	ADP
easat-4382	54	13	public	public	ADJ
easat-4382	54	14	repositories	repository	NOUN
easat-4382	54	15	can	can	AUX
easat-4382	54	16	present	present	VERB
easat-4382	54	17	supply	supply	NOUN
easat-4382	54	18	chain	chain	NOUN
easat-4382	54	19	vulnerabilities	vulnerability	NOUN
easat-4382	54	20	.	.	PUNCT
easat-4382	55	1	as	as	SCONJ
easat-4382	55	2	containerized	containerized	ADJ
easat-4382	55	3	environments	environment	NOUN
easat-4382	55	4	are	be	AUX
easat-4382	55	5	often	often	ADV
easat-4382	55	6	deployed	deploy	VERB
easat-4382	55	7	rapidly	rapidly	ADV
easat-4382	55	8	through	through	ADP
easat-4382	55	9	automated	automate	VERB
easat-4382	55	10	ci	ci	PROPN
easat-4382	55	11	/	/	SYM
easat-4382	55	12	cd	cd	NOUN
easat-4382	55	13	pipelines	pipeline	NOUN
easat-4382	55	14	[	[	X
easat-4382	55	15	8	8	NUM
easat-4382	55	16	]	]	X
easat-4382	55	17	security	security	NOUN
easat-4382	55	18	needs	need	VERB
easat-4382	55	19	to	to	PART
easat-4382	55	20	be	be	AUX
easat-4382	55	21	integrated	integrate	VERB
easat-4382	55	22	into	into	ADP
easat-4382	55	23	every	every	DET
easat-4382	55	24	stage	stage	NOUN
easat-4382	55	25	of	of	ADP
easat-4382	55	26	development	development	NOUN
easat-4382	55	27	to	to	PART
easat-4382	55	28	detect	detect	VERB
easat-4382	55	29	vulnerabilities	vulnerability	NOUN
easat-4382	55	30	early	early	ADV
easat-4382	55	31	,	,	PUNCT
easat-4382	55	32	enforce	enforce	VERB
easat-4382	55	33	configuration	configuration	NOUN
easat-4382	55	34	best	good	ADJ
easat-4382	55	35	practices	practice	NOUN
easat-4382	55	36	,	,	PUNCT
easat-4382	55	37	and	and	CCONJ
easat-4382	55	38	minimize	minimize	VERB
easat-4382	55	39	potential	potential	ADJ
easat-4382	55	40	attack	attack	NOUN
easat-4382	55	41	surfaces	surface	NOUN
easat-4382	55	42	.	.	PUNCT
easat-4382	56	1	robust	robust	ADJ
easat-4382	56	2	container	container	NOUN
easat-4382	56	3	security	security	NOUN
easat-4382	56	4	measures	measure	NOUN
easat-4382	56	5	are	be	AUX
easat-4382	56	6	essential	essential	ADJ
easat-4382	56	7	to	to	ADP
easat-4382	56	8	protecting	protect	VERB
easat-4382	56	9	sensitive	sensitive	ADJ
easat-4382	56	10	data	datum	NOUN
easat-4382	56	11	,	,	PUNCT
easat-4382	56	12	maintaining	maintain	VERB
easat-4382	56	13	trust	trust	NOUN
easat-4382	56	14	,	,	PUNCT
easat-4382	56	15	and	and	CCONJ
easat-4382	56	16	ensuring	ensure	VERB
easat-4382	56	17	the	the	DET
easat-4382	56	18	stability	stability	NOUN
easat-4382	56	19	and	and	CCONJ
easat-4382	56	20	reliability	reliability	NOUN
easat-4382	56	21	of	of	ADP
easat-4382	56	22	applications	application	NOUN
easat-4382	56	23	in	in	ADP
easat-4382	56	24	production	production	NOUN
easat-4382	56	25	.	.	PUNCT
easat-4382	57	1	3	3	X
easat-4382	57	2	.	.	X
easat-4382	57	3	containerization	containerization	NOUN
easat-4382	57	4	and	and	CCONJ
easat-4382	57	5	application	application	NOUN
easat-4382	57	6	development	development	NOUN
easat-4382	57	7	containers	container	NOUN
easat-4382	57	8	package	package	VERB
easat-4382	57	9	an	an	DET
easat-4382	57	10	application	application	NOUN
easat-4382	57	11	with	with	ADP
easat-4382	57	12	all	all	DET
easat-4382	57	13	its	its	PRON
easat-4382	57	14	dependencies	dependency	NOUN
easat-4382	57	15	,	,	PUNCT
easat-4382	57	16	such	such	ADJ
easat-4382	57	17	as	as	ADP
easat-4382	57	18	libraries	library	NOUN
easat-4382	57	19	,	,	PUNCT
easat-4382	57	20	binaries	binary	NOUN
easat-4382	57	21	,	,	PUNCT
easat-4382	57	22	and	and	CCONJ
easat-4382	57	23	configuration	configuration	NOUN
easat-4382	57	24	files	file	NOUN
easat-4382	57	25	,	,	PUNCT
easat-4382	57	26	into	into	ADP
easat-4382	57	27	a	a	DET
easat-4382	57	28	single	single	ADJ
easat-4382	57	29	,	,	PUNCT
easat-4382	57	30	self	self	NOUN
easat-4382	57	31	-	-	PUNCT
easat-4382	57	32	contained	contain	VERB
easat-4382	57	33	unit	unit	NOUN
easat-4382	57	34	that	that	PRON
easat-4382	57	35	can	can	AUX
easat-4382	57	36	run	run	VERB
easat-4382	57	37	consistently	consistently	ADV
easat-4382	57	38	across	across	ADP
easat-4382	57	39	various	various	ADJ
easat-4382	57	40	environments	environment	NOUN
easat-4382	57	41	.	.	PUNCT
easat-4382	58	1	this	this	DET
easat-4382	58	2	approach	approach	NOUN
easat-4382	58	3	eliminates	eliminate	VERB
easat-4382	58	4	the	the	DET
easat-4382	58	5	need	need	NOUN
easat-4382	58	6	for	for	ADP
easat-4382	58	7	an	an	DET
easat-4382	58	8	individual	individual	ADJ
easat-4382	58	9	operating	operating	NOUN
easat-4382	58	10	system	system	NOUN
easat-4382	58	11	instance	instance	NOUN
easat-4382	58	12	for	for	ADP
easat-4382	58	13	each	each	DET
easat-4382	58	14	application	application	NOUN
easat-4382	58	15	,	,	PUNCT
easat-4382	58	16	as	as	SCONJ
easat-4382	58	17	is	be	AUX
easat-4382	58	18	required	require	VERB
easat-4382	58	19	with	with	ADP
easat-4382	58	20	virtual	virtual	ADJ
easat-4382	58	21	machines	machine	NOUN
easat-4382	58	22	(	(	PUNCT
easat-4382	58	23	vms	vms	PROPN
easat-4382	58	24	)	)	PUNCT
easat-4382	58	25	,	,	PUNCT
easat-4382	58	26	making	make	VERB
easat-4382	58	27	containers	container	NOUN
easat-4382	58	28	significantly	significantly	ADV
easat-4382	58	29	lighter	light	ADJ
easat-4382	58	30	and	and	CCONJ
easat-4382	58	31	more	more	ADV
easat-4382	58	32	efficient	efficient	ADJ
easat-4382	58	33	.	.	PUNCT
easat-4382	59	1	containers	container	NOUN
easat-4382	59	2	achieve	achieve	VERB
easat-4382	59	3	this	this	DET
easat-4382	59	4	isolation	isolation	NOUN
easat-4382	59	5	through	through	ADP
easat-4382	59	6	kernel	kernel	PROPN
easat-4382	59	7	features	feature	NOUN
easat-4382	59	8	like	like	ADP
easat-4382	59	9	namespaces	namespace	NOUN
easat-4382	59	10	and	and	CCONJ
easat-4382	59	11	control	control	NOUN
easat-4382	59	12	groups	group	NOUN
easat-4382	59	13	(	(	PUNCT
easat-4382	59	14	cgroups	cgroups	X
easat-4382	59	15	)	)	PUNCT
easat-4382	60	1	[	[	X
easat-4382	60	2	1	1	NUM
easat-4382	60	3	]	]	PUNCT
easat-4382	60	4	.	.	PUNCT
easat-4382	61	1	figure	figure	NOUN
easat-4382	61	2	2	2	NUM
easat-4382	61	3	.	.	PUNCT
easat-4382	61	4	virtual	virtual	ADJ
easat-4382	61	5	machines	machine	NOUN
easat-4382	61	6	and	and	CCONJ
easat-4382	61	7	containers	container	NOUN
easat-4382	61	8	.	.	PUNCT
easat-4382	62	1	namespaces	namespace	NOUN
easat-4382	62	2	provide	provide	VERB
easat-4382	62	3	process	process	NOUN
easat-4382	62	4	isolation	isolation	NOUN
easat-4382	62	5	by	by	ADP
easat-4382	62	6	limiting	limit	VERB
easat-4382	62	7	what	what	PRON
easat-4382	62	8	each	each	DET
easat-4382	62	9	container	container	NOUN
easat-4382	62	10	can	can	AUX
easat-4382	62	11	see	see	VERB
easat-4382	62	12	and	and	CCONJ
easat-4382	62	13	access	access	NOUN
easat-4382	62	14	within	within	ADP
easat-4382	62	15	the	the	DET
easat-4382	62	16	system	system	NOUN
easat-4382	62	17	,	,	PUNCT
easat-4382	62	18	including	include	VERB
easat-4382	62	19	its	its	PRON
easat-4382	62	20	file	file	NOUN
easat-4382	62	21	system	system	NOUN
easat-4382	62	22	,	,	PUNCT
easat-4382	62	23	network	network	NOUN
easat-4382	62	24	,	,	PUNCT
easat-4382	62	25	process	process	NOUN
easat-4382	62	26	ids	id	NOUN
easat-4382	62	27	,	,	PUNCT
easat-4382	62	28	and	and	CCONJ
easat-4382	62	29	user	user	NOUN
easat-4382	62	30	environments	environment	NOUN
easat-4382	62	31	.	.	PUNCT
easat-4382	63	1	control	control	NOUN
easat-4382	63	2	groups	group	NOUN
easat-4382	63	3	,	,	PUNCT
easat-4382	63	4	on	on	ADP
easat-4382	63	5	the	the	DET
easat-4382	63	6	other	other	ADJ
easat-4382	63	7	hand	hand	NOUN
easat-4382	63	8	,	,	PUNCT
easat-4382	63	9	regulate	regulate	VERB
easat-4382	63	10	resource	resource	NOUN
easat-4382	63	11	allocation	allocation	NOUN
easat-4382	63	12	,	,	PUNCT
easat-4382	63	13	such	such	ADJ
easat-4382	63	14	as	as	ADP
easat-4382	63	15	cpu	cpu	NOUN
easat-4382	63	16	,	,	PUNCT
easat-4382	63	17	memory	memory	NOUN
easat-4382	63	18	,	,	PUNCT
easat-4382	63	19	and	and	CCONJ
easat-4382	63	20	disk	disk	NOUN
easat-4382	63	21	i	i	PROPN
easat-4382	63	22	/	/	SYM
easat-4382	63	23	o	o	NOUN
easat-4382	63	24	,	,	PUNCT
easat-4382	63	25	ensuring	ensure	VERB
easat-4382	63	26	that	that	SCONJ
easat-4382	63	27	each	each	DET
easat-4382	63	28	container	container	NOUN
easat-4382	63	29	remains	remain	VERB
easat-4382	63	30	within	within	ADP
easat-4382	63	31	predefined	predefine	VERB
easat-4382	63	32	resource	resource	NOUN
easat-4382	63	33	limits	limit	NOUN
easat-4382	63	34	,	,	PUNCT
easat-4382	63	35	avoiding	avoid	VERB
easat-4382	63	36	interference	interference	NOUN
easat-4382	63	37	with	with	ADP
easat-4382	63	38	other	other	ADJ
easat-4382	63	39	containers	container	NOUN
easat-4382	63	40	or	or	CCONJ
easat-4382	63	41	the	the	DET
easat-4382	63	42	host	host	NOUN
easat-4382	63	43	.	.	PUNCT
easat-4382	64	1	this	this	DET
easat-4382	64	2	lightweight	lightweight	ADJ
easat-4382	64	3	isolation	isolation	NOUN
easat-4382	64	4	allows	allow	VERB
easat-4382	64	5	multiple	multiple	ADJ
easat-4382	64	6	containers	container	NOUN
easat-4382	64	7	to	to	PART
easat-4382	64	8	run	run	VERB
easat-4382	64	9	on	on	ADP
easat-4382	64	10	the	the	DET
easat-4382	64	11	same	same	ADJ
easat-4382	64	12	host	host	NOUN
easat-4382	64	13	os	os	NOUN
easat-4382	64	14	without	without	ADP
easat-4382	64	15	the	the	DET
easat-4382	64	16	overhead	overhead	NOUN
easat-4382	64	17	of	of	ADP
easat-4382	64	18	running	run	VERB
easat-4382	64	19	separate	separate	ADJ
easat-4382	64	20	guest	guest	NOUN
easat-4382	64	21	os	os	NOUN
easat-4382	64	22	instances	instance	NOUN
easat-4382	64	23	,	,	PUNCT
easat-4382	64	24	as	as	ADP
easat-4382	64	25	with	with	ADP
easat-4382	64	26	vms	vms	PROPN
easat-4382	64	27	.	.	PROPN
easat-4382	64	28	1246	1246	NUM
easat-4382	64	29	edelweiss	edelweiss	PROPN
easat-4382	64	30	applied	apply	VERB
easat-4382	64	31	science	science	NOUN
easat-4382	64	32	and	and	CCONJ
easat-4382	64	33	technology	technology	NOUN
easat-4382	64	34	issn	issn	PROPN
easat-4382	64	35	:	:	PUNCT
easat-4382	64	36	2576	2576	NUM
easat-4382	64	37	-	-	SYM
easat-4382	64	38	8484	8484	NUM
easat-4382	64	39	vol	vol	NOUN
easat-4382	64	40	.	.	PROPN
easat-4382	65	1	9	9	NUM
easat-4382	65	2	,	,	PUNCT
easat-4382	65	3	no	no	INTJ
easat-4382	65	4	.	.	NOUN
easat-4382	65	5	1	1	NUM
easat-4382	65	6	:	:	PUNCT
easat-4382	65	7	1243	1243	NUM
easat-4382	65	8	-	-	SYM
easat-4382	65	9	1261	1261	NUM
easat-4382	65	10	,	,	PUNCT
easat-4382	65	11	2025	2025	NUM
easat-4382	65	12	doi	doi	NOUN
easat-4382	65	13	:	:	PUNCT
easat-4382	65	14	10.55214/25768484.v9i1.4382	10.55214/25768484.v9i1.4382	NUM
easat-4382	65	15	©	©	PROPN
easat-4382	65	16	2025	2025	NUM
easat-4382	65	17	by	by	ADP
easat-4382	65	18	the	the	DET
easat-4382	65	19	authors	author	NOUN
easat-4382	65	20	;	;	PUNCT
easat-4382	65	21	licensee	licensee	PROPN
easat-4382	65	22	learning	learn	VERB
easat-4382	65	23	gate	gate	PROPN
easat-4382	65	24	figure	figure	NOUN
easat-4382	65	25	3	3	NUM
easat-4382	65	26	.	.	PUNCT
easat-4382	65	27	namespaces	namespace	NOUN
easat-4382	65	28	and	and	CCONJ
easat-4382	65	29	cgroups	cgroup	NOUN
easat-4382	65	30	.	.	PUNCT
easat-4382	66	1	at	at	ADP
easat-4382	66	2	runtime	runtime	NOUN
easat-4382	66	3	,	,	PUNCT
easat-4382	66	4	each	each	DET
easat-4382	66	5	container	container	NOUN
easat-4382	66	6	operates	operate	VERB
easat-4382	66	7	as	as	ADP
easat-4382	66	8	an	an	DET
easat-4382	66	9	independent	independent	ADJ
easat-4382	66	10	process	process	NOUN
easat-4382	66	11	on	on	ADP
easat-4382	66	12	the	the	DET
easat-4382	66	13	host	host	NOUN
easat-4382	66	14	,	,	PUNCT
easat-4382	66	15	sharing	share	VERB
easat-4382	66	16	its	its	PRON
easat-4382	66	17	os	os	ADJ
easat-4382	66	18	kernel	kernel	NOUN
easat-4382	66	19	but	but	CCONJ
easat-4382	66	20	with	with	ADP
easat-4382	66	21	its	its	PRON
easat-4382	66	22	own	own	ADJ
easat-4382	66	23	isolated	isolated	ADJ
easat-4382	66	24	user	user	NOUN
easat-4382	66	25	space	space	NOUN
easat-4382	66	26	,	,	PUNCT
easat-4382	66	27	making	make	VERB
easat-4382	66	28	it	it	PRON
easat-4382	66	29	portable	portable	ADJ
easat-4382	66	30	and	and	CCONJ
easat-4382	66	31	consistent	consistent	ADJ
easat-4382	66	32	across	across	ADP
easat-4382	66	33	different	different	ADJ
easat-4382	66	34	environments	environment	NOUN
easat-4382	66	35	.	.	PUNCT
easat-4382	67	1	tools	tool	NOUN
easat-4382	67	2	like	like	ADP
easat-4382	67	3	docker	docker	PROPN
easat-4382	67	4	enable	enable	VERB
easat-4382	67	5	developers	developer	NOUN
easat-4382	67	6	to	to	PART
easat-4382	67	7	define	define	VERB
easat-4382	67	8	container	container	NOUN
easat-4382	67	9	configurations	configuration	NOUN
easat-4382	67	10	in	in	ADP
easat-4382	67	11	a	a	DET
easat-4382	67	12	dockerfile	dockerfile	NOUN
easat-4382	68	1	[	[	X
easat-4382	68	2	9	9	NUM
easat-4382	68	3	]	]	PUNCT
easat-4382	68	4	specifying	specify	VERB
easat-4382	68	5	the	the	DET
easat-4382	68	6	base	base	NOUN
easat-4382	68	7	image	image	NOUN
easat-4382	68	8	,	,	PUNCT
easat-4382	68	9	application	application	NOUN
easat-4382	68	10	code	code	NOUN
easat-4382	68	11	,	,	PUNCT
easat-4382	68	12	dependencies	dependency	NOUN
easat-4382	68	13	,	,	PUNCT
easat-4382	68	14	and	and	CCONJ
easat-4382	68	15	required	required	ADJ
easat-4382	68	16	configuration	configuration	NOUN
easat-4382	68	17	.	.	PUNCT
easat-4382	69	1	this	this	DET
easat-4382	69	2	dockerfile	dockerfile	NOUN
easat-4382	69	3	is	be	AUX
easat-4382	69	4	built	build	VERB
easat-4382	69	5	into	into	ADP
easat-4382	69	6	an	an	DET
easat-4382	69	7	image	image	NOUN
easat-4382	69	8	,	,	PUNCT
easat-4382	69	9	a	a	DET
easat-4382	69	10	read	read	VERB
easat-4382	69	11	-	-	PUNCT
easat-4382	69	12	only	only	ADV
easat-4382	69	13	template	template	NOUN
easat-4382	69	14	for	for	ADP
easat-4382	69	15	creating	create	VERB
easat-4382	69	16	containers	container	NOUN
easat-4382	69	17	.	.	PUNCT
easat-4382	70	1	images	image	NOUN
easat-4382	70	2	are	be	AUX
easat-4382	70	3	portable	portable	ADJ
easat-4382	70	4	and	and	CCONJ
easat-4382	70	5	can	can	AUX
easat-4382	70	6	be	be	AUX
easat-4382	70	7	stored	store	VERB
easat-4382	70	8	and	and	CCONJ
easat-4382	70	9	shared	share	VERB
easat-4382	70	10	through	through	ADP
easat-4382	70	11	container	container	NOUN
easat-4382	70	12	registries	registry	NOUN
easat-4382	70	13	,	,	PUNCT
easat-4382	70	14	such	such	ADJ
easat-4382	70	15	as	as	ADP
easat-4382	70	16	docker	docker	PROPN
easat-4382	70	17	inc	inc	PROPN
easat-4382	71	1	[	[	X
easat-4382	71	2	10	10	NUM
easat-4382	71	3	]	]	X
easat-4382	71	4	allowing	allow	VERB
easat-4382	71	5	easy	easy	ADJ
easat-4382	71	6	replication	replication	NOUN
easat-4382	71	7	across	across	ADP
easat-4382	71	8	teams	team	NOUN
easat-4382	71	9	and	and	CCONJ
easat-4382	71	10	environments	environment	NOUN
easat-4382	71	11	.	.	PUNCT
easat-4382	72	1	orchestration	orchestration	NOUN
easat-4382	72	2	platforms	platform	NOUN
easat-4382	72	3	like	like	ADP
easat-4382	72	4	the	the	DET
easat-4382	72	5	kubernetes	kubernete	NOUN
easat-4382	72	6	authors	author	NOUN
easat-4382	72	7	[	[	X
easat-4382	72	8	4	4	X
easat-4382	72	9	]	]	PUNCT
easat-4382	72	10	enable	enable	VERB
easat-4382	72	11	the	the	DET
easat-4382	72	12	management	management	NOUN
easat-4382	72	13	of	of	ADP
easat-4382	72	14	containers	container	NOUN
easat-4382	72	15	at	at	ADP
easat-4382	72	16	scale	scale	NOUN
easat-4382	72	17	by	by	ADP
easat-4382	72	18	handling	handle	VERB
easat-4382	72	19	the	the	DET
easat-4382	72	20	deployment	deployment	NOUN
easat-4382	72	21	,	,	PUNCT
easat-4382	72	22	scaling	scaling	NOUN
easat-4382	72	23	,	,	PUNCT
easat-4382	72	24	and	and	CCONJ
easat-4382	72	25	monitoring	monitoring	NOUN
easat-4382	72	26	of	of	ADP
easat-4382	72	27	containerized	containerized	ADJ
easat-4382	72	28	applications	application	NOUN
easat-4382	72	29	across	across	ADP
easat-4382	72	30	multiple	multiple	ADJ
easat-4382	72	31	nodes	node	NOUN
easat-4382	72	32	,	,	PUNCT
easat-4382	72	33	making	make	VERB
easat-4382	72	34	it	it	PRON
easat-4382	72	35	easier	easy	ADJ
easat-4382	72	36	for	for	SCONJ
easat-4382	72	37	it	it	PRON
easat-4382	72	38	teams	team	NOUN
easat-4382	72	39	to	to	PART
easat-4382	72	40	maintain	maintain	VERB
easat-4382	72	41	consistency	consistency	NOUN
easat-4382	72	42	and	and	CCONJ
easat-4382	72	43	high	high	ADJ
easat-4382	72	44	availability	availability	NOUN
easat-4382	72	45	across	across	ADP
easat-4382	72	46	large	large	ADJ
easat-4382	72	47	-	-	PUNCT
easat-4382	72	48	scale	scale	NOUN
easat-4382	72	49	environments	environment	NOUN
easat-4382	72	50	.	.	PUNCT
easat-4382	73	1	this	this	DET
easat-4382	73	2	approach	approach	NOUN
easat-4382	73	3	to	to	ADP
easat-4382	73	4	containerization	containerization	NOUN
easat-4382	73	5	has	have	AUX
easat-4382	73	6	redefined	redefine	VERB
easat-4382	73	7	application	application	NOUN
easat-4382	73	8	deployment	deployment	NOUN
easat-4382	73	9	by	by	ADP
easat-4382	73	10	enabling	enable	VERB
easat-4382	73	11	rapid	rapid	ADJ
easat-4382	73	12	,	,	PUNCT
easat-4382	73	13	consistent	consistent	ADJ
easat-4382	73	14	,	,	PUNCT
easat-4382	73	15	and	and	CCONJ
easat-4382	73	16	efficient	efficient	ADJ
easat-4382	73	17	transitions	transition	NOUN
easat-4382	73	18	from	from	ADP
easat-4382	73	19	development	development	NOUN
easat-4382	73	20	to	to	ADP
easat-4382	73	21	production	production	NOUN
easat-4382	73	22	,	,	PUNCT
easat-4382	73	23	even	even	ADV
easat-4382	73	24	in	in	ADP
easat-4382	73	25	complex	complex	ADJ
easat-4382	73	26	,	,	PUNCT
easat-4382	73	27	distributed	distributed	ADJ
easat-4382	73	28	systems	system	NOUN
easat-4382	73	29	.	.	PUNCT
easat-4382	74	1	3.1	3.1	NUM
easat-4382	74	2	.	.	PUNCT
easat-4382	74	3	benefits	benefit	NOUN
easat-4382	74	4	of	of	ADP
easat-4382	74	5	containers	container	NOUN
easat-4382	74	6	containers	container	NOUN
easat-4382	74	7	significantly	significantly	ADV
easat-4382	74	8	increase	increase	VERB
easat-4382	74	9	efficiency	efficiency	NOUN
easat-4382	74	10	in	in	ADP
easat-4382	74	11	modern	modern	ADJ
easat-4382	74	12	software	software	NOUN
easat-4382	74	13	development	development	NOUN
easat-4382	74	14	by	by	ADP
easat-4382	74	15	minimizing	minimize	VERB
easat-4382	74	16	overhead	overhead	ADV
easat-4382	74	17	and	and	CCONJ
easat-4382	74	18	resource	resource	NOUN
easat-4382	74	19	usage	usage	NOUN
easat-4382	74	20	compared	compare	VERB
easat-4382	74	21	to	to	ADP
easat-4382	74	22	traditional	traditional	ADJ
easat-4382	74	23	virtualization	virtualization	NOUN
easat-4382	74	24	.	.	PUNCT
easat-4382	75	1	since	since	SCONJ
easat-4382	75	2	containers	container	NOUN
easat-4382	75	3	share	share	VERB
easat-4382	75	4	the	the	DET
easat-4382	75	5	host	host	NOUN
easat-4382	75	6	kernel	kernel	NOUN
easat-4382	75	7	,	,	PUNCT
easat-4382	75	8	they	they	PRON
easat-4382	75	9	eliminate	eliminate	VERB
easat-4382	75	10	the	the	DET
easat-4382	75	11	need	need	NOUN
easat-4382	75	12	for	for	ADP
easat-4382	75	13	separate	separate	ADJ
easat-4382	75	14	os	os	NOUN
easat-4382	75	15	instances	instance	NOUN
easat-4382	75	16	and	and	CCONJ
easat-4382	75	17	drastically	drastically	ADV
easat-4382	75	18	reduce	reduce	VERB
easat-4382	75	19	the	the	DET
easat-4382	75	20	ram	ram	NOUN
easat-4382	75	21	,	,	PUNCT
easat-4382	75	22	cpu	cpu	NOUN
easat-4382	75	23	,	,	PUNCT
easat-4382	75	24	and	and	CCONJ
easat-4382	75	25	storage	storage	NOUN
easat-4382	75	26	footprint	footprint	NOUN
easat-4382	75	27	.	.	PUNCT
easat-4382	76	1	this	this	DET
easat-4382	76	2	lightweight	lightweight	ADJ
easat-4382	76	3	nature	nature	NOUN
easat-4382	76	4	translates	translate	VERB
easat-4382	76	5	to	to	ADP
easat-4382	76	6	faster	fast	ADV
easat-4382	76	7	startup	startup	PROPN
easat-4382	76	8	times	time	NOUN
easat-4382	76	9	,	,	PUNCT
easat-4382	76	10	benefiting	benefit	VERB
easat-4382	76	11	ci	ci	NOUN
easat-4382	76	12	/	/	SYM
easat-4382	76	13	cd	cd	NOUN
easat-4382	76	14	pipelines	pipeline	NOUN
easat-4382	76	15	.	.	PUNCT
easat-4382	77	1	additionally	additionally	ADV
easat-4382	77	2	,	,	PUNCT
easat-4382	77	3	containers	container	NOUN
easat-4382	77	4	are	be	AUX
easat-4382	77	5	often	often	ADV
easat-4382	77	6	ephemeral	ephemeral	ADJ
easat-4382	77	7	,	,	PUNCT
easat-4382	77	8	meaning	mean	VERB
easat-4382	77	9	they	they	PRON
easat-4382	77	10	can	can	AUX
easat-4382	77	11	be	be	AUX
easat-4382	77	12	instantiated	instantiate	VERB
easat-4382	77	13	,	,	PUNCT
easat-4382	77	14	scaled	scale	VERB
easat-4382	77	15	,	,	PUNCT
easat-4382	77	16	and	and	CCONJ
easat-4382	77	17	destroyed	destroy	VERB
easat-4382	77	18	rapidly	rapidly	ADV
easat-4382	77	19	based	base	VERB
easat-4382	77	20	on	on	ADP
easat-4382	77	21	demand	demand	NOUN
easat-4382	77	22	.	.	PUNCT
easat-4382	78	1	this	this	PRON
easat-4382	78	2	allows	allow	VERB
easat-4382	78	3	for	for	ADP
easat-4382	78	4	more	more	ADV
easat-4382	78	5	responsive	responsive	ADJ
easat-4382	78	6	resource	resource	NOUN
easat-4382	78	7	allocation	allocation	NOUN
easat-4382	78	8	,	,	PUNCT
easat-4382	78	9	improved	improve	VERB
easat-4382	78	10	server	server	NOUN
easat-4382	78	11	utilization	utilization	NOUN
easat-4382	78	12	,	,	PUNCT
easat-4382	78	13	and	and	CCONJ
easat-4382	78	14	cost	cost	NOUN
easat-4382	78	15	-	-	PUNCT
easat-4382	78	16	effective	effective	ADJ
easat-4382	78	17	operation	operation	NOUN
easat-4382	78	18	.	.	PUNCT
easat-4382	79	1	from	from	ADP
easat-4382	79	2	a	a	DET
easat-4382	79	3	scaling	scaling	NOUN
easat-4382	79	4	perspective	perspective	NOUN
easat-4382	79	5	,	,	PUNCT
easat-4382	79	6	containers	container	NOUN
easat-4382	79	7	can	can	AUX
easat-4382	79	8	be	be	AUX
easat-4382	79	9	replicated	replicate	VERB
easat-4382	79	10	or	or	CCONJ
easat-4382	79	11	scaled	scale	VERB
easat-4382	79	12	horizontally	horizontally	ADV
easat-4382	79	13	as	as	ADP
easat-4382	79	14	application	application	NOUN
easat-4382	79	15	loads	load	NOUN
easat-4382	79	16	fluctuate	fluctuate	NOUN
easat-4382	79	17	,	,	PUNCT
easat-4382	79	18	making	make	VERB
easat-4382	79	19	it	it	PRON
easat-4382	79	20	simple	simple	ADJ
easat-4382	79	21	to	to	PART
easat-4382	79	22	manage	manage	VERB
easat-4382	79	23	many	many	ADJ
easat-4382	79	24	container	container	NOUN
easat-4382	79	25	instances	instance	NOUN
easat-4382	79	26	using	use	VERB
easat-4382	79	27	container	container	NOUN
easat-4382	79	28	orchestration	orchestration	NOUN
easat-4382	79	29	systems	system	NOUN
easat-4382	79	30	like	like	ADP
easat-4382	79	31	the	the	DET
easat-4382	79	32	kubernetes	kubernete	NOUN
easat-4382	79	33	authors	author	NOUN
easat-4382	79	34	[	[	X
easat-4382	79	35	11	11	NUM
easat-4382	79	36	]	]	PUNCT
easat-4382	79	37	.	.	PUNCT
easat-4382	80	1	because	because	SCONJ
easat-4382	80	2	these	these	DET
easat-4382	80	3	orchestrators	orchestrator	NOUN
easat-4382	80	4	handle	handle	VERB
easat-4382	80	5	load	load	NOUN
easat-4382	80	6	balancing	balancing	NOUN
easat-4382	80	7	,	,	PUNCT
easat-4382	80	8	auto	auto	NOUN
easat-4382	80	9	-	-	PUNCT
easat-4382	80	10	scaling	scaling	NOUN
easat-4382	80	11	,	,	PUNCT
easat-4382	80	12	and	and	CCONJ
easat-4382	80	13	failover	failover	NOUN
easat-4382	80	14	,	,	PUNCT
easat-4382	80	15	containers	container	NOUN
easat-4382	80	16	can	can	AUX
easat-4382	80	17	efficiently	efficiently	ADV
easat-4382	80	18	maintain	maintain	VERB
easat-4382	80	19	high	high	ADJ
easat-4382	80	20	availability	availability	NOUN
easat-4382	80	21	and	and	CCONJ
easat-4382	80	22	performance	performance	NOUN
easat-4382	80	23	even	even	ADV
easat-4382	80	24	under	under	ADP
easat-4382	80	25	unpredictable	unpredictable	ADJ
easat-4382	80	26	usage	usage	NOUN
easat-4382	80	27	patterns	pattern	NOUN
easat-4382	80	28	.	.	PUNCT
easat-4382	81	1	moreover	moreover	ADV
easat-4382	81	2	,	,	PUNCT
easat-4382	81	3	portability	portability	NOUN
easat-4382	81	4	is	be	AUX
easat-4382	81	5	a	a	DET
easat-4382	81	6	key	key	ADJ
easat-4382	81	7	strength	strength	NOUN
easat-4382	81	8	that	that	PRON
easat-4382	81	9	makes	make	VERB
easat-4382	81	10	containers	container	NOUN
easat-4382	81	11	extremely	extremely	ADV
easat-4382	81	12	important	important	ADJ
easat-4382	81	13	in	in	ADP
easat-4382	81	14	microservices	microservice	NOUN
easat-4382	81	15	architectures	architecture	NOUN
easat-4382	81	16	.	.	PUNCT
easat-4382	82	1	by	by	ADP
easat-4382	82	2	bundling	bundle	VERB
easat-4382	82	3	the	the	DET
easat-4382	82	4	application	application	NOUN
easat-4382	82	5	and	and	CCONJ
easat-4382	82	6	its	its	PRON
easat-4382	82	7	dependencies	dependency	NOUN
easat-4382	82	8	into	into	ADP
easat-4382	82	9	a	a	DET
easat-4382	82	10	self	self	NOUN
easat-4382	82	11	-	-	PUNCT
easat-4382	82	12	contained	contain	VERB
easat-4382	82	13	image	image	NOUN
easat-4382	82	14	,	,	PUNCT
easat-4382	82	15	teams	team	NOUN
easat-4382	82	16	can	can	AUX
easat-4382	82	17	run	run	VERB
easat-4382	82	18	these	these	DET
easat-4382	82	19	images	image	NOUN
easat-4382	82	20	in	in	ADP
easat-4382	82	21	development	development	NOUN
easat-4382	82	22	,	,	PUNCT
easat-4382	82	23	testing	testing	NOUN
easat-4382	82	24	,	,	PUNCT
easat-4382	82	25	or	or	CCONJ
easat-4382	82	26	production	production	NOUN
easat-4382	82	27	environments	environment	NOUN
easat-4382	82	28	without	without	ADP
easat-4382	82	29	worrying	worry	VERB
easat-4382	82	30	about	about	ADP
easat-4382	82	31	version	version	NOUN
easat-4382	82	32	conflicts	conflict	NOUN
easat-4382	82	33	or	or	CCONJ
easat-4382	82	34	missing	miss	VERB
easat-4382	82	35	libraries	library	NOUN
easat-4382	82	36	.	.	PUNCT
easat-4382	83	1	this	this	DET
easat-4382	83	2	approach	approach	NOUN
easat-4382	83	3	enables	enable	VERB
easat-4382	83	4	agile	agile	ADJ
easat-4382	83	5	,	,	PUNCT
easat-4382	83	6	modular	modular	ADJ
easat-4382	83	7	design	design	NOUN
easat-4382	83	8	,	,	PUNCT
easat-4382	83	9	enabling	enable	VERB
easat-4382	83	10	microservices	microservice	NOUN
easat-4382	83	11	to	to	PART
easat-4382	83	12	be	be	AUX
easat-4382	83	13	independently	independently	ADV
easat-4382	83	14	developed	develop	VERB
easat-4382	83	15	,	,	PUNCT
easat-4382	83	16	deployed	deploy	VERB
easat-4382	83	17	,	,	PUNCT
easat-4382	83	18	and	and	CCONJ
easat-4382	83	19	updated	update	VERB
easat-4382	83	20	.	.	PUNCT
easat-4382	84	1	each	each	DET
easat-4382	84	2	microservice	microservice	NOUN
easat-4382	84	3	container	container	NOUN
easat-4382	84	4	can	can	AUX
easat-4382	84	5	be	be	AUX
easat-4382	84	6	scaled	scale	VERB
easat-4382	84	7	or	or	CCONJ
easat-4382	84	8	rolled	roll	VERB
easat-4382	84	9	1247	1247	NUM
easat-4382	84	10	edelweiss	edelweiss	PROPN
easat-4382	84	11	applied	apply	VERB
easat-4382	84	12	science	science	NOUN
easat-4382	84	13	and	and	CCONJ
easat-4382	84	14	technology	technology	NOUN
easat-4382	84	15	issn	issn	PROPN
easat-4382	84	16	:	:	PUNCT
easat-4382	84	17	2576	2576	NUM
easat-4382	84	18	-	-	SYM
easat-4382	84	19	8484	8484	NUM
easat-4382	84	20	vol	vol	NOUN
easat-4382	84	21	.	.	PROPN
easat-4382	85	1	9	9	NUM
easat-4382	85	2	,	,	PUNCT
easat-4382	85	3	no	no	INTJ
easat-4382	85	4	.	.	NOUN
easat-4382	85	5	1	1	NUM
easat-4382	85	6	:	:	PUNCT
easat-4382	85	7	1243	1243	NUM
easat-4382	85	8	-	-	SYM
easat-4382	85	9	1261	1261	NUM
easat-4382	85	10	,	,	PUNCT
easat-4382	85	11	2025	2025	NUM
easat-4382	85	12	doi	doi	NOUN
easat-4382	85	13	:	:	PUNCT
easat-4382	85	14	10.55214/25768484.v9i1.4382	10.55214/25768484.v9i1.4382	NUM
easat-4382	85	15	©	©	PROPN
easat-4382	85	16	2025	2025	NUM
easat-4382	85	17	by	by	ADP
easat-4382	85	18	the	the	DET
easat-4382	85	19	authors	author	NOUN
easat-4382	85	20	;	;	PUNCT
easat-4382	85	21	licensee	licensee	PROPN
easat-4382	85	22	learning	learning	NOUN
easat-4382	85	23	gate	gate	VERB
easat-4382	85	24	back	back	ADV
easat-4382	85	25	without	without	ADP
easat-4382	85	26	disrupting	disrupt	VERB
easat-4382	85	27	the	the	DET
easat-4382	85	28	rest	rest	NOUN
easat-4382	85	29	of	of	ADP
easat-4382	85	30	the	the	DET
easat-4382	85	31	system	system	NOUN
easat-4382	85	32	,	,	PUNCT
easat-4382	85	33	supporting	support	VERB
easat-4382	85	34	faster	fast	ADJ
easat-4382	85	35	release	release	NOUN
easat-4382	85	36	cycles	cycle	NOUN
easat-4382	85	37	and	and	CCONJ
easat-4382	85	38	continuous	continuous	ADJ
easat-4382	85	39	improvement	improvement	NOUN
easat-4382	85	40	.	.	PUNCT
easat-4382	86	1	orchestration	orchestration	NOUN
easat-4382	86	2	platforms	platform	NOUN
easat-4382	86	3	further	far	ADV
easat-4382	86	4	streamline	streamline	VERB
easat-4382	86	5	the	the	DET
easat-4382	86	6	communication	communication	NOUN
easat-4382	86	7	between	between	ADP
easat-4382	86	8	services	service	NOUN
easat-4382	86	9	,	,	PUNCT
easat-4382	86	10	loadbalancing	loadbalance	VERB
easat-4382	86	11	traffic	traffic	NOUN
easat-4382	86	12	,	,	PUNCT
easat-4382	86	13	and	and	CCONJ
easat-4382	86	14	managing	manage	VERB
easat-4382	86	15	network	network	NOUN
easat-4382	86	16	policies	policy	NOUN
easat-4382	86	17	.	.	PUNCT
easat-4382	87	1	3.2	3.2	NUM
easat-4382	87	2	.	.	PUNCT
easat-4382	88	1	new	new	ADJ
easat-4382	88	2	attack	attack	NOUN
easat-4382	88	3	surfaces	surface	NOUN
easat-4382	88	4	despite	despite	SCONJ
easat-4382	88	5	their	their	PRON
easat-4382	88	6	many	many	ADJ
easat-4382	88	7	benefits	benefit	NOUN
easat-4382	88	8	,	,	PUNCT
easat-4382	88	9	containers	container	NOUN
easat-4382	88	10	introduce	introduce	VERB
easat-4382	88	11	a	a	DET
easat-4382	88	12	range	range	NOUN
easat-4382	88	13	of	of	ADP
easat-4382	88	14	new	new	ADJ
easat-4382	88	15	attack	attack	NOUN
easat-4382	88	16	surfaces	surface	NOUN
easat-4382	88	17	and	and	CCONJ
easat-4382	88	18	vulnerabilities	vulnerability	NOUN
easat-4382	88	19	that	that	SCONJ
easat-4382	88	20	developers	developer	NOUN
easat-4382	88	21	and	and	CCONJ
easat-4382	88	22	operations	operation	NOUN
easat-4382	88	23	teams	team	NOUN
easat-4382	88	24	must	must	AUX
easat-4382	88	25	address	address	VERB
easat-4382	88	26	.	.	PUNCT
easat-4382	89	1	one	one	NUM
easat-4382	89	2	key	key	ADJ
easat-4382	89	3	concern	concern	NOUN
easat-4382	89	4	is	be	AUX
easat-4382	89	5	that	that	SCONJ
easat-4382	89	6	containers	container	NOUN
easat-4382	89	7	share	share	VERB
easat-4382	89	8	the	the	DET
easat-4382	89	9	underlying	underlie	VERB
easat-4382	89	10	host	host	NOUN
easat-4382	89	11	os	os	NOUN
easat-4382	89	12	kernel	kernel	PROPN
easat-4382	89	13	,	,	PUNCT
easat-4382	89	14	potentially	potentially	ADV
easat-4382	89	15	enabling	enable	VERB
easat-4382	89	16	a	a	DET
easat-4382	89	17	“	"	PUNCT
easat-4382	89	18	container	container	NOUN
easat-4382	89	19	breakout	breakout	NOUN
easat-4382	89	20	”	"	PUNCT
easat-4382	89	21	attack	attack	NOUN
easat-4382	89	22	[	[	X
easat-4382	89	23	12	12	NUM
easat-4382	89	24	]	]	X
easat-4382	89	25	if	if	SCONJ
easat-4382	89	26	an	an	DET
easat-4382	89	27	exploit	exploit	NOUN
easat-4382	89	28	allows	allow	VERB
easat-4382	89	29	malicious	malicious	ADJ
easat-4382	89	30	processes	process	NOUN
easat-4382	89	31	to	to	PART
easat-4382	89	32	escalate	escalate	VERB
easat-4382	89	33	privileges	privilege	NOUN
easat-4382	89	34	and	and	CCONJ
easat-4382	89	35	affect	affect	VERB
easat-4382	89	36	the	the	DET
easat-4382	89	37	host	host	NOUN
easat-4382	89	38	.	.	PUNCT
easat-4382	90	1	because	because	SCONJ
easat-4382	90	2	multiple	multiple	ADJ
easat-4382	90	3	containers	container	NOUN
easat-4382	90	4	may	may	AUX
easat-4382	90	5	share	share	VERB
easat-4382	90	6	the	the	DET
easat-4382	90	7	same	same	ADJ
easat-4382	90	8	kernel	kernel	NOUN
easat-4382	90	9	,	,	PUNCT
easat-4382	90	10	a	a	DET
easat-4382	90	11	breach	breach	NOUN
easat-4382	90	12	in	in	ADP
easat-4382	90	13	one	one	NUM
easat-4382	90	14	container	container	NOUN
easat-4382	90	15	could	could	AUX
easat-4382	90	16	provide	provide	VERB
easat-4382	90	17	the	the	DET
easat-4382	90	18	door	door	NOUN
easat-4382	90	19	for	for	ADP
easat-4382	90	20	lateral	lateral	ADJ
easat-4382	90	21	movement	movement	NOUN
easat-4382	90	22	across	across	ADP
easat-4382	90	23	other	other	ADJ
easat-4382	90	24	containers	container	NOUN
easat-4382	90	25	or	or	CCONJ
easat-4382	90	26	the	the	DET
easat-4382	90	27	host	host	NOUN
easat-4382	90	28	if	if	SCONJ
easat-4382	90	29	proper	proper	ADJ
easat-4382	90	30	isolation	isolation	NOUN
easat-4382	90	31	controls	control	NOUN
easat-4382	90	32	are	be	AUX
easat-4382	90	33	n’t	not	PART
easat-4382	90	34	in	in	ADP
easat-4382	90	35	place	place	NOUN
easat-4382	90	36	.	.	PUNCT
easat-4382	91	1	furthermore	furthermore	ADV
easat-4382	91	2	,	,	PUNCT
easat-4382	91	3	container	container	NOUN
easat-4382	91	4	images	image	NOUN
easat-4382	91	5	often	often	ADV
easat-4382	91	6	pull	pull	VERB
easat-4382	91	7	in	in	ADP
easat-4382	91	8	libraries	library	NOUN
easat-4382	91	9	and	and	CCONJ
easat-4382	91	10	dependencies	dependency	NOUN
easat-4382	91	11	from	from	ADP
easat-4382	91	12	public	public	ADJ
easat-4382	91	13	repositories	repository	NOUN
easat-4382	91	14	,	,	PUNCT
easat-4382	91	15	which	which	PRON
easat-4382	91	16	might	might	AUX
easat-4382	91	17	contain	contain	VERB
easat-4382	91	18	vulnerabilities	vulnerability	NOUN
easat-4382	91	19	or	or	CCONJ
easat-4382	91	20	malicious	malicious	ADJ
easat-4382	91	21	code	code	NOUN
easat-4382	91	22	;	;	PUNCT
easat-4382	91	23	without	without	ADP
easat-4382	91	24	thorough	thorough	ADJ
easat-4382	91	25	scanning	scanning	NOUN
easat-4382	91	26	and	and	CCONJ
easat-4382	91	27	verification	verification	NOUN
easat-4382	91	28	,	,	PUNCT
easat-4382	91	29	organizations	organization	NOUN
easat-4382	91	30	risk	risk	NOUN
easat-4382	91	31	introducing	introduce	VERB
easat-4382	91	32	security	security	NOUN
easat-4382	91	33	gaps	gap	NOUN
easat-4382	91	34	directly	directly	ADV
easat-4382	91	35	into	into	ADP
easat-4382	91	36	their	their	PRON
easat-4382	91	37	production	production	NOUN
easat-4382	91	38	environments	environment	NOUN
easat-4382	91	39	.	.	PUNCT
easat-4382	92	1	misconfigurations	misconfiguration	NOUN
easat-4382	92	2	such	such	ADJ
easat-4382	92	3	as	as	ADP
easat-4382	92	4	running	run	VERB
easat-4382	92	5	containers	container	NOUN
easat-4382	92	6	with	with	ADP
easat-4382	92	7	overly	overly	ADV
easat-4382	92	8	permissive	permissive	ADJ
easat-4382	92	9	privileges	privilege	NOUN
easat-4382	92	10	or	or	CCONJ
easat-4382	92	11	allowing	allow	VERB
easat-4382	92	12	unnecessary	unnecessary	ADJ
easat-4382	92	13	system	system	NOUN
easat-4382	92	14	calls	call	VERB
easat-4382	92	15	further	far	ADV
easat-4382	92	16	widen	widen	VERB
easat-4382	92	17	the	the	DET
easat-4382	92	18	attack	attack	NOUN
easat-4382	92	19	surface	surface	NOUN
easat-4382	92	20	,	,	PUNCT
easat-4382	92	21	giving	give	VERB
easat-4382	92	22	adversaries	adversary	NOUN
easat-4382	92	23	more	more	ADJ
easat-4382	92	24	pathways	pathway	NOUN
easat-4382	92	25	to	to	PART
easat-4382	92	26	exploit	exploit	VERB
easat-4382	92	27	.	.	PUNCT
easat-4382	93	1	figure	figure	VERB
easat-4382	93	2	4	4	NUM
easat-4382	93	3	.	.	PUNCT
easat-4382	94	1	kubernetes	kubernetes	PROPN
easat-4382	94	2	cluster	cluster	NOUN
easat-4382	94	3	components	component	NOUN
easat-4382	94	4	(	(	PUNCT
easat-4382	94	5	from	from	ADP
easat-4382	94	6	the	the	DET
easat-4382	94	7	kubernetes	kubernete	NOUN
easat-4382	94	8	authors	author	NOUN
easat-4382	94	9	[	[	X
easat-4382	94	10	13	13	NUM
easat-4382	94	11	]	]	PUNCT
easat-4382	94	12	.	.	PUNCT
easat-4382	95	1	another	another	DET
easat-4382	95	2	challenge	challenge	NOUN
easat-4382	95	3	is	be	AUX
easat-4382	95	4	that	that	SCONJ
easat-4382	95	5	container	container	NOUN
easat-4382	95	6	orchestration	orchestration	NOUN
easat-4382	95	7	platforms	platform	NOUN
easat-4382	95	8	,	,	PUNCT
easat-4382	95	9	like	like	ADP
easat-4382	95	10	kubernetes	kubernete	NOUN
easat-4382	95	11	,	,	PUNCT
easat-4382	95	12	bring	bring	VERB
easat-4382	95	13	additional	additional	ADJ
easat-4382	95	14	complexity	complexity	NOUN
easat-4382	95	15	and	and	CCONJ
easat-4382	95	16	,	,	PUNCT
easat-4382	95	17	therefore	therefore	ADV
easat-4382	95	18	,	,	PUNCT
easat-4382	95	19	more	more	ADJ
easat-4382	95	20	potential	potential	ADJ
easat-4382	95	21	points	point	NOUN
easat-4382	95	22	of	of	ADP
easat-4382	95	23	failure	failure	NOUN
easat-4382	95	24	(	(	PUNCT
easat-4382	95	25	figure	figure	NOUN
easat-4382	95	26	4	4	NUM
easat-4382	95	27	)	)	PUNCT
easat-4382	95	28	.	.	PUNCT
easat-4382	96	1	exposed	expose	VERB
easat-4382	96	2	application	application	NOUN
easat-4382	96	3	programming	programming	NOUN
easat-4382	96	4	interfaces	interface	NOUN
easat-4382	96	5	(	(	PUNCT
easat-4382	96	6	apis	apis	ADJ
easat-4382	96	7	)	)	PUNCT
easat-4382	96	8	,	,	PUNCT
easat-4382	96	9	insecure	insecure	ADJ
easat-4382	96	10	access	access	NOUN
easat-4382	96	11	controls	control	NOUN
easat-4382	96	12	,	,	PUNCT
easat-4382	96	13	and	and	CCONJ
easat-4382	96	14	misapplied	misapply	VERB
easat-4382	96	15	role	role	NOUN
easat-4382	96	16	-	-	PUNCT
easat-4382	96	17	based	base	VERB
easat-4382	96	18	access	access	NOUN
easat-4382	96	19	control	control	NOUN
easat-4382	96	20	(	(	PUNCT
easat-4382	96	21	rbac	rbac	NOUN
easat-4382	96	22	)	)	PUNCT
easat-4382	96	23	configurations	configuration	NOUN
easat-4382	96	24	can	can	AUX
easat-4382	96	25	all	all	PRON
easat-4382	96	26	lead	lead	VERB
easat-4382	96	27	to	to	ADP
easat-4382	96	28	unauthorized	unauthorized	ADJ
easat-4382	96	29	control	control	NOUN
easat-4382	96	30	over	over	ADP
easat-4382	96	31	the	the	DET
easat-4382	96	32	containerized	containerized	ADJ
easat-4382	96	33	environment	environment	NOUN
easat-4382	96	34	[	[	X
easat-4382	96	35	6	6	NUM
easat-4382	96	36	]	]	PUNCT
easat-4382	96	37	.	.	PUNCT
easat-4382	97	1	attackers	attacker	NOUN
easat-4382	97	2	can	can	AUX
easat-4382	97	3	exploit	exploit	VERB
easat-4382	97	4	these	these	DET
easat-4382	97	5	weaknesses	weakness	NOUN
easat-4382	97	6	by	by	ADP
easat-4382	97	7	launching	launch	VERB
easat-4382	97	8	denial	denial	NOUN
easat-4382	97	9	-	-	PUNCT
easat-4382	97	10	of	of	ADP
easat-4382	97	11	-	-	PUNCT
easat-4382	97	12	service	service	NOUN
easat-4382	97	13	attacks	attack	NOUN
easat-4382	97	14	,	,	PUNCT
easat-4382	97	15	intercepting	intercept	VERB
easat-4382	97	16	network	network	NOUN
easat-4382	97	17	traffic	traffic	NOUN
easat-4382	97	18	,	,	PUNCT
easat-4382	97	19	or	or	CCONJ
easat-4382	97	20	enabling	enable	VERB
easat-4382	97	21	backdoors	backdoor	NOUN
easat-4382	97	22	inside	inside	ADP
easat-4382	97	23	containers	container	NOUN
easat-4382	97	24	.	.	PUNCT
easat-4382	98	1	additionally	additionally	ADV
easat-4382	98	2	,	,	PUNCT
easat-4382	98	3	the	the	DET
easat-4382	98	4	ephemeral	ephemeral	ADJ
easat-4382	98	5	nature	nature	NOUN
easat-4382	98	6	of	of	ADP
easat-4382	98	7	containers	container	NOUN
easat-4382	98	8	means	mean	VERB
easat-4382	98	9	that	that	SCONJ
easat-4382	98	10	logs	log	NOUN
easat-4382	98	11	and	and	CCONJ
easat-4382	98	12	other	other	ADJ
easat-4382	98	13	forensic	forensic	ADJ
easat-4382	98	14	evidence	evidence	NOUN
easat-4382	98	15	might	might	AUX
easat-4382	98	16	not	not	PART
easat-4382	98	17	persist	persist	VERB
easat-4382	98	18	,	,	PUNCT
easat-4382	98	19	complicating	complicate	VERB
easat-4382	98	20	incident	incident	NOUN
easat-4382	98	21	detection	detection	NOUN
easat-4382	98	22	and	and	CCONJ
easat-4382	98	23	response	response	NOUN
easat-4382	98	24	efforts	effort	NOUN
easat-4382	98	25	.	.	PUNCT
easat-4382	99	1	as	as	ADP
easat-4382	99	2	a	a	DET
easat-4382	99	3	result	result	NOUN
easat-4382	99	4	,	,	PUNCT
easat-4382	99	5	organizations	organization	NOUN
easat-4382	99	6	using	use	VERB
easat-4382	99	7	containers	container	NOUN
easat-4382	99	8	must	must	AUX
easat-4382	99	9	adopt	adopt	VERB
easat-4382	99	10	a	a	DET
easat-4382	99	11	complete	complete	ADJ
easat-4382	99	12	security	security	NOUN
easat-4382	99	13	strategy	strategy	NOUN
easat-4382	99	14	—	—	PUNCT
easat-4382	99	15	including	include	VERB
easat-4382	99	16	secure	secure	ADJ
easat-4382	99	17	image	image	NOUN
easat-4382	99	18	creation	creation	NOUN
easat-4382	99	19	,	,	PUNCT
easat-4382	99	20	continuous	continuous	ADJ
easat-4382	99	21	1248	1248	NUM
easat-4382	99	22	edelweiss	edelweiss	PROPN
easat-4382	99	23	applied	apply	VERB
easat-4382	99	24	science	science	NOUN
easat-4382	99	25	and	and	CCONJ
easat-4382	99	26	technology	technology	NOUN
easat-4382	99	27	issn	issn	PROPN
easat-4382	99	28	:	:	PUNCT
easat-4382	99	29	2576	2576	NUM
easat-4382	99	30	-	-	SYM
easat-4382	99	31	8484	8484	NUM
easat-4382	99	32	vol	vol	NOUN
easat-4382	99	33	.	.	PROPN
easat-4382	100	1	9	9	NUM
easat-4382	100	2	,	,	PUNCT
easat-4382	100	3	no	no	INTJ
easat-4382	100	4	.	.	NOUN
easat-4382	100	5	1	1	NUM
easat-4382	100	6	:	:	PUNCT
easat-4382	100	7	1243	1243	NUM
easat-4382	100	8	-	-	SYM
easat-4382	100	9	1261	1261	NUM
easat-4382	100	10	,	,	PUNCT
easat-4382	100	11	2025	2025	NUM
easat-4382	100	12	doi	doi	NOUN
easat-4382	100	13	:	:	PUNCT
easat-4382	100	14	10.55214/25768484.v9i1.4382	10.55214/25768484.v9i1.4382	NUM
easat-4382	100	15	©	©	PROPN
easat-4382	100	16	2025	2025	NUM
easat-4382	100	17	by	by	ADP
easat-4382	100	18	the	the	DET
easat-4382	100	19	authors	author	NOUN
easat-4382	100	20	;	;	PUNCT
easat-4382	101	1	licensee	licensee	PROPN
easat-4382	101	2	learning	learning	NOUN
easat-4382	101	3	gate	gate	NOUN
easat-4382	101	4	vulnerability	vulnerability	NOUN
easat-4382	101	5	scanning	scanning	NOUN
easat-4382	101	6	,	,	PUNCT
easat-4382	101	7	robust	robust	ADJ
easat-4382	101	8	runtime	runtime	NOUN
easat-4382	101	9	security	security	NOUN
easat-4382	101	10	policies	policy	NOUN
easat-4382	101	11	,	,	PUNCT
easat-4382	101	12	and	and	CCONJ
easat-4382	101	13	strong	strong	ADJ
easat-4382	101	14	governance	governance	NOUN
easat-4382	101	15	over	over	ADP
easat-4382	101	16	orchestration	orchestration	NOUN
easat-4382	101	17	platforms	platform	NOUN
easat-4382	101	18	—	—	PUNCT
easat-4382	101	19	to	to	PART
easat-4382	101	20	mitigate	mitigate	VERB
easat-4382	101	21	the	the	DET
easat-4382	101	22	unique	unique	ADJ
easat-4382	101	23	risks	risk	NOUN
easat-4382	101	24	associated	associate	VERB
easat-4382	101	25	with	with	ADP
easat-4382	101	26	container	container	NOUN
easat-4382	101	27	-	-	PUNCT
easat-4382	101	28	based	base	VERB
easat-4382	101	29	deployments	deployment	NOUN
easat-4382	101	30	[	[	X
easat-4382	101	31	14	14	NUM
easat-4382	101	32	]	]	PUNCT
easat-4382	101	33	.	.	PUNCT
easat-4382	102	1	4	4	X
easat-4382	102	2	.	.	X
easat-4382	102	3	container	container	NOUN
easat-4382	102	4	security	security	NOUN
easat-4382	102	5	when	when	SCONJ
easat-4382	102	6	comparing	compare	VERB
easat-4382	102	7	container	container	NOUN
easat-4382	102	8	-	-	PUNCT
easat-4382	102	9	based	base	VERB
easat-4382	102	10	security	security	NOUN
easat-4382	102	11	with	with	ADP
easat-4382	102	12	the	the	DET
easat-4382	102	13	security	security	NOUN
easat-4382	102	14	of	of	ADP
easat-4382	102	15	traditional	traditional	ADJ
easat-4382	102	16	monolithic	monolithic	ADJ
easat-4382	102	17	applications	application	NOUN
easat-4382	102	18	,	,	PUNCT
easat-4382	102	19	one	one	NUM
easat-4382	102	20	of	of	ADP
easat-4382	102	21	the	the	DET
easat-4382	102	22	most	most	ADV
easat-4382	102	23	essential	essential	ADJ
easat-4382	102	24	differences	difference	NOUN
easat-4382	102	25	lies	lie	VERB
easat-4382	102	26	in	in	ADP
easat-4382	102	27	resource	resource	NOUN
easat-4382	102	28	and	and	CCONJ
easat-4382	102	29	os	os	NOUN
easat-4382	102	30	isolation	isolation	NOUN
easat-4382	102	31	.	.	PUNCT
easat-4382	103	1	in	in	ADP
easat-4382	103	2	traditional	traditional	ADJ
easat-4382	103	3	environments	environment	NOUN
easat-4382	103	4	,	,	PUNCT
easat-4382	103	5	mainly	mainly	ADV
easat-4382	103	6	when	when	SCONJ
easat-4382	103	7	using	use	VERB
easat-4382	103	8	virtual	virtual	ADJ
easat-4382	103	9	machines	machine	NOUN
easat-4382	103	10	,	,	PUNCT
easat-4382	103	11	each	each	DET
easat-4382	103	12	vm	vm	PROPN
easat-4382	103	13	typically	typically	ADV
easat-4382	103	14	runs	run	VERB
easat-4382	103	15	its	its	PRON
easat-4382	103	16	operating	operating	NOUN
easat-4382	103	17	system	system	NOUN
easat-4382	103	18	instance	instance	NOUN
easat-4382	103	19	,	,	PUNCT
easat-4382	103	20	creating	create	VERB
easat-4382	103	21	a	a	DET
easat-4382	103	22	relatively	relatively	ADV
easat-4382	103	23	clear	clear	ADJ
easat-4382	103	24	boundary	boundary	NOUN
easat-4382	103	25	for	for	ADP
easat-4382	103	26	security	security	NOUN
easat-4382	103	27	controls	control	NOUN
easat-4382	103	28	.	.	PUNCT
easat-4382	104	1	this	this	PRON
easat-4382	104	2	helps	help	VERB
easat-4382	104	3	compartmentalize	compartmentalize	VERB
easat-4382	104	4	attacks	attack	NOUN
easat-4382	104	5	since	since	SCONJ
easat-4382	104	6	a	a	DET
easat-4382	104	7	breach	breach	NOUN
easat-4382	104	8	in	in	ADP
easat-4382	104	9	one	one	NUM
easat-4382	104	10	virtual	virtual	ADJ
easat-4382	104	11	machine	machine	NOUN
easat-4382	104	12	does	do	AUX
easat-4382	104	13	not	not	PART
easat-4382	104	14	necessarily	necessarily	ADV
easat-4382	104	15	lead	lead	VERB
easat-4382	104	16	to	to	PART
easat-4382	104	17	compromise	compromise	VERB
easat-4382	104	18	in	in	ADP
easat-4382	104	19	another	another	PRON
easat-4382	104	20	.	.	PUNCT
easat-4382	105	1	monolithic	monolithic	ADJ
easat-4382	105	2	applications	application	NOUN
easat-4382	105	3	,	,	PUNCT
easat-4382	105	4	which	which	PRON
easat-4382	105	5	often	often	ADV
easat-4382	105	6	run	run	VERB
easat-4382	105	7	on	on	ADP
easat-4382	105	8	these	these	DET
easat-4382	105	9	dedicated	dedicated	ADJ
easat-4382	105	10	servers	server	NOUN
easat-4382	105	11	or	or	CCONJ
easat-4382	105	12	vms	vms	PROPN
easat-4382	105	13	,	,	PUNCT
easat-4382	105	14	generally	generally	ADV
easat-4382	105	15	have	have	VERB
easat-4382	105	16	fewer	few	ADJ
easat-4382	105	17	moving	move	VERB
easat-4382	105	18	parts	part	NOUN
easat-4382	105	19	,	,	PUNCT
easat-4382	105	20	simplifying	simplify	VERB
easat-4382	105	21	security	security	NOUN
easat-4382	105	22	monitoring	monitoring	NOUN
easat-4382	105	23	and	and	CCONJ
easat-4382	105	24	patch	patch	NOUN
easat-4382	105	25	management	management	NOUN
easat-4382	105	26	.	.	PUNCT
easat-4382	106	1	however	however	ADV
easat-4382	106	2	,	,	PUNCT
easat-4382	106	3	they	they	PRON
easat-4382	106	4	may	may	AUX
easat-4382	106	5	also	also	ADV
easat-4382	106	6	suffer	suffer	VERB
easat-4382	106	7	from	from	ADP
easat-4382	106	8	larger	large	ADJ
easat-4382	106	9	attack	attack	NOUN
easat-4382	106	10	surfaces	surface	NOUN
easat-4382	106	11	at	at	ADP
easat-4382	106	12	the	the	DET
easat-4382	106	13	application	application	NOUN
easat-4382	106	14	level	level	NOUN
easat-4382	106	15	since	since	SCONJ
easat-4382	106	16	all	all	DET
easat-4382	106	17	functionality	functionality	NOUN
easat-4382	106	18	is	be	AUX
easat-4382	106	19	bundled	bundle	VERB
easat-4382	106	20	together	together	ADV
easat-4382	106	21	in	in	ADP
easat-4382	106	22	a	a	DET
easat-4382	106	23	single	single	ADJ
easat-4382	106	24	,	,	PUNCT
easat-4382	106	25	often	often	ADV
easat-4382	106	26	complex	complex	ADJ
easat-4382	106	27	process	process	NOUN
easat-4382	106	28	.	.	PUNCT
easat-4382	107	1	scaling	scale	VERB
easat-4382	107	2	and	and	CCONJ
easat-4382	107	3	updating	update	VERB
easat-4382	107	4	these	these	DET
easat-4382	107	5	monolithic	monolithic	ADJ
easat-4382	107	6	systems	system	NOUN
easat-4382	107	7	can	can	AUX
easat-4382	107	8	be	be	AUX
easat-4382	107	9	problematic	problematic	ADJ
easat-4382	107	10	,	,	PUNCT
easat-4382	107	11	which	which	PRON
easat-4382	107	12	can	can	AUX
easat-4382	107	13	,	,	PUNCT
easat-4382	107	14	in	in	ADP
easat-4382	107	15	turn	turn	NOUN
easat-4382	107	16	,	,	PUNCT
easat-4382	107	17	delay	delay	VERB
easat-4382	107	18	security	security	NOUN
easat-4382	107	19	patches	patch	NOUN
easat-4382	107	20	or	or	CCONJ
easat-4382	107	21	updates	update	NOUN
easat-4382	107	22	,	,	PUNCT
easat-4382	107	23	leaving	leave	VERB
easat-4382	107	24	known	know	VERB
easat-4382	107	25	vulnerabilities	vulnerability	NOUN
easat-4382	107	26	unpatched	unpatche	VERB
easat-4382	107	27	for	for	ADP
easat-4382	107	28	more	more	ADV
easat-4382	107	29	extended	extended	ADJ
easat-4382	107	30	periods	period	NOUN
easat-4382	107	31	.	.	PUNCT
easat-4382	108	1	on	on	ADP
easat-4382	108	2	the	the	DET
easat-4382	108	3	other	other	ADJ
easat-4382	108	4	hand	hand	NOUN
easat-4382	108	5	,	,	PUNCT
easat-4382	108	6	containers	container	NOUN
easat-4382	108	7	share	share	VERB
easat-4382	108	8	the	the	DET
easat-4382	108	9	host	host	NOUN
easat-4382	108	10	os	os	NOUN
easat-4382	108	11	kernel	kernel	PROPN
easat-4382	108	12	while	while	SCONJ
easat-4382	108	13	isolating	isolate	VERB
easat-4382	108	14	applications	application	NOUN
easat-4382	108	15	at	at	ADP
easat-4382	108	16	the	the	DET
easat-4382	108	17	process	process	NOUN
easat-4382	108	18	level	level	NOUN
easat-4382	108	19	using	use	VERB
easat-4382	108	20	features	feature	NOUN
easat-4382	108	21	like	like	ADP
easat-4382	108	22	namespaces	namespace	NOUN
easat-4382	108	23	and	and	CCONJ
easat-4382	108	24	cgroups	cgroup	NOUN
easat-4382	108	25	.	.	PUNCT
easat-4382	109	1	this	this	DET
easat-4382	109	2	approach	approach	NOUN
easat-4382	109	3	makes	make	VERB
easat-4382	109	4	containerized	containerized	ADJ
easat-4382	109	5	environments	environment	NOUN
easat-4382	109	6	lighter	light	ADJ
easat-4382	109	7	and	and	CCONJ
easat-4382	109	8	more	more	ADV
easat-4382	109	9	scalable	scalable	ADJ
easat-4382	109	10	,	,	PUNCT
easat-4382	109	11	creating	create	VERB
easat-4382	109	12	new	new	ADJ
easat-4382	109	13	security	security	NOUN
easat-4382	109	14	challenges	challenge	NOUN
easat-4382	109	15	.	.	PUNCT
easat-4382	110	1	if	if	SCONJ
easat-4382	110	2	an	an	DET
easat-4382	110	3	attacker	attacker	NOUN
easat-4382	110	4	exploits	exploit	VERB
easat-4382	110	5	the	the	DET
easat-4382	110	6	kernel	kernel	NOUN
easat-4382	110	7	or	or	CCONJ
easat-4382	110	8	a	a	DET
easat-4382	110	9	container	container	NOUN
easat-4382	110	10	breakout	breakout	NOUN
easat-4382	110	11	vulnerability	vulnerability	NOUN
easat-4382	110	12	,	,	PUNCT
easat-4382	110	13	they	they	PRON
easat-4382	110	14	can	can	AUX
easat-4382	110	15	potentially	potentially	ADV
easat-4382	110	16	pivot	pivot	VERB
easat-4382	110	17	to	to	ADP
easat-4382	110	18	other	other	ADJ
easat-4382	110	19	containers	container	NOUN
easat-4382	110	20	or	or	CCONJ
easat-4382	110	21	escalate	escalate	VERB
easat-4382	110	22	privileges	privilege	NOUN
easat-4382	110	23	on	on	ADP
easat-4382	110	24	the	the	DET
easat-4382	110	25	host	host	NOUN
easat-4382	110	26	.	.	PUNCT
easat-4382	111	1	additionally	additionally	ADV
easat-4382	111	2	,	,	PUNCT
easat-4382	111	3	the	the	DET
easat-4382	111	4	microservices	microservice	NOUN
easat-4382	111	5	-	-	PUNCT
easat-4382	111	6	based	base	VERB
easat-4382	111	7	architecture	architecture	NOUN
easat-4382	111	8	that	that	PRON
easat-4382	111	9	containers	container	NOUN
easat-4382	111	10	commonly	commonly	ADV
easat-4382	111	11	support	support	VERB
easat-4382	111	12	involves	involve	VERB
easat-4382	111	13	numerous	numerous	ADJ
easat-4382	111	14	interconnected	interconnected	ADJ
easat-4382	111	15	services	service	NOUN
easat-4382	111	16	,	,	PUNCT
easat-4382	111	17	each	each	PRON
easat-4382	111	18	potentially	potentially	ADV
easat-4382	111	19	running	run	VERB
easat-4382	111	20	in	in	ADP
easat-4382	111	21	multiple	multiple	ADJ
easat-4382	111	22	containers	container	NOUN
easat-4382	111	23	,	,	PUNCT
easat-4382	111	24	which	which	PRON
easat-4382	111	25	increases	increase	VERB
easat-4382	111	26	the	the	DET
easat-4382	111	27	overall	overall	ADJ
easat-4382	111	28	number	number	NOUN
easat-4382	111	29	of	of	ADP
easat-4382	111	30	network	network	NOUN
easat-4382	111	31	endpoints	endpoint	NOUN
easat-4382	111	32	and	and	CCONJ
easat-4382	111	33	communication	communication	NOUN
easat-4382	111	34	paths	path	NOUN
easat-4382	111	35	.	.	PUNCT
easat-4382	112	1	these	these	DET
easat-4382	112	2	factors	factor	NOUN
easat-4382	112	3	expand	expand	VERB
easat-4382	112	4	the	the	DET
easat-4382	112	5	security	security	NOUN
easat-4382	112	6	surface	surface	NOUN
easat-4382	112	7	area	area	NOUN
easat-4382	112	8	and	and	CCONJ
easat-4382	112	9	complicate	complicate	VERB
easat-4382	112	10	monitoring	monitoring	NOUN
easat-4382	112	11	.	.	PUNCT
easat-4382	113	1	developers	developer	NOUN
easat-4382	113	2	must	must	AUX
easat-4382	113	3	implement	implement	VERB
easat-4382	113	4	robust	robust	ADJ
easat-4382	113	5	isolation	isolation	NOUN
easat-4382	113	6	settings	setting	NOUN
easat-4382	113	7	(	(	PUNCT
easat-4382	113	8	like	like	INTJ
easat-4382	113	9	selinux	selinux	X
easat-4382	113	10	red	red	ADJ
easat-4382	113	11	hat	hat	NOUN
easat-4382	114	1	[	[	X
easat-4382	114	2	15	15	NUM
easat-4382	114	3	]	]	PUNCT
easat-4382	114	4	and	and	CCONJ
easat-4382	114	5	apparmor	apparmor	NOUN
easat-4382	114	6	[	[	X
easat-4382	114	7	16	16	NUM
easat-4382	114	8	]	]	PUNCT
easat-4382	114	9	)	)	PUNCT
easat-4382	115	1	and	and	CCONJ
easat-4382	115	2	follow	follow	VERB
easat-4382	115	3	best	good	ADJ
easat-4382	115	4	practices	practice	NOUN
easat-4382	115	5	such	such	ADJ
easat-4382	115	6	as	as	ADP
easat-4382	115	7	running	run	VERB
easat-4382	115	8	containers	container	NOUN
easat-4382	115	9	in	in	ADP
easat-4382	115	10	non	non	ADJ
easat-4382	115	11	-	-	ADJ
easat-4382	115	12	root	root	ADJ
easat-4382	115	13	or	or	CCONJ
easat-4382	115	14	“	"	PUNCT
easat-4382	115	15	rootless	rootless	ADJ
easat-4382	115	16	”	"	PUNCT
easat-4382	115	17	modes	mode	NOUN
easat-4382	115	18	,	,	PUNCT
easat-4382	115	19	regularly	regularly	ADV
easat-4382	115	20	scanning	scan	VERB
easat-4382	115	21	images	image	NOUN
easat-4382	115	22	for	for	ADP
easat-4382	115	23	known	know	VERB
easat-4382	115	24	vulnerabilities	vulnerability	NOUN
easat-4382	115	25	,	,	PUNCT
easat-4382	115	26	and	and	CCONJ
easat-4382	115	27	automating	automate	VERB
easat-4382	115	28	patching	patching	NOUN
easat-4382	115	29	.	.	PUNCT
easat-4382	116	1	this	this	DET
easat-4382	116	2	more	more	ADV
easat-4382	116	3	modular	modular	ADJ
easat-4382	116	4	ecosystem	ecosystem	NOUN
easat-4382	116	5	also	also	ADV
easat-4382	116	6	means	mean	VERB
easat-4382	116	7	quicker	quick	ADJ
easat-4382	116	8	patching	patch	VERB
easat-4382	116	9	and	and	CCONJ
easat-4382	116	10	rolling	rolling	ADJ
easat-4382	116	11	upgrades	upgrade	NOUN
easat-4382	116	12	are	be	AUX
easat-4382	116	13	possible	possible	ADJ
easat-4382	116	14	,	,	PUNCT
easat-4382	116	15	but	but	CCONJ
easat-4382	116	16	only	only	ADV
easat-4382	116	17	if	if	SCONJ
easat-4382	116	18	proper	proper	ADJ
easat-4382	116	19	devsecops	devsecop	NOUN
easat-4382	117	1	[	[	X
easat-4382	117	2	17	17	NUM
easat-4382	117	3	]	]	X
easat-4382	117	4	practices	practice	NOUN
easat-4382	117	5	are	be	AUX
easat-4382	117	6	in	in	ADP
easat-4382	117	7	place	place	NOUN
easat-4382	117	8	to	to	PART
easat-4382	117	9	handle	handle	VERB
easat-4382	117	10	the	the	DET
easat-4382	117	11	rapid	rapid	ADJ
easat-4382	117	12	generation	generation	NOUN
easat-4382	117	13	of	of	ADP
easat-4382	117	14	container	container	NOUN
easat-4382	117	15	versions	version	NOUN
easat-4382	117	16	.	.	PUNCT
easat-4382	118	1	container	container	NOUN
easat-4382	118	2	security	security	NOUN
easat-4382	118	3	architecture	architecture	NOUN
easat-4382	118	4	is	be	AUX
easat-4382	118	5	built	build	VERB
easat-4382	118	6	around	around	ADP
easat-4382	118	7	process	process	NOUN
easat-4382	118	8	-	-	PUNCT
easat-4382	118	9	level	level	NOUN
easat-4382	118	10	isolation	isolation	NOUN
easat-4382	118	11	and	and	CCONJ
easat-4382	118	12	resource	resource	NOUN
easat-4382	118	13	management	management	NOUN
easat-4382	118	14	,	,	PUNCT
easat-4382	118	15	leveraging	leverage	VERB
easat-4382	118	16	linux	linux	PROPN
easat-4382	118	17	kernel	kernel	PROPN
easat-4382	118	18	features	feature	VERB
easat-4382	118	19	such	such	ADJ
easat-4382	118	20	as	as	ADP
easat-4382	118	21	namespaces	namespace	NOUN
easat-4382	118	22	and	and	CCONJ
easat-4382	118	23	cgroups	cgroup	NOUN
easat-4382	118	24	.	.	PUNCT
easat-4382	119	1	namespaces	namespace	NOUN
easat-4382	119	2	isolate	isolate	VERB
easat-4382	119	3	core	core	NOUN
easat-4382	119	4	systems	system	NOUN
easat-4382	119	5	,	,	PUNCT
easat-4382	119	6	like	like	ADP
easat-4382	119	7	process	process	NOUN
easat-4382	119	8	ids	id	NOUN
easat-4382	119	9	,	,	PUNCT
easat-4382	119	10	network	network	NOUN
easat-4382	119	11	stacks	stack	NOUN
easat-4382	119	12	,	,	PUNCT
easat-4382	119	13	and	and	CCONJ
easat-4382	119	14	user	user	NOUN
easat-4382	119	15	ids	id	NOUN
easat-4382	119	16	—	—	PUNCT
easat-4382	119	17	so	so	ADV
easat-4382	119	18	each	each	DET
easat-4382	119	19	container	container	NOUN
easat-4382	119	20	perceives	perceive	VERB
easat-4382	119	21	a	a	DET
easat-4382	119	22	dedicated	dedicated	ADJ
easat-4382	119	23	view	view	NOUN
easat-4382	119	24	of	of	ADP
easat-4382	119	25	the	the	DET
easat-4382	119	26	operating	operating	NOUN
easat-4382	119	27	environment	environment	NOUN
easat-4382	119	28	.	.	PUNCT
easat-4382	120	1	for	for	ADP
easat-4382	120	2	example	example	NOUN
easat-4382	120	3	,	,	PUNCT
easat-4382	120	4	the	the	DET
easat-4382	120	5	pid	pid	NOUN
easat-4382	120	6	namespace	namespace	NOUN
easat-4382	120	7	ensures	ensure	VERB
easat-4382	120	8	a	a	DET
easat-4382	120	9	container	container	NOUN
easat-4382	120	10	only	only	ADV
easat-4382	120	11	sees	see	VERB
easat-4382	120	12	its	its	PRON
easat-4382	120	13	processes	process	NOUN
easat-4382	120	14	,	,	PUNCT
easat-4382	120	15	while	while	SCONJ
easat-4382	120	16	the	the	DET
easat-4382	120	17	network	network	NOUN
easat-4382	120	18	namespace	namespace	NOUN
easat-4382	120	19	provides	provide	VERB
easat-4382	120	20	a	a	DET
easat-4382	120	21	private	private	ADJ
easat-4382	120	22	network	network	NOUN
easat-4382	120	23	stack	stack	NOUN
easat-4382	120	24	.	.	PUNCT
easat-4382	121	1	cgroups	cgroups	PROPN
easat-4382	121	2	,	,	PUNCT
easat-4382	121	3	however	however	ADV
easat-4382	121	4	,	,	PUNCT
easat-4382	121	5	manage	manage	VERB
easat-4382	121	6	how	how	SCONJ
easat-4382	121	7	much	much	ADJ
easat-4382	121	8	cpu	cpu	NOUN
easat-4382	121	9	,	,	PUNCT
easat-4382	121	10	memory	memory	NOUN
easat-4382	121	11	,	,	PUNCT
easat-4382	121	12	and	and	CCONJ
easat-4382	121	13	disk	disk	NOUN
easat-4382	121	14	i	i	PROPN
easat-4382	121	15	/	/	SYM
easat-4382	121	16	o	o	NOUN
easat-4382	121	17	each	each	DET
easat-4382	121	18	container	container	NOUN
easat-4382	121	19	can	can	AUX
easat-4382	121	20	use	use	VERB
easat-4382	121	21	,	,	PUNCT
easat-4382	121	22	preventing	prevent	VERB
easat-4382	121	23	one	one	NUM
easat-4382	121	24	container	container	NOUN
easat-4382	121	25	’s	’s	PART
easat-4382	121	26	resource	resource	NOUN
easat-4382	121	27	-	-	PUNCT
easat-4382	121	28	intensive	intensive	ADJ
easat-4382	121	29	activity	activity	NOUN
easat-4382	121	30	from	from	ADP
easat-4382	121	31	starving	starve	VERB
easat-4382	121	32	others	other	NOUN
easat-4382	121	33	or	or	CCONJ
easat-4382	121	34	the	the	DET
easat-4382	121	35	host	host	NOUN
easat-4382	121	36	.	.	PUNCT
easat-4382	122	1	namespaces	namespace	NOUN
easat-4382	122	2	and	and	CCONJ
easat-4382	122	3	cgroups	cgroup	NOUN
easat-4382	122	4	enforce	enforce	VERB
easat-4382	122	5	firm	firm	ADJ
easat-4382	122	6	boundaries	boundary	NOUN
easat-4382	122	7	between	between	ADP
easat-4382	122	8	containers	container	NOUN
easat-4382	122	9	,	,	PUNCT
easat-4382	122	10	effectively	effectively	ADV
easat-4382	122	11	limiting	limit	VERB
easat-4382	122	12	the	the	DET
easat-4382	122	13	damage	damage	NOUN
easat-4382	122	14	a	a	DET
easat-4382	122	15	compromised	compromise	VERB
easat-4382	122	16	container	container	NOUN
easat-4382	122	17	can	can	AUX
easat-4382	122	18	inflict	inflict	VERB
easat-4382	122	19	.	.	PUNCT
easat-4382	123	1	however	however	ADV
easat-4382	123	2	,	,	PUNCT
easat-4382	123	3	because	because	SCONJ
easat-4382	123	4	containers	container	NOUN
easat-4382	123	5	share	share	VERB
easat-4382	123	6	the	the	DET
easat-4382	123	7	host	host	NOUN
easat-4382	123	8	os	os	NOUN
easat-4382	123	9	kernel	kernel	PROPN
easat-4382	123	10	,	,	PUNCT
easat-4382	123	11	this	this	DET
easat-4382	123	12	model	model	NOUN
easat-4382	123	13	still	still	ADV
easat-4382	123	14	demands	demand	VERB
easat-4382	123	15	kernel	kernel	NOUN
easat-4382	123	16	patching	patching	NOUN
easat-4382	123	17	and	and	CCONJ
easat-4382	123	18	tight	tight	ADJ
easat-4382	123	19	configuration	configuration	NOUN
easat-4382	123	20	of	of	ADP
easat-4382	123	21	kernel	kernel	PROPN
easat-4382	123	22	security	security	NOUN
easat-4382	123	23	mechanisms	mechanism	NOUN
easat-4382	123	24	to	to	PART
easat-4382	123	25	mitigate	mitigate	VERB
easat-4382	123	26	the	the	DET
easat-4382	123	27	risk	risk	NOUN
easat-4382	123	28	of	of	ADP
easat-4382	123	29	container	container	NOUN
easat-4382	123	30	breakout	breakout	NOUN
easat-4382	123	31	attacks	attack	NOUN
easat-4382	123	32	.	.	PUNCT
easat-4382	124	1	additionally	additionally	ADV
easat-4382	124	2	,	,	PUNCT
easat-4382	124	3	container	container	NOUN
easat-4382	124	4	images	image	NOUN
easat-4382	124	5	are	be	AUX
easat-4382	124	6	typically	typically	ADV
easat-4382	124	7	minimalistic	minimalistic	ADJ
easat-4382	124	8	,	,	PUNCT
easat-4382	124	9	containing	contain	VERB
easat-4382	124	10	only	only	ADV
easat-4382	124	11	the	the	DET
easat-4382	124	12	libraries	library	NOUN
easat-4382	124	13	and	and	CCONJ
easat-4382	124	14	dependencies	dependency	NOUN
easat-4382	124	15	necessary	necessary	ADJ
easat-4382	124	16	for	for	SCONJ
easat-4382	124	17	the	the	DET
easat-4382	124	18	application	application	NOUN
easat-4382	124	19	to	to	PART
easat-4382	124	20	run	run	VERB
easat-4382	124	21	,	,	PUNCT
easat-4382	124	22	which	which	PRON
easat-4382	124	23	helps	help	VERB
easat-4382	124	24	reduce	reduce	VERB
easat-4382	124	25	the	the	DET
easat-4382	124	26	overall	overall	ADJ
easat-4382	124	27	attack	attack	NOUN
easat-4382	124	28	surface	surface	NOUN
easat-4382	124	29	.	.	PUNCT
easat-4382	125	1	you	you	PRON
easat-4382	125	2	limit	limit	VERB
easat-4382	125	3	the	the	DET
easat-4382	125	4	number	number	NOUN
easat-4382	125	5	of	of	ADP
easat-4382	125	6	potential	potential	ADJ
easat-4382	125	7	entry	entry	NOUN
easat-4382	125	8	points	point	NOUN
easat-4382	125	9	for	for	ADP
easat-4382	125	10	malicious	malicious	ADJ
easat-4382	125	11	activity	activity	NOUN
easat-4382	125	12	by	by	ADP
easat-4382	125	13	omitting	omit	VERB
easat-4382	125	14	unneeded	unneeded	ADJ
easat-4382	125	15	packages	package	NOUN
easat-4382	125	16	or	or	CCONJ
easat-4382	125	17	tools	tool	NOUN
easat-4382	125	18	.	.	PUNCT
easat-4382	126	1	to	to	PART
easat-4382	126	2	maintain	maintain	VERB
easat-4382	126	3	security	security	NOUN
easat-4382	126	4	,	,	PUNCT
easat-4382	126	5	these	these	DET
easat-4382	126	6	images	image	NOUN
easat-4382	126	7	should	should	AUX
easat-4382	126	8	be	be	AUX
easat-4382	126	9	built	build	VERB
easat-4382	126	10	from	from	ADP
easat-4382	126	11	trusted	trust	VERB
easat-4382	126	12	base	base	NOUN
easat-4382	126	13	images	image	NOUN
easat-4382	126	14	and	and	CCONJ
easat-4382	126	15	regularly	regularly	ADV
easat-4382	126	16	scanned	scan	VERB
easat-4382	126	17	for	for	ADP
easat-4382	126	18	known	know	VERB
easat-4382	126	19	vulnerabilities	vulnerability	NOUN
easat-4382	126	20	—	—	PUNCT
easat-4382	126	21	particularly	particularly	ADV
easat-4382	126	22	when	when	SCONJ
easat-4382	126	23	pulling	pull	VERB
easat-4382	126	24	from	from	ADP
easat-4382	126	25	public	public	ADJ
easat-4382	126	26	registries	registry	NOUN
easat-4382	126	27	.	.	PUNCT
easat-4382	127	1	implementing	implement	VERB
easat-4382	127	2	a	a	DET
easat-4382	127	3	“	"	PUNCT
easat-4382	127	4	secure	secure	ADJ
easat-4382	127	5	build	build	NOUN
easat-4382	127	6	”	"	PUNCT
easat-4382	127	7	process	process	NOUN
easat-4382	127	8	in	in	ADP
easat-4382	127	9	the	the	DET
easat-4382	127	10	ci	ci	PROPN
easat-4382	127	11	/	/	SYM
easat-4382	127	12	cd	cd	NOUN
easat-4382	127	13	pipeline	pipeline	NOUN
easat-4382	127	14	,	,	PUNCT
easat-4382	127	15	combined	combine	VERB
easat-4382	127	16	with	with	ADP
easat-4382	127	17	techniques	technique	NOUN
easat-4382	127	18	like	like	ADP
easat-4382	127	19	image	image	NOUN
easat-4382	127	20	signing	signing	NOUN
easat-4382	127	21	,	,	PUNCT
easat-4382	127	22	can	can	AUX
easat-4382	127	23	further	far	ADV
easat-4382	127	24	ensure	ensure	VERB
easat-4382	127	25	the	the	DET
easat-4382	127	26	integrity	integrity	NOUN
easat-4382	127	27	and	and	CCONJ
easat-4382	127	28	security	security	NOUN
easat-4382	127	29	of	of	ADP
easat-4382	127	30	container	container	NOUN
easat-4382	127	31	images	image	NOUN
easat-4382	127	32	.	.	PUNCT
easat-4382	128	1	5	5	X
easat-4382	128	2	.	.	X
easat-4382	128	3	container	container	NOUN
easat-4382	128	4	threat	threat	NOUN
easat-4382	128	5	landscape	landscape	NOUN
easat-4382	128	6	the	the	DET
easat-4382	128	7	container	container	NOUN
easat-4382	128	8	threat	threat	NOUN
easat-4382	128	9	landscape	landscape	NOUN
easat-4382	128	10	has	have	AUX
easat-4382	128	11	markedly	markedly	ADV
easat-4382	128	12	expanded	expand	VERB
easat-4382	128	13	due	due	ADP
easat-4382	128	14	to	to	ADP
easat-4382	128	15	the	the	DET
easat-4382	128	16	increasing	increase	VERB
easat-4382	128	17	popularity	popularity	NOUN
easat-4382	128	18	of	of	ADP
easat-4382	128	19	containerized	containerized	ADJ
easat-4382	128	20	systems	system	NOUN
easat-4382	128	21	in	in	ADP
easat-4382	128	22	contemporary	contemporary	ADJ
easat-4382	128	23	software	software	NOUN
easat-4382	128	24	development	development	NOUN
easat-4382	128	25	and	and	CCONJ
easat-4382	128	26	deployment	deployment	NOUN
easat-4382	128	27	.	.	PUNCT
easat-4382	129	1	containers	container	NOUN
easat-4382	129	2	provide	provide	VERB
easat-4382	129	3	efficiency	efficiency	NOUN
easat-4382	129	4	and	and	CCONJ
easat-4382	129	5	mobility	mobility	NOUN
easat-4382	129	6	but	but	CCONJ
easat-4382	129	7	also	also	ADV
easat-4382	129	8	present	present	VERB
easat-4382	129	9	distinct	distinct	ADJ
easat-4382	129	10	security	security	NOUN
easat-4382	129	11	problems	problem	NOUN
easat-4382	129	12	that	that	SCONJ
easat-4382	129	13	businesses	business	NOUN
easat-4382	129	14	must	must	AUX
easat-4382	129	15	confront	confront	VERB
easat-4382	129	16	.	.	PUNCT
easat-4382	130	1	the	the	DET
easat-4382	130	2	1249	1249	NUM
easat-4382	130	3	edelweiss	edelweiss	PROPN
easat-4382	130	4	applied	apply	VERB
easat-4382	130	5	science	science	NOUN
easat-4382	130	6	and	and	CCONJ
easat-4382	130	7	technology	technology	NOUN
easat-4382	130	8	issn	issn	PROPN
easat-4382	130	9	:	:	PUNCT
easat-4382	130	10	2576	2576	NUM
easat-4382	130	11	-	-	SYM
easat-4382	130	12	8484	8484	NUM
easat-4382	130	13	vol	vol	NOUN
easat-4382	130	14	.	.	PROPN
easat-4382	131	1	9	9	NUM
easat-4382	131	2	,	,	PUNCT
easat-4382	131	3	no	no	INTJ
easat-4382	131	4	.	.	NOUN
easat-4382	131	5	1	1	NUM
easat-4382	131	6	:	:	PUNCT
easat-4382	131	7	1243	1243	NUM
easat-4382	131	8	-	-	SYM
easat-4382	131	9	1261	1261	NUM
easat-4382	131	10	,	,	PUNCT
easat-4382	131	11	2025	2025	NUM
easat-4382	131	12	doi	doi	NOUN
easat-4382	131	13	:	:	PUNCT
easat-4382	131	14	10.55214/25768484.v9i1.4382	10.55214/25768484.v9i1.4382	NUM
easat-4382	131	15	©	©	PROPN
easat-4382	131	16	2025	2025	NUM
easat-4382	131	17	by	by	ADP
easat-4382	131	18	the	the	DET
easat-4382	131	19	authors	author	NOUN
easat-4382	131	20	;	;	PUNCT
easat-4382	131	21	licensee	licensee	PROPN
easat-4382	131	22	learning	learn	VERB
easat-4382	131	23	gate	gate	PROPN
easat-4382	131	24	transient	transient	PROPN
easat-4382	131	25	and	and	CCONJ
easat-4382	131	26	fluid	fluid	ADJ
easat-4382	131	27	characteristics	characteristic	NOUN
easat-4382	131	28	of	of	ADP
easat-4382	131	29	containers	container	NOUN
easat-4382	131	30	increase	increase	VERB
easat-4382	131	31	the	the	DET
easat-4382	131	32	assault	assault	NOUN
easat-4382	131	33	surface	surface	NOUN
easat-4382	131	34	,	,	PUNCT
easat-4382	131	35	necessitating	necessitate	VERB
easat-4382	131	36	a	a	DET
easat-4382	131	37	thorough	thorough	ADJ
easat-4382	131	38	comprehension	comprehension	NOUN
easat-4382	131	39	of	of	ADP
easat-4382	131	40	possible	possible	ADJ
easat-4382	131	41	threats	threat	NOUN
easat-4382	131	42	.	.	PUNCT
easat-4382	132	1	primary	primary	ADJ
easat-4382	132	2	areas	area	NOUN
easat-4382	132	3	of	of	ADP
easat-4382	132	4	concern	concern	NOUN
easat-4382	132	5	encompass	encompass	VERB
easat-4382	132	6	image	image	NOUN
easat-4382	132	7	vulnerabilities	vulnerability	NOUN
easat-4382	132	8	,	,	PUNCT
easat-4382	132	9	wherein	wherein	SCONJ
easat-4382	132	10	insecure	insecure	ADJ
easat-4382	132	11	or	or	CCONJ
easat-4382	132	12	obsolete	obsolete	ADJ
easat-4382	132	13	container	container	NOUN
easat-4382	132	14	images	image	NOUN
easat-4382	132	15	pose	pose	VERB
easat-4382	132	16	hazards	hazard	NOUN
easat-4382	132	17	;	;	PUNCT
easat-4382	132	18	runtime	runtime	NOUN
easat-4382	132	19	attacks	attack	NOUN
easat-4382	132	20	,	,	PUNCT
easat-4382	132	21	which	which	PRON
easat-4382	132	22	target	target	VERB
easat-4382	132	23	active	active	ADJ
easat-4382	132	24	containers	container	NOUN
easat-4382	132	25	during	during	ADP
easat-4382	132	26	execution	execution	NOUN
easat-4382	132	27	;	;	PUNCT
easat-4382	132	28	and	and	CCONJ
easat-4382	132	29	breakout	breakout	NOUN
easat-4382	132	30	assaults	assault	NOUN
easat-4382	132	31	,	,	PUNCT
easat-4382	132	32	which	which	PRON
easat-4382	132	33	allow	allow	VERB
easat-4382	132	34	attackers	attacker	NOUN
easat-4382	132	35	to	to	PART
easat-4382	132	36	breach	breach	VERB
easat-4382	132	37	the	the	DET
easat-4382	132	38	container	container	NOUN
easat-4382	132	39	barrier	barrier	NOUN
easat-4382	132	40	and	and	CCONJ
easat-4382	132	41	get	get	VERB
easat-4382	132	42	access	access	NOUN
easat-4382	132	43	to	to	ADP
easat-4382	132	44	the	the	DET
easat-4382	132	45	host	host	NOUN
easat-4382	132	46	system	system	NOUN
easat-4382	132	47	.	.	PUNCT
easat-4382	133	1	moreover	moreover	ADV
easat-4382	133	2	,	,	PUNCT
easat-4382	133	3	the	the	DET
easat-4382	133	4	orchestrator	orchestrator	NOUN
easat-4382	133	5	layer	layer	NOUN
easat-4382	133	6	—	—	PUNCT
easat-4382	133	7	overseeing	oversee	VERB
easat-4382	133	8	containerized	containerized	ADJ
easat-4382	133	9	workloads	workload	NOUN
easat-4382	133	10	—	—	PUNCT
easat-4382	133	11	presents	present	VERB
easat-4382	133	12	dangers	danger	NOUN
easat-4382	133	13	such	such	ADJ
easat-4382	133	14	as	as	ADP
easat-4382	133	15	privilege	privilege	NOUN
easat-4382	133	16	escalation	escalation	NOUN
easat-4382	133	17	and	and	CCONJ
easat-4382	133	18	misconfiguration	misconfiguration	NOUN
easat-4382	133	19	.	.	PUNCT
easat-4382	134	1	supply	supply	NOUN
easat-4382	134	2	chain	chain	NOUN
easat-4382	134	3	attacks	attack	NOUN
easat-4382	134	4	,	,	PUNCT
easat-4382	134	5	which	which	PRON
easat-4382	134	6	focus	focus	VERB
easat-4382	134	7	on	on	ADP
easat-4382	134	8	dependencies	dependency	NOUN
easat-4382	134	9	and	and	CCONJ
easat-4382	134	10	third	third	ADJ
easat-4382	134	11	-	-	PUNCT
easat-4382	134	12	party	party	NOUN
easat-4382	134	13	components	component	NOUN
easat-4382	134	14	,	,	PUNCT
easat-4382	134	15	underscore	underscore	VERB
easat-4382	134	16	the	the	DET
easat-4382	134	17	interconnectedness	interconnectedness	NOUN
easat-4382	134	18	of	of	ADP
easat-4382	134	19	container	container	NOUN
easat-4382	134	20	ecosystems	ecosystem	NOUN
easat-4382	134	21	.	.	PUNCT
easat-4382	135	1	ultimately	ultimately	ADV
easat-4382	135	2	,	,	PUNCT
easat-4382	135	3	networking	network	VERB
easat-4382	135	4	hazards	hazard	NOUN
easat-4382	135	5	highlight	highlight	VERB
easat-4382	135	6	the	the	DET
easat-4382	135	7	necessity	necessity	NOUN
easat-4382	135	8	of	of	ADP
easat-4382	135	9	safeguarding	safeguard	VERB
easat-4382	135	10	container	container	NOUN
easat-4382	135	11	-	-	PUNCT
easat-4382	135	12	to	to	ADP
easat-4382	135	13	-	-	PUNCT
easat-4382	135	14	container	container	NOUN
easat-4382	135	15	and	and	CCONJ
easat-4382	135	16	external	external	ADJ
easat-4382	135	17	communications	communication	NOUN
easat-4382	135	18	.	.	PUNCT
easat-4382	136	1	the	the	DET
easat-4382	136	2	varied	varied	ADJ
easat-4382	136	3	threat	threat	NOUN
easat-4382	136	4	landscape	landscape	NOUN
easat-4382	136	5	requires	require	VERB
easat-4382	136	6	proactive	proactive	ADJ
easat-4382	136	7	measures	measure	NOUN
easat-4382	136	8	to	to	PART
easat-4382	136	9	protect	protect	VERB
easat-4382	136	10	containerized	containerized	ADJ
easat-4382	136	11	settings	setting	NOUN
easat-4382	136	12	.	.	PUNCT
easat-4382	137	1	5.1	5.1	NUM
easat-4382	137	2	.	.	PUNCT
easat-4382	138	1	image	image	NOUN
easat-4382	138	2	vulnerabilities	vulnerabilitie	VERB
easat-4382	138	3	container	container	NOUN
easat-4382	138	4	image	image	NOUN
easat-4382	138	5	vulnerabilities	vulnerability	NOUN
easat-4382	138	6	arise	arise	VERB
easat-4382	138	7	when	when	SCONJ
easat-4382	138	8	the	the	DET
easat-4382	138	9	base	base	NOUN
easat-4382	138	10	images	image	NOUN
easat-4382	138	11	or	or	CCONJ
easat-4382	138	12	included	include	VERB
easat-4382	138	13	libraries	library	NOUN
easat-4382	138	14	and	and	CCONJ
easat-4382	138	15	packages	package	NOUN
easat-4382	138	16	contain	contain	VERB
easat-4382	138	17	unpatched	unpatched	ADJ
easat-4382	138	18	flaws	flaw	NOUN
easat-4382	138	19	,	,	PUNCT
easat-4382	138	20	outdated	outdated	ADJ
easat-4382	138	21	components	component	NOUN
easat-4382	138	22	,	,	PUNCT
easat-4382	138	23	or	or	CCONJ
easat-4382	138	24	malicious	malicious	ADJ
easat-4382	138	25	code	code	NOUN
easat-4382	138	26	.	.	PUNCT
easat-4382	139	1	because	because	SCONJ
easat-4382	139	2	containers	container	NOUN
easat-4382	139	3	package	package	VERB
easat-4382	139	4	the	the	DET
easat-4382	139	5	entire	entire	ADJ
easat-4382	139	6	application	application	NOUN
easat-4382	139	7	stack	stack	NOUN
easat-4382	139	8	—	—	PUNCT
easat-4382	139	9	including	include	VERB
easat-4382	139	10	dependencies	dependency	NOUN
easat-4382	139	11	and	and	CCONJ
easat-4382	139	12	configurations	configuration	NOUN
easat-4382	139	13	—	—	PUNCT
easat-4382	139	14	any	any	DET
easat-4382	139	15	vulnerability	vulnerability	NOUN
easat-4382	139	16	in	in	ADP
easat-4382	139	17	these	these	DET
easat-4382	139	18	components	component	NOUN
easat-4382	139	19	can	can	AUX
easat-4382	139	20	become	become	VERB
easat-4382	139	21	an	an	DET
easat-4382	139	22	entry	entry	NOUN
easat-4382	139	23	point	point	NOUN
easat-4382	139	24	for	for	ADP
easat-4382	139	25	attackers	attacker	NOUN
easat-4382	139	26	.	.	PUNCT
easat-4382	140	1	many	many	ADJ
easat-4382	140	2	teams	team	NOUN
easat-4382	140	3	source	source	VERB
easat-4382	140	4	their	their	PRON
easat-4382	140	5	base	base	NOUN
easat-4382	140	6	images	image	NOUN
easat-4382	140	7	from	from	ADP
easat-4382	140	8	public	public	ADJ
easat-4382	140	9	registries	registry	NOUN
easat-4382	140	10	,	,	PUNCT
easat-4382	140	11	which	which	PRON
easat-4382	140	12	might	might	AUX
easat-4382	140	13	not	not	PART
easat-4382	140	14	always	always	ADV
easat-4382	140	15	be	be	AUX
easat-4382	140	16	thoroughly	thoroughly	ADV
easat-4382	140	17	vetted	vet	VERB
easat-4382	140	18	,	,	PUNCT
easat-4382	140	19	increasing	increase	VERB
easat-4382	140	20	the	the	DET
easat-4382	140	21	risk	risk	NOUN
easat-4382	140	22	of	of	ADP
easat-4382	140	23	incorporating	incorporate	VERB
easat-4382	140	24	hidden	hide	VERB
easat-4382	140	25	security	security	NOUN
easat-4382	140	26	flaws	flaw	NOUN
easat-4382	140	27	into	into	ADP
easat-4382	140	28	production	production	NOUN
easat-4382	140	29	environments	environment	NOUN
easat-4382	140	30	.	.	PUNCT
easat-4382	141	1	additionally	additionally	ADV
easat-4382	141	2	,	,	PUNCT
easat-4382	141	3	developers	developer	NOUN
easat-4382	141	4	may	may	AUX
easat-4382	141	5	unintentionally	unintentionally	ADV
easat-4382	141	6	introduce	introduce	VERB
easat-4382	141	7	weak	weak	ADJ
easat-4382	141	8	configurations	configuration	NOUN
easat-4382	141	9	(	(	PUNCT
easat-4382	141	10	e.g.	e.g.	ADV
easat-4382	141	11	,	,	PUNCT
easat-4382	141	12	unnecessary	unnecessary	ADJ
easat-4382	141	13	ports	port	NOUN
easat-4382	141	14	,	,	PUNCT
easat-4382	141	15	default	default	NOUN
easat-4382	141	16	credentials	credential	NOUN
easat-4382	141	17	)	)	PUNCT
easat-4382	141	18	,	,	PUNCT
easat-4382	141	19	further	far	ADV
easat-4382	141	20	widening	widen	VERB
easat-4382	141	21	the	the	DET
easat-4382	141	22	attack	attack	NOUN
easat-4382	141	23	surface	surface	NOUN
easat-4382	141	24	.	.	PUNCT
easat-4382	142	1	regular	regular	ADJ
easat-4382	142	2	image	image	NOUN
easat-4382	142	3	scanning	scanning	NOUN
easat-4382	142	4	,	,	PUNCT
easat-4382	142	5	using	use	VERB
easat-4382	142	6	reliable	reliable	ADJ
easat-4382	142	7	sources	source	NOUN
easat-4382	142	8	for	for	ADP
easat-4382	142	9	base	base	NOUN
easat-4382	142	10	images	image	NOUN
easat-4382	142	11	,	,	PUNCT
easat-4382	142	12	and	and	CCONJ
easat-4382	142	13	adhering	adhere	VERB
easat-4382	142	14	to	to	PART
easat-4382	142	15	best	good	ADJ
easat-4382	142	16	practices	practice	NOUN
easat-4382	142	17	such	such	ADJ
easat-4382	142	18	as	as	ADP
easat-4382	142	19	signing	sign	VERB
easat-4382	142	20	and	and	CCONJ
easat-4382	142	21	verifying	verifying	NOUN
easat-4382	142	22	images	image	NOUN
easat-4382	142	23	can	can	AUX
easat-4382	142	24	help	help	VERB
easat-4382	142	25	mitigate	mitigate	VERB
easat-4382	142	26	these	these	DET
easat-4382	142	27	risks	risk	NOUN
easat-4382	142	28	.	.	PUNCT
easat-4382	143	1	5.2	5.2	NUM
easat-4382	143	2	.	.	PUNCT
easat-4382	144	1	runtime	runtime	NOUN
easat-4382	144	2	attacks	attack	NOUN
easat-4382	144	3	container	container	NOUN
easat-4382	144	4	runtime	runtime	NOUN
easat-4382	144	5	attacks	attack	NOUN
easat-4382	144	6	refer	refer	VERB
easat-4382	144	7	to	to	ADP
easat-4382	144	8	exploits	exploit	NOUN
easat-4382	144	9	that	that	PRON
easat-4382	144	10	occur	occur	VERB
easat-4382	144	11	once	once	ADV
easat-4382	144	12	a	a	DET
easat-4382	144	13	container	container	NOUN
easat-4382	144	14	is	be	AUX
easat-4382	144	15	actively	actively	ADV
easat-4382	144	16	running	run	VERB
easat-4382	144	17	,	,	PUNCT
easat-4382	144	18	taking	take	VERB
easat-4382	144	19	advantage	advantage	NOUN
easat-4382	144	20	of	of	ADP
easat-4382	144	21	vulnerabilities	vulnerability	NOUN
easat-4382	144	22	in	in	ADP
easat-4382	144	23	the	the	DET
easat-4382	144	24	application	application	NOUN
easat-4382	144	25	code	code	NOUN
easat-4382	144	26	,	,	PUNCT
easat-4382	144	27	misconfigurations	misconfiguration	NOUN
easat-4382	144	28	,	,	PUNCT
easat-4382	144	29	or	or	CCONJ
easat-4382	144	30	the	the	DET
easat-4382	144	31	underlying	underlie	VERB
easat-4382	144	32	container	container	NOUN
easat-4382	144	33	infrastructure	infrastructure	NOUN
easat-4382	144	34	.	.	PUNCT
easat-4382	145	1	attackers	attacker	NOUN
easat-4382	145	2	might	might	AUX
easat-4382	145	3	escalate	escalate	VERB
easat-4382	145	4	privileges	privilege	NOUN
easat-4382	145	5	through	through	ADP
easat-4382	145	6	the	the	DET
easat-4382	145	7	container	container	NOUN
easat-4382	145	8	’s	’s	PART
easat-4382	145	9	runtime	runtime	NOUN
easat-4382	145	10	environment	environment	PROPN
easat-4382	145	11	,	,	PUNCT
easat-4382	145	12	for	for	ADP
easat-4382	145	13	example	example	NOUN
easat-4382	145	14	,	,	PUNCT
easat-4382	145	15	by	by	ADP
easat-4382	145	16	abusing	abuse	VERB
easat-4382	145	17	excessive	excessive	ADJ
easat-4382	145	18	privileges	privilege	NOUN
easat-4382	145	19	(	(	PUNCT
easat-4382	145	20	running	run	VERB
easat-4382	145	21	as	as	ADP
easat-4382	145	22	root	root	NOUN
easat-4382	145	23	)	)	PUNCT
easat-4382	145	24	or	or	CCONJ
easat-4382	145	25	weak	weak	ADJ
easat-4382	145	26	security	security	NOUN
easat-4382	145	27	policies	policy	NOUN
easat-4382	145	28	,	,	PUNCT
easat-4382	145	29	such	such	ADJ
easat-4382	145	30	as	as	ADP
easat-4382	145	31	unconfigured	unconfigured	ADJ
easat-4382	145	32	seccomp	seccomp	NOUN
easat-4382	145	33	(	(	PUNCT
easat-4382	145	34	secure	secure	ADJ
easat-4382	145	35	computing	computing	NOUN
easat-4382	145	36	mode	mode	NOUN
easat-4382	145	37	)	)	PUNCT
easat-4382	146	1	[	[	X
easat-4382	146	2	18	18	NUM
easat-4382	146	3	]	]	PUNCT
easat-4382	146	4	apparmor	apparmor	NOUN
easat-4382	146	5	,	,	PUNCT
easat-4382	146	6	or	or	CCONJ
easat-4382	146	7	selinux	selinux	NOUN
easat-4382	146	8	.	.	PUNCT
easat-4382	147	1	in	in	ADP
easat-4382	147	2	some	some	DET
easat-4382	147	3	cases	case	NOUN
easat-4382	147	4	,	,	PUNCT
easat-4382	147	5	attackers	attacker	NOUN
easat-4382	147	6	leverage	leverage	VERB
easat-4382	147	7	vulnerabilities	vulnerability	NOUN
easat-4382	147	8	to	to	PART
easat-4382	147	9	perform	perform	VERB
easat-4382	147	10	container	container	NOUN
easat-4382	147	11	escapes	escape	NOUN
easat-4382	147	12	—	—	PUNCT
easat-4382	147	13	gaining	gain	VERB
easat-4382	147	14	access	access	NOUN
easat-4382	147	15	to	to	ADP
easat-4382	147	16	the	the	DET
easat-4382	147	17	host	host	NOUN
easat-4382	147	18	machine	machine	NOUN
easat-4382	147	19	’s	’s	PART
easat-4382	147	20	resources	resource	NOUN
easat-4382	147	21	or	or	CCONJ
easat-4382	147	22	neighboring	neighboring	NOUN
easat-4382	147	23	containers	container	NOUN
easat-4382	147	24	.	.	PUNCT
easat-4382	148	1	the	the	DET
easat-4382	148	2	ephemeral	ephemeral	ADJ
easat-4382	148	3	nature	nature	NOUN
easat-4382	148	4	of	of	ADP
easat-4382	148	5	containers	container	NOUN
easat-4382	148	6	can	can	AUX
easat-4382	148	7	also	also	ADV
easat-4382	148	8	complicate	complicate	VERB
easat-4382	148	9	detection	detection	NOUN
easat-4382	148	10	,	,	PUNCT
easat-4382	148	11	as	as	SCONJ
easat-4382	148	12	logs	log	NOUN
easat-4382	148	13	and	and	CCONJ
easat-4382	148	14	forensic	forensic	ADJ
easat-4382	148	15	data	datum	NOUN
easat-4382	148	16	may	may	AUX
easat-4382	148	17	disappear	disappear	VERB
easat-4382	148	18	when	when	SCONJ
easat-4382	148	19	a	a	DET
easat-4382	148	20	container	container	NOUN
easat-4382	148	21	is	be	AUX
easat-4382	148	22	stopped	stop	VERB
easat-4382	148	23	or	or	CCONJ
easat-4382	148	24	replaced	replace	VERB
easat-4382	148	25	.	.	PUNCT
easat-4382	149	1	robust	robust	ADJ
easat-4382	149	2	runtime	runtime	NOUN
easat-4382	149	3	security	security	NOUN
easat-4382	149	4	relies	rely	VERB
easat-4382	149	5	on	on	ADP
easat-4382	149	6	best	good	ADJ
easat-4382	149	7	practices	practice	NOUN
easat-4382	149	8	such	such	ADJ
easat-4382	149	9	as	as	ADP
easat-4382	149	10	applying	apply	VERB
easat-4382	149	11	the	the	DET
easat-4382	149	12	principle	principle	NOUN
easat-4382	149	13	of	of	ADP
easat-4382	149	14	least	least	ADJ
easat-4382	149	15	privilege	privilege	NOUN
easat-4382	149	16	,	,	PUNCT
easat-4382	149	17	continuously	continuously	ADV
easat-4382	149	18	monitoring	monitor	VERB
easat-4382	149	19	container	container	NOUN
easat-4382	149	20	behavior	behavior	NOUN
easat-4382	149	21	,	,	PUNCT
easat-4382	149	22	strictly	strictly	ADV
easat-4382	149	23	enforcing	enforce	VERB
easat-4382	149	24	security	security	NOUN
easat-4382	149	25	profiles	profile	NOUN
easat-4382	149	26	,	,	PUNCT
easat-4382	149	27	and	and	CCONJ
easat-4382	149	28	maintaining	maintain	VERB
easat-4382	149	29	clear	clear	ADJ
easat-4382	149	30	logs	log	NOUN
easat-4382	149	31	even	even	ADV
easat-4382	149	32	after	after	ADP
easat-4382	149	33	container	container	NOUN
easat-4382	149	34	termination	termination	NOUN
easat-4382	149	35	.	.	PUNCT
easat-4382	150	1	5.3	5.3	NUM
easat-4382	150	2	.	.	PUNCT
easat-4382	150	3	breakout	breakout	NOUN
easat-4382	150	4	attacks	attack	NOUN
easat-4382	150	5	container	container	NOUN
easat-4382	150	6	breakout	breakout	NOUN
easat-4382	150	7	attacks	attack	NOUN
easat-4382	150	8	[	[	X
easat-4382	150	9	12	12	NUM
easat-4382	150	10	]	]	PUNCT
easat-4382	150	11	occur	occur	VERB
easat-4382	150	12	when	when	SCONJ
easat-4382	150	13	an	an	DET
easat-4382	150	14	attacker	attacker	NOUN
easat-4382	150	15	exploits	exploit	VERB
easat-4382	150	16	vulnerabilities	vulnerability	NOUN
easat-4382	150	17	within	within	ADP
easat-4382	150	18	a	a	DET
easat-4382	150	19	container	container	NOUN
easat-4382	150	20	or	or	CCONJ
easat-4382	150	21	the	the	DET
easat-4382	150	22	underlying	underlie	VERB
easat-4382	150	23	host	host	NOUN
easat-4382	150	24	to	to	PART
easat-4382	150	25	escape	escape	VERB
easat-4382	150	26	the	the	DET
easat-4382	150	27	container	container	NOUN
easat-4382	150	28	’s	’s	PART
easat-4382	150	29	isolation	isolation	NOUN
easat-4382	150	30	and	and	CCONJ
easat-4382	150	31	access	access	NOUN
easat-4382	150	32	host	host	NOUN
easat-4382	150	33	-	-	PUNCT
easat-4382	150	34	level	level	NOUN
easat-4382	150	35	resources	resource	NOUN
easat-4382	150	36	or	or	CCONJ
easat-4382	150	37	other	other	ADJ
easat-4382	150	38	containers	container	NOUN
easat-4382	150	39	.	.	PUNCT
easat-4382	151	1	because	because	SCONJ
easat-4382	151	2	containers	container	NOUN
easat-4382	151	3	rely	rely	VERB
easat-4382	151	4	on	on	ADP
easat-4382	151	5	shared	share	VERB
easat-4382	151	6	kernel	kernel	NOUN
easat-4382	151	7	features	feature	NOUN
easat-4382	151	8	(	(	PUNCT
easat-4382	151	9	like	like	ADP
easat-4382	151	10	namespaces	namespace	NOUN
easat-4382	151	11	and	and	CCONJ
easat-4382	151	12	cgroups	cgroup	NOUN
easat-4382	151	13	)	)	PUNCT
easat-4382	151	14	rather	rather	ADV
easat-4382	151	15	than	than	ADP
easat-4382	151	16	full	full	ADV
easat-4382	151	17	-	-	PUNCT
easat-4382	151	18	blown	blow	VERB
easat-4382	151	19	virtualization	virtualization	NOUN
easat-4382	151	20	,	,	PUNCT
easat-4382	151	21	a	a	DET
easat-4382	151	22	vulnerability	vulnerability	NOUN
easat-4382	151	23	in	in	ADP
easat-4382	151	24	the	the	DET
easat-4382	151	25	kernel	kernel	NOUN
easat-4382	151	26	or	or	CCONJ
easat-4382	151	27	container	container	NOUN
easat-4382	151	28	runtime	runtime	NOUN
easat-4382	151	29	configurations	configuration	NOUN
easat-4382	151	30	(	(	PUNCT
easat-4382	151	31	e.g.	e.g.	ADV
easat-4382	151	32	,	,	PUNCT
easat-4382	151	33	privileged	privileged	ADJ
easat-4382	151	34	containers	container	NOUN
easat-4382	151	35	)	)	PUNCT
easat-4382	151	36	can	can	AUX
easat-4382	151	37	open	open	VERB
easat-4382	151	38	a	a	DET
easat-4382	151	39	path	path	NOUN
easat-4382	151	40	for	for	ADP
easat-4382	151	41	these	these	DET
easat-4382	151	42	attacks	attack	NOUN
easat-4382	151	43	.	.	PUNCT
easat-4382	152	1	misconfigurations	misconfiguration	NOUN
easat-4382	152	2	—	—	PUNCT
easat-4382	152	3	such	such	ADJ
easat-4382	152	4	as	as	ADP
easat-4382	152	5	running	run	VERB
easat-4382	152	6	containers	container	NOUN
easat-4382	152	7	with	with	ADP
easat-4382	152	8	the	the	DET
easat-4382	152	9	--privileged	--privileged	NUM
easat-4382	152	10	flag	flag	NOUN
easat-4382	152	11	or	or	CCONJ
easat-4382	152	12	granting	grant	VERB
easat-4382	152	13	unnecessary	unnecessary	ADJ
easat-4382	152	14	system	system	NOUN
easat-4382	152	15	calls	call	NOUN
easat-4382	152	16	—	—	PUNCT
easat-4382	152	17	can	can	AUX
easat-4382	152	18	further	far	ADV
easat-4382	152	19	increase	increase	VERB
easat-4382	152	20	the	the	DET
easat-4382	152	21	risk	risk	NOUN
easat-4382	152	22	of	of	ADP
easat-4382	152	23	a	a	DET
easat-4382	152	24	successful	successful	ADJ
easat-4382	152	25	breakout	breakout	NOUN
easat-4382	152	26	.	.	PUNCT
easat-4382	153	1	once	once	ADV
easat-4382	153	2	inside	inside	ADP
easat-4382	153	3	the	the	DET
easat-4382	153	4	host	host	NOUN
easat-4382	153	5	environment	environment	NOUN
easat-4382	153	6	,	,	PUNCT
easat-4382	153	7	attackers	attacker	NOUN
easat-4382	153	8	can	can	AUX
easat-4382	153	9	move	move	VERB
easat-4382	153	10	laterally	laterally	ADV
easat-4382	153	11	,	,	PUNCT
easat-4382	153	12	escalate	escalate	VERB
easat-4382	153	13	privileges	privilege	NOUN
easat-4382	153	14	,	,	PUNCT
easat-4382	153	15	and	and	CCONJ
easat-4382	153	16	potentially	potentially	ADV
easat-4382	153	17	compromise	compromise	VERB
easat-4382	153	18	other	other	ADJ
easat-4382	153	19	containers	container	NOUN
easat-4382	153	20	or	or	CCONJ
easat-4382	153	21	system	system	NOUN
easat-4382	153	22	services	service	NOUN
easat-4382	153	23	.	.	PUNCT
easat-4382	154	1	mitigations	mitigation	NOUN
easat-4382	154	2	typically	typically	ADV
easat-4382	154	3	include	include	VERB
easat-4382	154	4	running	run	VERB
easat-4382	154	5	containers	container	NOUN
easat-4382	154	6	with	with	ADP
easat-4382	154	7	the	the	DET
easat-4382	154	8	least	least	ADJ
easat-4382	154	9	privilege	privilege	NOUN
easat-4382	154	10	necessary	necessary	ADJ
easat-4382	154	11	,	,	PUNCT
easat-4382	154	12	restricting	restrict	VERB
easat-4382	154	13	system	system	NOUN
easat-4382	154	14	calls	call	NOUN
easat-4382	154	15	using	use	VERB
easat-4382	154	16	seccomp	seccomp	NOUN
easat-4382	154	17	or	or	CCONJ
easat-4382	154	18	apparmor	apparmor	NOUN
easat-4382	154	19	,	,	PUNCT
easat-4382	154	20	keeping	keep	VERB
easat-4382	154	21	the	the	DET
easat-4382	154	22	host	host	NOUN
easat-4382	154	23	and	and	CCONJ
easat-4382	154	24	kernel	kernel	PROPN
easat-4382	154	25	fully	fully	ADV
easat-4382	154	26	patched	patch	VERB
easat-4382	154	27	,	,	PUNCT
easat-4382	154	28	and	and	CCONJ
easat-4382	154	29	regularly	regularly	ADV
easat-4382	154	30	auditing	audit	VERB
easat-4382	154	31	container	container	NOUN
easat-4382	154	32	security	security	NOUN
easat-4382	154	33	policies	policy	NOUN
easat-4382	154	34	.	.	PUNCT
easat-4382	155	1	ensuring	ensure	VERB
easat-4382	155	2	proper	proper	ADJ
easat-4382	155	3	monitoring	monitoring	NOUN
easat-4382	155	4	and	and	CCONJ
easat-4382	155	5	logging	logging	NOUN
easat-4382	155	6	is	be	AUX
easat-4382	155	7	also	also	ADV
easat-4382	155	8	crucial	crucial	ADJ
easat-4382	155	9	,	,	PUNCT
easat-4382	155	10	as	as	SCONJ
easat-4382	155	11	container	container	NOUN
easat-4382	155	12	breakouts	breakout	NOUN
easat-4382	155	13	may	may	AUX
easat-4382	155	14	go	go	VERB
easat-4382	155	15	unnoticed	unnoticed	ADJ
easat-4382	155	16	without	without	ADP
easat-4382	155	17	robust	robust	ADJ
easat-4382	155	18	observability	observability	NOUN
easat-4382	155	19	and	and	CCONJ
easat-4382	155	20	incident	incident	NOUN
easat-4382	155	21	response	response	NOUN
easat-4382	155	22	processes	process	NOUN
easat-4382	155	23	.	.	PUNCT
easat-4382	156	1	1250	1250	NUM
easat-4382	156	2	edelweiss	edelweiss	PROPN
easat-4382	156	3	applied	apply	VERB
easat-4382	156	4	science	science	NOUN
easat-4382	156	5	and	and	CCONJ
easat-4382	156	6	technology	technology	NOUN
easat-4382	156	7	issn	issn	PROPN
easat-4382	156	8	:	:	PUNCT
easat-4382	156	9	2576	2576	NUM
easat-4382	156	10	-	-	SYM
easat-4382	156	11	8484	8484	NUM
easat-4382	156	12	vol	vol	NOUN
easat-4382	156	13	.	.	PROPN
easat-4382	157	1	9	9	NUM
easat-4382	157	2	,	,	PUNCT
easat-4382	157	3	no	no	INTJ
easat-4382	157	4	.	.	NOUN
easat-4382	157	5	1	1	NUM
easat-4382	157	6	:	:	PUNCT
easat-4382	157	7	1243	1243	NUM
easat-4382	157	8	-	-	SYM
easat-4382	157	9	1261	1261	NUM
easat-4382	157	10	,	,	PUNCT
easat-4382	157	11	2025	2025	NUM
easat-4382	157	12	doi	doi	NOUN
easat-4382	157	13	:	:	PUNCT
easat-4382	157	14	10.55214/25768484.v9i1.4382	10.55214/25768484.v9i1.4382	NUM
easat-4382	157	15	©	©	PROPN
easat-4382	157	16	2025	2025	NUM
easat-4382	157	17	by	by	ADP
easat-4382	157	18	the	the	DET
easat-4382	157	19	authors	author	NOUN
easat-4382	157	20	;	;	PUNCT
easat-4382	157	21	licensee	licensee	PROPN
easat-4382	157	22	learning	learning	NOUN
easat-4382	157	23	gate	gate	NOUN
easat-4382	157	24	5.4	5.4	NUM
easat-4382	157	25	.	.	PUNCT
easat-4382	158	1	orchestration	orchestration	NOUN
easat-4382	158	2	layer	layer	NOUN
easat-4382	158	3	risks	risk	VERB
easat-4382	158	4	container	container	NOUN
easat-4382	158	5	orchestration	orchestration	NOUN
easat-4382	158	6	platforms	platform	NOUN
easat-4382	158	7	like	like	ADP
easat-4382	158	8	kubernetes	kubernete	NOUN
easat-4382	158	9	introduce	introduce	VERB
easat-4382	158	10	additional	additional	ADJ
easat-4382	158	11	security	security	NOUN
easat-4382	158	12	complexities	complexity	NOUN
easat-4382	158	13	and	and	CCONJ
easat-4382	158	14	risks	risk	NOUN
easat-4382	158	15	beyond	beyond	ADP
easat-4382	158	16	standalone	standalone	ADJ
easat-4382	158	17	container	container	NOUN
easat-4382	158	18	deployments	deployment	NOUN
easat-4382	158	19	.	.	PUNCT
easat-4382	159	1	misconfigurations	misconfiguration	NOUN
easat-4382	159	2	of	of	ADP
easat-4382	159	3	critical	critical	ADJ
easat-4382	159	4	components	component	NOUN
easat-4382	159	5	—	—	PUNCT
easat-4382	159	6	like	like	ADP
easat-4382	159	7	kubernetes	kubernete	NOUN
easat-4382	159	8	’	'	PUNCT
easat-4382	159	9	api	api	NOUN
easat-4382	159	10	server	server	NOUN
easat-4382	159	11	or	or	CCONJ
easat-4382	159	12	the	the	DET
easat-4382	159	13	etcd	etcd	NOUN
easat-4382	159	14	key	key	ADJ
easat-4382	159	15	-	-	PUNCT
easat-4382	159	16	value	value	NOUN
easat-4382	159	17	store	store	NOUN
easat-4382	159	18	—	—	PUNCT
easat-4382	159	19	can	can	AUX
easat-4382	159	20	lead	lead	VERB
easat-4382	159	21	to	to	ADP
easat-4382	159	22	unauthorized	unauthorized	ADJ
easat-4382	159	23	access	access	NOUN
easat-4382	159	24	or	or	CCONJ
easat-4382	159	25	data	datum	NOUN
easat-4382	159	26	exposure	exposure	NOUN
easat-4382	159	27	.	.	PUNCT
easat-4382	160	1	if	if	SCONJ
easat-4382	160	2	rbac	rbac	PROPN
easat-4382	160	3	is	be	AUX
easat-4382	160	4	misconfigured	misconfigured	ADJ
easat-4382	160	5	,	,	PUNCT
easat-4382	160	6	attackers	attacker	NOUN
easat-4382	160	7	can	can	AUX
easat-4382	160	8	escalate	escalate	VERB
easat-4382	160	9	privileges	privilege	NOUN
easat-4382	160	10	to	to	PART
easat-4382	160	11	run	run	VERB
easat-4382	160	12	malicious	malicious	ADJ
easat-4382	160	13	containers	container	NOUN
easat-4382	160	14	or	or	CCONJ
easat-4382	160	15	intercept	intercept	NOUN
easat-4382	160	16	network	network	NOUN
easat-4382	160	17	traffic	traffic	NOUN
easat-4382	160	18	between	between	ADP
easat-4382	160	19	services	service	NOUN
easat-4382	160	20	.	.	PUNCT
easat-4382	161	1	additionally	additionally	ADV
easat-4382	161	2	,	,	PUNCT
easat-4382	161	3	the	the	DET
easat-4382	161	4	distributed	distribute	VERB
easat-4382	161	5	nature	nature	NOUN
easat-4382	161	6	of	of	ADP
easat-4382	161	7	container	container	NOUN
easat-4382	161	8	orchestration	orchestration	NOUN
easat-4382	161	9	means	mean	VERB
easat-4382	161	10	that	that	SCONJ
easat-4382	161	11	multiple	multiple	ADJ
easat-4382	161	12	nodes	node	NOUN
easat-4382	161	13	,	,	PUNCT
easat-4382	161	14	services	service	NOUN
easat-4382	161	15	,	,	PUNCT
easat-4382	161	16	and	and	CCONJ
easat-4382	161	17	networking	network	VERB
easat-4382	161	18	components	component	NOUN
easat-4382	161	19	must	must	AUX
easat-4382	161	20	be	be	AUX
easat-4382	161	21	adequately	adequately	ADV
easat-4382	161	22	secured	secure	VERB
easat-4382	161	23	,	,	PUNCT
easat-4382	161	24	including	include	VERB
easat-4382	161	25	kubelets	kubelet	NOUN
easat-4382	161	26	,	,	PUNCT
easat-4382	161	27	ingress	ingress	NOUN
easat-4382	161	28	controllers	controller	NOUN
easat-4382	161	29	,	,	PUNCT
easat-4382	161	30	and	and	CCONJ
easat-4382	161	31	network	network	NOUN
easat-4382	161	32	policies	policy	NOUN
easat-4382	161	33	.	.	PUNCT
easat-4382	162	1	attackers	attacker	NOUN
easat-4382	162	2	may	may	AUX
easat-4382	162	3	exploit	exploit	VERB
easat-4382	162	4	unsecured	unsecured	ADJ
easat-4382	162	5	api	api	NOUN
easat-4382	162	6	endpoints	endpoint	NOUN
easat-4382	162	7	to	to	PART
easat-4382	162	8	manipulate	manipulate	VERB
easat-4382	162	9	configurations	configuration	NOUN
easat-4382	162	10	or	or	CCONJ
easat-4382	162	11	deploy	deploy	VERB
easat-4382	162	12	rogue	rogue	ADJ
easat-4382	162	13	workloads	workload	NOUN
easat-4382	162	14	.	.	PUNCT
easat-4382	163	1	to	to	PART
easat-4382	163	2	minimize	minimize	VERB
easat-4382	163	3	risks	risk	NOUN
easat-4382	163	4	in	in	ADP
easat-4382	163	5	the	the	DET
easat-4382	163	6	orchestration	orchestration	NOUN
easat-4382	163	7	layer	layer	NOUN
easat-4382	163	8	,	,	PUNCT
easat-4382	163	9	it	it	PRON
easat-4382	163	10	is	be	AUX
easat-4382	163	11	critical	critical	ADJ
easat-4382	163	12	to	to	PART
easat-4382	163	13	ensure	ensure	VERB
easat-4382	163	14	secure	secure	ADJ
easat-4382	163	15	and	and	CCONJ
easat-4382	163	16	encrypted	encrypt	VERB
easat-4382	163	17	communication	communication	NOUN
easat-4382	163	18	among	among	ADP
easat-4382	163	19	all	all	DET
easat-4382	163	20	cluster	cluster	NOUN
easat-4382	163	21	components	component	NOUN
easat-4382	163	22	,	,	PUNCT
easat-4382	163	23	apply	apply	VERB
easat-4382	163	24	least	least	ADJ
easat-4382	163	25	-	-	PUNCT
easat-4382	163	26	privilege	privilege	NOUN
easat-4382	163	27	access	access	NOUN
easat-4382	163	28	controls	control	NOUN
easat-4382	163	29	,	,	PUNCT
easat-4382	163	30	keep	keep	VERB
easat-4382	163	31	clusters	cluster	NOUN
easat-4382	163	32	patched	patch	VERB
easat-4382	163	33	,	,	PUNCT
easat-4382	163	34	and	and	CCONJ
easat-4382	163	35	actively	actively	ADV
easat-4382	163	36	monitor	monitor	VERB
easat-4382	163	37	cluster	cluster	NOUN
easat-4382	163	38	events	event	NOUN
easat-4382	163	39	.	.	PUNCT
easat-4382	164	1	5.5	5.5	NUM
easat-4382	164	2	.	.	PUNCT
easat-4382	164	3	supply	supply	NOUN
easat-4382	164	4	chain	chain	NOUN
easat-4382	164	5	attacks	attack	NOUN
easat-4382	164	6	container	container	NOUN
easat-4382	164	7	supply	supply	NOUN
easat-4382	164	8	chain	chain	NOUN
easat-4382	164	9	risks	risk	NOUN
easat-4382	164	10	arise	arise	VERB
easat-4382	164	11	from	from	ADP
easat-4382	164	12	the	the	DET
easat-4382	164	13	complex	complex	ADJ
easat-4382	164	14	network	network	NOUN
easat-4382	164	15	of	of	ADP
easat-4382	164	16	dependencies	dependency	NOUN
easat-4382	164	17	and	and	CCONJ
easat-4382	164	18	sources	source	NOUN
easat-4382	164	19	organizations	organization	NOUN
easat-4382	164	20	rely	rely	VERB
easat-4382	164	21	on	on	ADP
easat-4382	164	22	when	when	SCONJ
easat-4382	164	23	building	build	VERB
easat-4382	164	24	container	container	NOUN
easat-4382	164	25	images	image	NOUN
easat-4382	164	26	.	.	PUNCT
easat-4382	165	1	modern	modern	ADJ
easat-4382	165	2	development	development	NOUN
easat-4382	165	3	often	often	ADV
easat-4382	165	4	involves	involve	VERB
easat-4382	165	5	pulling	pull	VERB
easat-4382	165	6	base	base	NOUN
easat-4382	165	7	images	image	NOUN
easat-4382	165	8	and	and	CCONJ
easat-4382	165	9	third	third	ADJ
easat-4382	165	10	-	-	PUNCT
easat-4382	165	11	party	party	NOUN
easat-4382	165	12	libraries	library	NOUN
easat-4382	165	13	from	from	ADP
easat-4382	165	14	public	public	ADJ
easat-4382	165	15	registries	registry	NOUN
easat-4382	165	16	,	,	PUNCT
easat-4382	165	17	where	where	SCONJ
easat-4382	165	18	malicious	malicious	ADJ
easat-4382	165	19	actors	actor	NOUN
easat-4382	165	20	might	might	AUX
easat-4382	165	21	upload	upload	VERB
easat-4382	165	22	compromised	compromise	VERB
easat-4382	165	23	or	or	CCONJ
easat-4382	165	24	spoofed	spoof	VERB
easat-4382	165	25	images	image	NOUN
easat-4382	165	26	to	to	PART
easat-4382	165	27	exploit	exploit	VERB
easat-4382	165	28	unsuspecting	unsuspecting	ADJ
easat-4382	165	29	users	user	NOUN
easat-4382	165	30	.	.	PUNCT
easat-4382	166	1	insecure	insecure	ADJ
easat-4382	166	2	or	or	CCONJ
easat-4382	166	3	unverified	unverified	ADJ
easat-4382	166	4	downloads	download	NOUN
easat-4382	166	5	can	can	AUX
easat-4382	166	6	introduce	introduce	VERB
easat-4382	166	7	backdoors	backdoor	NOUN
easat-4382	166	8	or	or	CCONJ
easat-4382	166	9	malicious	malicious	ADJ
easat-4382	166	10	code	code	NOUN
easat-4382	166	11	directly	directly	ADV
easat-4382	166	12	into	into	ADP
easat-4382	166	13	production	production	NOUN
easat-4382	166	14	environments	environment	NOUN
easat-4382	166	15	.	.	PUNCT
easat-4382	167	1	additionally	additionally	ADV
easat-4382	167	2	,	,	PUNCT
easat-4382	167	3	vulnerabilities	vulnerability	NOUN
easat-4382	167	4	or	or	CCONJ
easat-4382	167	5	misconfigurations	misconfiguration	NOUN
easat-4382	167	6	within	within	ADP
easat-4382	167	7	the	the	DET
easat-4382	167	8	devops	devop	NOUN
easat-4382	167	9	toolchain	toolchain	NOUN
easat-4382	167	10	—	—	PUNCT
easat-4382	167	11	such	such	ADJ
easat-4382	167	12	as	as	ADP
easat-4382	167	13	insecure	insecure	ADJ
easat-4382	167	14	ci	ci	NOUN
easat-4382	167	15	/	/	SYM
easat-4382	167	16	cd	cd	NOUN
easat-4382	167	17	pipelines	pipeline	NOUN
easat-4382	167	18	—	—	PUNCT
easat-4382	167	19	can	can	AUX
easat-4382	167	20	be	be	AUX
easat-4382	167	21	leveraged	leverage	VERB
easat-4382	167	22	to	to	PART
easat-4382	167	23	inject	inject	VERB
easat-4382	167	24	harmful	harmful	ADJ
easat-4382	167	25	components	component	NOUN
easat-4382	167	26	into	into	ADP
easat-4382	167	27	otherwise	otherwise	ADV
easat-4382	167	28	legitimate	legitimate	ADJ
easat-4382	167	29	images	image	NOUN
easat-4382	167	30	.	.	PUNCT
easat-4382	168	1	organizations	organization	NOUN
easat-4382	168	2	should	should	AUX
easat-4382	168	3	mitigate	mitigate	VERB
easat-4382	168	4	these	these	DET
easat-4382	168	5	risks	risk	NOUN
easat-4382	168	6	by	by	ADP
easat-4382	168	7	scanning	scan	VERB
easat-4382	168	8	images	image	NOUN
easat-4382	168	9	for	for	ADP
easat-4382	168	10	known	know	VERB
easat-4382	168	11	vulnerabilities	vulnerability	NOUN
easat-4382	168	12	,	,	PUNCT
easat-4382	168	13	employing	employ	VERB
easat-4382	168	14	image	image	NOUN
easat-4382	168	15	signing	signing	NOUN
easat-4382	168	16	and	and	CCONJ
easat-4382	168	17	verification	verification	NOUN
easat-4382	168	18	,	,	PUNCT
easat-4382	168	19	and	and	CCONJ
easat-4382	168	20	restricting	restrict	VERB
easat-4382	168	21	downloads	download	NOUN
easat-4382	168	22	to	to	ADP
easat-4382	168	23	trusted	trust	VERB
easat-4382	168	24	registries	registry	NOUN
easat-4382	168	25	or	or	CCONJ
easat-4382	168	26	private	private	ADJ
easat-4382	168	27	repositories	repository	NOUN
easat-4382	168	28	.	.	PUNCT
easat-4382	169	1	integrating	integrate	VERB
easat-4382	169	2	security	security	NOUN
easat-4382	169	3	controls	control	NOUN
easat-4382	169	4	and	and	CCONJ
easat-4382	169	5	verifying	verify	VERB
easat-4382	169	6	integrity	integrity	NOUN
easat-4382	169	7	at	at	ADP
easat-4382	169	8	every	every	DET
easat-4382	169	9	stage	stage	NOUN
easat-4382	169	10	of	of	ADP
easat-4382	169	11	the	the	DET
easat-4382	169	12	pipeline	pipeline	NOUN
easat-4382	169	13	—	—	PUNCT
easat-4382	169	14	from	from	ADP
easat-4382	169	15	development	development	NOUN
easat-4382	169	16	to	to	ADP
easat-4382	169	17	production	production	NOUN
easat-4382	169	18	—	—	PUNCT
easat-4382	169	19	ensures	ensure	VERB
easat-4382	169	20	that	that	SCONJ
easat-4382	169	21	only	only	ADV
easat-4382	169	22	approved	approve	VERB
easat-4382	169	23	and	and	CCONJ
easat-4382	169	24	secure	secure	ADJ
easat-4382	169	25	assets	asset	NOUN
easat-4382	169	26	make	make	VERB
easat-4382	169	27	their	their	PRON
easat-4382	169	28	way	way	NOUN
easat-4382	169	29	into	into	ADP
easat-4382	169	30	containerized	containerized	ADJ
easat-4382	169	31	applications	application	NOUN
easat-4382	169	32	.	.	PUNCT
easat-4382	170	1	5.6	5.6	NUM
easat-4382	170	2	.	.	X
easat-4382	170	3	networking	network	VERB
easat-4382	170	4	risks	risk	NOUN
easat-4382	170	5	container	container	NOUN
easat-4382	170	6	networking	network	VERB
easat-4382	170	7	risks	risk	NOUN
easat-4382	170	8	arise	arise	VERB
easat-4382	170	9	from	from	ADP
easat-4382	170	10	the	the	DET
easat-4382	170	11	complex	complex	ADJ
easat-4382	170	12	,	,	PUNCT
easat-4382	170	13	often	often	ADV
easat-4382	170	14	ephemeral	ephemeral	ADJ
easat-4382	170	15	nature	nature	NOUN
easat-4382	170	16	of	of	ADP
easat-4382	170	17	containers	container	NOUN
easat-4382	170	18	communicating	communicate	VERB
easat-4382	170	19	internally	internally	ADV
easat-4382	170	20	and	and	CCONJ
easat-4382	170	21	externally	externally	ADV
easat-4382	170	22	.	.	PUNCT
easat-4382	171	1	in	in	ADP
easat-4382	171	2	many	many	ADJ
easat-4382	171	3	orchestration	orchestration	NOUN
easat-4382	171	4	environments	environment	NOUN
easat-4382	171	5	,	,	PUNCT
easat-4382	171	6	network	network	NOUN
easat-4382	171	7	plugins	plugin	NOUN
easat-4382	171	8	automatically	automatically	ADV
easat-4382	171	9	assign	assign	VERB
easat-4382	171	10	ips	ip	NOUN
easat-4382	171	11	and	and	CCONJ
easat-4382	171	12	manage	manage	VERB
easat-4382	171	13	routes	route	NOUN
easat-4382	171	14	,	,	PUNCT
easat-4382	171	15	which	which	PRON
easat-4382	171	16	can	can	AUX
easat-4382	171	17	create	create	VERB
easat-4382	171	18	hidden	hidden	ADJ
easat-4382	171	19	pathways	pathway	NOUN
easat-4382	171	20	for	for	SCONJ
easat-4382	171	21	attackers	attacker	NOUN
easat-4382	171	22	to	to	PART
easat-4382	171	23	exploit	exploit	VERB
easat-4382	171	24	if	if	SCONJ
easat-4382	171	25	misconfigured	misconfigured	ADJ
easat-4382	171	26	or	or	CCONJ
easat-4382	171	27	left	leave	VERB
easat-4382	171	28	unsecured	unsecured	ADJ
easat-4382	171	29	.	.	PUNCT
easat-4382	172	1	containers	container	NOUN
easat-4382	172	2	frequently	frequently	ADV
easat-4382	172	3	share	share	VERB
easat-4382	172	4	virtual	virtual	ADJ
easat-4382	172	5	bridges	bridge	NOUN
easat-4382	172	6	or	or	CCONJ
easat-4382	172	7	overlays	overlay	NOUN
easat-4382	172	8	,	,	PUNCT
easat-4382	172	9	increasing	increase	VERB
easat-4382	172	10	the	the	DET
easat-4382	172	11	risk	risk	NOUN
easat-4382	172	12	of	of	ADP
easat-4382	172	13	lateral	lateral	ADJ
easat-4382	172	14	movement	movement	NOUN
easat-4382	172	15	once	once	SCONJ
easat-4382	172	16	an	an	DET
easat-4382	172	17	adversary	adversary	NOUN
easat-4382	172	18	gains	gain	VERB
easat-4382	172	19	a	a	DET
easat-4382	172	20	foothold	foothold	NOUN
easat-4382	172	21	in	in	ADP
easat-4382	172	22	the	the	DET
easat-4382	172	23	network	network	NOUN
easat-4382	172	24	.	.	PUNCT
easat-4382	173	1	additionally	additionally	ADV
easat-4382	173	2	,	,	PUNCT
easat-4382	173	3	traffic	traffic	NOUN
easat-4382	173	4	between	between	ADP
easat-4382	173	5	containers	container	NOUN
easat-4382	173	6	may	may	AUX
easat-4382	173	7	not	not	PART
easat-4382	173	8	be	be	AUX
easat-4382	173	9	encrypted	encrypt	VERB
easat-4382	173	10	by	by	ADP
easat-4382	173	11	default	default	NOUN
easat-4382	173	12	,	,	PUNCT
easat-4382	173	13	allowing	allow	VERB
easat-4382	173	14	for	for	ADP
easat-4382	173	15	potential	potential	ADJ
easat-4382	173	16	eavesdropping	eavesdropping	NOUN
easat-4382	173	17	or	or	CCONJ
easat-4382	173	18	interception	interception	NOUN
easat-4382	173	19	of	of	ADP
easat-4382	173	20	sensitive	sensitive	ADJ
easat-4382	173	21	data	datum	NOUN
easat-4382	173	22	.	.	PUNCT
easat-4382	174	1	microservices	microservice	NOUN
easat-4382	174	2	architectures	architecture	NOUN
easat-4382	174	3	can	can	AUX
easat-4382	174	4	further	far	ADV
easat-4382	174	5	complicate	complicate	VERB
easat-4382	174	6	network	network	NOUN
easat-4382	174	7	security	security	NOUN
easat-4382	174	8	by	by	ADP
easat-4382	174	9	introducing	introduce	VERB
easat-4382	174	10	numerous	numerous	ADJ
easat-4382	174	11	endpoints	endpoint	NOUN
easat-4382	174	12	and	and	CCONJ
easat-4382	174	13	routes	route	NOUN
easat-4382	174	14	for	for	ADP
easat-4382	174	15	each	each	DET
easat-4382	174	16	service	service	NOUN
easat-4382	174	17	,	,	PUNCT
easat-4382	174	18	making	make	VERB
easat-4382	174	19	it	it	PRON
easat-4382	174	20	harder	hard	ADV
easat-4382	174	21	to	to	PART
easat-4382	174	22	maintain	maintain	VERB
easat-4382	174	23	consistent	consistent	ADJ
easat-4382	174	24	policies	policy	NOUN
easat-4382	174	25	.	.	PUNCT
easat-4382	175	1	to	to	PART
easat-4382	175	2	mitigate	mitigate	VERB
easat-4382	175	3	these	these	DET
easat-4382	175	4	risks	risk	NOUN
easat-4382	175	5	,	,	PUNCT
easat-4382	175	6	engineers	engineer	NOUN
easat-4382	175	7	should	should	AUX
easat-4382	175	8	implement	implement	VERB
easat-4382	175	9	strict	strict	ADJ
easat-4382	175	10	network	network	NOUN
easat-4382	175	11	segmentation	segmentation	NOUN
easat-4382	175	12	,	,	PUNCT
easat-4382	175	13	restrict	restrict	VERB
easat-4382	175	14	unnecessary	unnecessary	ADJ
easat-4382	175	15	service	service	NOUN
easat-4382	175	16	exposure	exposure	NOUN
easat-4382	175	17	,	,	PUNCT
easat-4382	175	18	employ	employ	VERB
easat-4382	175	19	mutual	mutual	ADJ
easat-4382	175	20	tls	tls	NOUN
easat-4382	176	1	[	[	X
easat-4382	176	2	19	19	NUM
easat-4382	176	3	]	]	PUNCT
easat-4382	176	4	where	where	SCONJ
easat-4382	176	5	possible	possible	ADJ
easat-4382	176	6	,	,	PUNCT
easat-4382	176	7	and	and	CCONJ
easat-4382	176	8	utilize	utilize	VERB
easat-4382	176	9	network	network	NOUN
easat-4382	176	10	policies	policy	NOUN
easat-4382	176	11	or	or	CCONJ
easat-4382	176	12	firewalls	firewall	NOUN
easat-4382	176	13	that	that	PRON
easat-4382	176	14	enforce	enforce	VERB
easat-4382	176	15	least	least	ADJ
easat-4382	176	16	-	-	PUNCT
easat-4382	176	17	privilege	privilege	NOUN
easat-4382	176	18	access	access	NOUN
easat-4382	176	19	between	between	ADP
easat-4382	176	20	containerized	containerized	ADJ
easat-4382	176	21	workloads	workload	NOUN
easat-4382	176	22	.	.	PUNCT
easat-4382	177	1	6	6	X
easat-4382	177	2	.	.	X
easat-4382	177	3	components	component	NOUN
easat-4382	177	4	of	of	ADP
easat-4382	177	5	container	container	NOUN
easat-4382	177	6	security	security	NOUN
easat-4382	177	7	container	container	NOUN
easat-4382	177	8	security	security	NOUN
easat-4382	177	9	is	be	AUX
easat-4382	177	10	essential	essential	ADJ
easat-4382	177	11	for	for	ADP
easat-4382	177	12	protecting	protect	VERB
easat-4382	177	13	contemporary	contemporary	ADJ
easat-4382	177	14	application	application	NOUN
easat-4382	177	15	environments	environment	NOUN
easat-4382	177	16	and	and	CCONJ
easat-4382	177	17	guaranteeing	guarantee	VERB
easat-4382	177	18	the	the	DET
easat-4382	177	19	confidentiality	confidentiality	NOUN
easat-4382	177	20	,	,	PUNCT
easat-4382	177	21	integrity	integrity	NOUN
easat-4382	177	22	,	,	PUNCT
easat-4382	177	23	and	and	CCONJ
easat-4382	177	24	availability	availability	NOUN
easat-4382	177	25	of	of	ADP
easat-4382	177	26	containerized	containerized	ADJ
easat-4382	177	27	workloads	workload	NOUN
easat-4382	177	28	.	.	PUNCT
easat-4382	178	1	securing	secure	VERB
easat-4382	178	2	all	all	DET
easat-4382	178	3	components	component	NOUN
easat-4382	178	4	inside	inside	ADP
easat-4382	178	5	the	the	DET
easat-4382	178	6	container	container	NOUN
easat-4382	178	7	ecosystem	ecosystem	NOUN
easat-4382	178	8	is	be	AUX
easat-4382	178	9	critical	critical	ADJ
easat-4382	178	10	for	for	ADP
easat-4382	178	11	lowering	lower	VERB
easat-4382	178	12	risks	risk	NOUN
easat-4382	178	13	,	,	PUNCT
easat-4382	178	14	as	as	SCONJ
easat-4382	178	15	containers	container	NOUN
easat-4382	178	16	insulate	insulate	VERB
easat-4382	178	17	applications	application	NOUN
easat-4382	178	18	from	from	ADP
easat-4382	178	19	the	the	DET
easat-4382	178	20	underlying	underlie	VERB
easat-4382	178	21	infrastructure	infrastructure	NOUN
easat-4382	178	22	.	.	PUNCT
easat-4382	179	1	a	a	DET
easat-4382	179	2	holistic	holistic	ADJ
easat-4382	179	3	strategy	strategy	NOUN
easat-4382	179	4	for	for	ADP
easat-4382	179	5	container	container	NOUN
easat-4382	179	6	security	security	NOUN
easat-4382	179	7	encompasses	encompass	VERB
easat-4382	179	8	various	various	ADJ
easat-4382	179	9	layers	layer	NOUN
easat-4382	179	10	.	.	PUNCT
easat-4382	180	1	image	image	NOUN
easat-4382	180	2	security	security	NOUN
easat-4382	180	3	guarantees	guarantee	VERB
easat-4382	180	4	container	container	NOUN
easat-4382	180	5	images	image	NOUN
easat-4382	180	6	are	be	AUX
easat-4382	180	7	devoid	devoid	ADJ
easat-4382	180	8	of	of	ADP
easat-4382	180	9	vulnerabilities	vulnerability	NOUN
easat-4382	180	10	and	and	CCONJ
easat-4382	180	11	adhere	adhere	VERB
easat-4382	180	12	to	to	ADP
easat-4382	180	13	best	good	ADJ
easat-4382	180	14	practices	practice	NOUN
easat-4382	180	15	before	before	ADP
easat-4382	180	16	deployment	deployment	NOUN
easat-4382	180	17	.	.	PUNCT
easat-4382	181	1	runtime	runtime	NOUN
easat-4382	181	2	security	security	NOUN
easat-4382	181	3	emphasizes	emphasize	VERB
easat-4382	181	4	surveillance	surveillance	NOUN
easat-4382	181	5	and	and	CCONJ
easat-4382	181	6	safeguarding	safeguard	VERB
easat-4382	181	7	containers	container	NOUN
easat-4382	181	8	during	during	ADP
easat-4382	181	9	operation	operation	NOUN
easat-4382	181	10	,	,	PUNCT
easat-4382	181	11	identifying	identify	VERB
easat-4382	181	12	irregularities	irregularity	NOUN
easat-4382	181	13	,	,	PUNCT
easat-4382	181	14	and	and	CCONJ
easat-4382	181	15	thwarting	thwart	VERB
easat-4382	181	16	illegal	illegal	ADJ
easat-4382	181	17	activities	activity	NOUN
easat-4382	181	18	.	.	PUNCT
easat-4382	182	1	network	network	NOUN
easat-4382	182	2	security	security	NOUN
easat-4382	182	3	protects	protect	VERB
easat-4382	182	4	1251	1251	NUM
easat-4382	182	5	edelweiss	edelweiss	PROPN
easat-4382	182	6	applied	apply	VERB
easat-4382	182	7	science	science	NOUN
easat-4382	182	8	and	and	CCONJ
easat-4382	182	9	technology	technology	NOUN
easat-4382	182	10	issn	issn	PROPN
easat-4382	182	11	:	:	PUNCT
easat-4382	182	12	2576	2576	NUM
easat-4382	182	13	-	-	SYM
easat-4382	182	14	8484	8484	NUM
easat-4382	182	15	vol	vol	NOUN
easat-4382	182	16	.	.	PROPN
easat-4382	183	1	9	9	NUM
easat-4382	183	2	,	,	PUNCT
easat-4382	183	3	no	no	INTJ
easat-4382	183	4	.	.	NOUN
easat-4382	183	5	1	1	NUM
easat-4382	183	6	:	:	PUNCT
easat-4382	183	7	1243	1243	NUM
easat-4382	183	8	-	-	SYM
easat-4382	183	9	1261	1261	NUM
easat-4382	183	10	,	,	PUNCT
easat-4382	183	11	2025	2025	NUM
easat-4382	183	12	doi	doi	NOUN
easat-4382	183	13	:	:	PUNCT
easat-4382	183	14	10.55214/25768484.v9i1.4382	10.55214/25768484.v9i1.4382	NUM
easat-4382	183	15	©	©	PROPN
easat-4382	183	16	2025	2025	NUM
easat-4382	183	17	by	by	ADP
easat-4382	183	18	the	the	DET
easat-4382	183	19	authors	author	NOUN
easat-4382	183	20	;	;	PUNCT
easat-4382	183	21	licensee	licensee	PROPN
easat-4382	183	22	learning	learn	VERB
easat-4382	183	23	gate	gate	NOUN
easat-4382	183	24	communication	communication	NOUN
easat-4382	183	25	between	between	ADP
easat-4382	183	26	containers	container	NOUN
easat-4382	183	27	and	and	CCONJ
easat-4382	183	28	external	external	ADJ
easat-4382	183	29	systems	system	NOUN
easat-4382	183	30	,	,	PUNCT
easat-4382	183	31	implementing	implement	VERB
easat-4382	183	32	controls	control	NOUN
easat-4382	183	33	to	to	PART
easat-4382	183	34	inhibit	inhibit	VERB
easat-4382	183	35	lateral	lateral	ADJ
easat-4382	183	36	movement	movement	NOUN
easat-4382	183	37	.	.	PUNCT
easat-4382	184	1	secrets	secret	NOUN
easat-4382	184	2	management	management	NOUN
easat-4382	184	3	secures	secure	VERB
easat-4382	184	4	sensitive	sensitive	ADJ
easat-4382	184	5	information	information	NOUN
easat-4382	184	6	within	within	ADP
easat-4382	184	7	containers	container	NOUN
easat-4382	184	8	,	,	PUNCT
easat-4382	184	9	such	such	ADJ
easat-4382	184	10	as	as	ADP
easat-4382	184	11	api	api	NOUN
easat-4382	184	12	keys	key	NOUN
easat-4382	184	13	and	and	CCONJ
easat-4382	184	14	credentials	credential	NOUN
easat-4382	184	15	.	.	PUNCT
easat-4382	185	1	finally	finally	ADV
easat-4382	185	2	,	,	PUNCT
easat-4382	185	3	host	host	NOUN
easat-4382	185	4	security	security	NOUN
easat-4382	185	5	guarantees	guarantee	VERB
easat-4382	185	6	that	that	SCONJ
easat-4382	185	7	the	the	DET
easat-4382	185	8	foundational	foundational	ADJ
easat-4382	185	9	architecture	architecture	NOUN
easat-4382	185	10	is	be	AUX
easat-4382	185	11	fortified	fortify	VERB
easat-4382	185	12	against	against	ADP
easat-4382	185	13	potential	potential	ADJ
easat-4382	185	14	vulnerabilities	vulnerability	NOUN
easat-4382	185	15	that	that	PRON
easat-4382	185	16	could	could	AUX
easat-4382	185	17	jeopardize	jeopardize	VERB
easat-4382	185	18	the	the	DET
easat-4382	185	19	ecosystem	ecosystem	NOUN
easat-4382	185	20	.	.	PUNCT
easat-4382	186	1	by	by	ADP
easat-4382	186	2	addressing	address	VERB
easat-4382	186	3	these	these	DET
easat-4382	186	4	elements	element	NOUN
easat-4382	186	5	,	,	PUNCT
easat-4382	186	6	businesses	business	NOUN
easat-4382	186	7	may	may	AUX
easat-4382	186	8	establish	establish	VERB
easat-4382	186	9	strong	strong	ADJ
easat-4382	186	10	defenses	defense	NOUN
easat-4382	186	11	for	for	ADP
easat-4382	186	12	containerized	containerized	ADJ
easat-4382	186	13	environments	environment	NOUN
easat-4382	186	14	.	.	PUNCT
easat-4382	187	1	6.1	6.1	NUM
easat-4382	187	2	.	.	PUNCT
easat-4382	187	3	image	image	NOUN
easat-4382	187	4	security	security	NOUN
easat-4382	187	5	container	container	NOUN
easat-4382	187	6	image	image	NOUN
easat-4382	187	7	security	security	NOUN
easat-4382	187	8	relies	rely	VERB
easat-4382	187	9	heavily	heavily	ADV
easat-4382	187	10	on	on	ADP
easat-4382	187	11	regular	regular	ADJ
easat-4382	187	12	scanning	scanning	NOUN
easat-4382	187	13	to	to	PART
easat-4382	187	14	detect	detect	VERB
easat-4382	187	15	known	know	VERB
easat-4382	187	16	vulnerabilities	vulnerability	NOUN
easat-4382	187	17	in	in	ADP
easat-4382	187	18	libraries	library	NOUN
easat-4382	187	19	,	,	PUNCT
easat-4382	187	20	dependencies	dependency	NOUN
easat-4382	187	21	,	,	PUNCT
easat-4382	187	22	and	and	CCONJ
easat-4382	187	23	configurations	configuration	NOUN
easat-4382	187	24	.	.	PUNCT
easat-4382	188	1	tools	tool	NOUN
easat-4382	188	2	like	like	ADP
easat-4382	188	3	clair	clair	NOUN
easat-4382	188	4	or	or	CCONJ
easat-4382	188	5	trivy	trivy	NOUN
easat-4382	188	6	can	can	AUX
easat-4382	188	7	integrate	integrate	VERB
easat-4382	188	8	into	into	ADP
easat-4382	188	9	ci	ci	NOUN
easat-4382	188	10	/	/	SYM
easat-4382	188	11	cd	cd	NOUN
easat-4382	188	12	pipelines	pipeline	NOUN
easat-4382	188	13	,	,	PUNCT
easat-4382	188	14	automatically	automatically	ADV
easat-4382	188	15	scanning	scan	VERB
easat-4382	188	16	images	image	NOUN
easat-4382	188	17	at	at	ADP
easat-4382	188	18	a	a	DET
easat-4382	188	19	build	build	NOUN
easat-4382	188	20	or	or	CCONJ
easat-4382	188	21	before	before	ADP
easat-4382	188	22	deployment	deployment	NOUN
easat-4382	188	23	and	and	CCONJ
easat-4382	188	24	flagging	flagging	ADJ
easat-4382	188	25	security	security	NOUN
easat-4382	188	26	issues	issue	NOUN
easat-4382	188	27	such	such	ADJ
easat-4382	188	28	as	as	ADP
easat-4382	188	29	outdated	outdated	ADJ
easat-4382	188	30	packages	package	NOUN
easat-4382	188	31	,	,	PUNCT
easat-4382	188	32	cves	cf	NOUN
easat-4382	188	33	,	,	PUNCT
easat-4382	188	34	or	or	CCONJ
easat-4382	188	35	misconfigurations	misconfiguration	NOUN
easat-4382	188	36	.	.	PUNCT
easat-4382	189	1	by	by	ADP
easat-4382	189	2	integrating	integrate	VERB
easat-4382	189	3	these	these	DET
easat-4382	189	4	scanners	scanner	NOUN
easat-4382	189	5	early	early	ADV
easat-4382	189	6	and	and	CCONJ
easat-4382	189	7	often	often	ADV
easat-4382	189	8	in	in	ADP
easat-4382	189	9	the	the	DET
easat-4382	189	10	development	development	NOUN
easat-4382	189	11	lifecycle	lifecycle	NOUN
easat-4382	189	12	,	,	PUNCT
easat-4382	189	13	teams	team	NOUN
easat-4382	189	14	can	can	AUX
easat-4382	189	15	detect	detect	VERB
easat-4382	189	16	and	and	CCONJ
easat-4382	189	17	fix	fix	VERB
easat-4382	189	18	vulnerabilities	vulnerability	NOUN
easat-4382	189	19	before	before	SCONJ
easat-4382	189	20	they	they	PRON
easat-4382	189	21	make	make	VERB
easat-4382	189	22	it	it	PRON
easat-4382	189	23	to	to	ADP
easat-4382	189	24	production	production	NOUN
easat-4382	189	25	.	.	PUNCT
easat-4382	190	1	many	many	ADJ
easat-4382	190	2	scanning	scanning	NOUN
easat-4382	190	3	tools	tool	NOUN
easat-4382	190	4	offer	offer	VERB
easat-4382	190	5	detailed	detailed	ADJ
easat-4382	190	6	remediation	remediation	NOUN
easat-4382	190	7	guidance	guidance	NOUN
easat-4382	190	8	,	,	PUNCT
easat-4382	190	9	helping	help	VERB
easat-4382	190	10	engineers	engineer	NOUN
easat-4382	190	11	resolve	resolve	VERB
easat-4382	190	12	issues	issue	NOUN
easat-4382	190	13	quickly	quickly	ADV
easat-4382	190	14	.	.	PUNCT
easat-4382	191	1	beyond	beyond	ADP
easat-4382	191	2	scanning	scanning	NOUN
easat-4382	191	3	,	,	PUNCT
easat-4382	191	4	it	it	PRON
easat-4382	191	5	is	be	AUX
easat-4382	191	6	essential	essential	ADJ
easat-4382	191	7	to	to	PART
easat-4382	191	8	ensure	ensure	VERB
easat-4382	191	9	that	that	SCONJ
easat-4382	191	10	images	image	NOUN
easat-4382	191	11	are	be	AUX
easat-4382	191	12	rebuilt	rebuild	VERB
easat-4382	191	13	against	against	ADP
easat-4382	191	14	patched	patch	VERB
easat-4382	191	15	dependencies	dependency	NOUN
easat-4382	191	16	and	and	CCONJ
easat-4382	191	17	are	be	AUX
easat-4382	191	18	not	not	PART
easat-4382	191	19	inherited	inherit	VERB
easat-4382	191	20	from	from	ADP
easat-4382	191	21	outdated	outdated	ADJ
easat-4382	191	22	or	or	CCONJ
easat-4382	191	23	untrusted	untrusted	ADJ
easat-4382	191	24	base	base	NOUN
easat-4382	191	25	images	image	NOUN
easat-4382	191	26	.	.	PUNCT
easat-4382	192	1	verifying	verify	VERB
easat-4382	192	2	image	image	NOUN
easat-4382	192	3	authenticity	authenticity	NOUN
easat-4382	192	4	is	be	AUX
easat-4382	192	5	an	an	DET
easat-4382	192	6	equally	equally	ADV
easat-4382	192	7	important	important	ADJ
easat-4382	192	8	aspect	aspect	NOUN
easat-4382	192	9	of	of	ADP
easat-4382	192	10	container	container	NOUN
easat-4382	192	11	image	image	NOUN
easat-4382	192	12	security	security	NOUN
easat-4382	192	13	,	,	PUNCT
easat-4382	192	14	typically	typically	ADV
easat-4382	192	15	via	via	ADP
easat-4382	192	16	image	image	NOUN
easat-4382	192	17	signing	signing	NOUN
easat-4382	192	18	.	.	PUNCT
easat-4382	193	1	image	image	NOUN
easat-4382	193	2	signing	signing	NOUN
easat-4382	193	3	ensures	ensure	VERB
easat-4382	193	4	that	that	SCONJ
easat-4382	193	5	only	only	ADV
easat-4382	193	6	trusted	trust	VERB
easat-4382	193	7	images	image	NOUN
easat-4382	193	8	—	—	PUNCT
easat-4382	193	9	signed	sign	VERB
easat-4382	193	10	by	by	ADP
easat-4382	193	11	a	a	DET
easat-4382	193	12	recognized	recognize	VERB
easat-4382	193	13	entity	entity	NOUN
easat-4382	193	14	—	—	PUNCT
easat-4382	193	15	can	can	AUX
easat-4382	193	16	be	be	AUX
easat-4382	193	17	pulled	pull	VERB
easat-4382	193	18	and	and	CCONJ
easat-4382	193	19	run	run	VERB
easat-4382	193	20	,	,	PUNCT
easat-4382	193	21	preventing	prevent	VERB
easat-4382	193	22	attackers	attacker	NOUN
easat-4382	193	23	from	from	ADP
easat-4382	193	24	injecting	inject	VERB
easat-4382	193	25	malicious	malicious	ADJ
easat-4382	193	26	images	image	NOUN
easat-4382	193	27	into	into	ADP
easat-4382	193	28	repositories	repository	NOUN
easat-4382	193	29	or	or	CCONJ
easat-4382	193	30	tricking	trick	VERB
easat-4382	193	31	users	user	NOUN
easat-4382	193	32	into	into	ADP
easat-4382	193	33	deploying	deploy	VERB
easat-4382	193	34	counterfeit	counterfeit	ADJ
easat-4382	193	35	images	image	NOUN
easat-4382	193	36	.	.	PUNCT
easat-4382	194	1	implementing	implement	VERB
easat-4382	194	2	a	a	DET
easat-4382	194	3	policy	policy	NOUN
easat-4382	194	4	enforcement	enforcement	NOUN
easat-4382	194	5	layer	layer	NOUN
easat-4382	194	6	to	to	PART
easat-4382	194	7	reject	reject	VERB
easat-4382	194	8	unsigned	unsigned	ADJ
easat-4382	194	9	or	or	CCONJ
easat-4382	194	10	untrusted	untrusted	ADJ
easat-4382	194	11	images	image	NOUN
easat-4382	194	12	strengthens	strengthen	VERB
easat-4382	194	13	this	this	DET
easat-4382	194	14	approach	approach	NOUN
easat-4382	194	15	.	.	PUNCT
easat-4382	195	1	one	one	NUM
easat-4382	195	2	additional	additional	ADJ
easat-4382	195	3	major	major	ADJ
easat-4382	195	4	strategy	strategy	NOUN
easat-4382	195	5	is	be	AUX
easat-4382	195	6	to	to	PART
easat-4382	195	7	use	use	VERB
easat-4382	195	8	minimal	minimal	ADJ
easat-4382	195	9	base	base	NOUN
easat-4382	195	10	images	image	NOUN
easat-4382	195	11	,	,	PUNCT
easat-4382	195	12	which	which	PRON
easat-4382	195	13	include	include	VERB
easat-4382	195	14	only	only	ADV
easat-4382	195	15	the	the	DET
easat-4382	195	16	essential	essential	ADJ
easat-4382	195	17	components	component	NOUN
easat-4382	195	18	needed	need	VERB
easat-4382	195	19	for	for	SCONJ
easat-4382	195	20	the	the	DET
easat-4382	195	21	application	application	NOUN
easat-4382	195	22	to	to	PART
easat-4382	195	23	run	run	VERB
easat-4382	195	24	.	.	PUNCT
easat-4382	196	1	this	this	DET
easat-4382	196	2	practice	practice	NOUN
easat-4382	196	3	reduces	reduce	VERB
easat-4382	196	4	the	the	DET
easat-4382	196	5	overall	overall	ADJ
easat-4382	196	6	attack	attack	NOUN
easat-4382	196	7	surface	surface	NOUN
easat-4382	196	8	by	by	ADP
easat-4382	196	9	eliminating	eliminate	VERB
easat-4382	196	10	unnecessary	unnecessary	ADJ
easat-4382	196	11	packages	package	NOUN
easat-4382	196	12	and	and	CCONJ
easat-4382	196	13	libraries	library	NOUN
easat-4382	196	14	that	that	PRON
easat-4382	196	15	could	could	AUX
easat-4382	196	16	contain	contain	VERB
easat-4382	196	17	hidden	hidden	ADJ
easat-4382	196	18	vulnerabilities	vulnerability	NOUN
easat-4382	196	19	.	.	PUNCT
easat-4382	197	1	figure	figure	NOUN
easat-4382	197	2	5	5	NUM
easat-4382	197	3	.	.	PUNCT
easat-4382	198	1	vulnerability	vulnerability	NOUN
easat-4382	198	2	scanning	scanning	NOUN
easat-4382	198	3	as	as	ADP
easat-4382	198	4	a	a	DET
easat-4382	198	5	part	part	NOUN
easat-4382	198	6	of	of	ADP
easat-4382	198	7	docker	docker	PROPN
easat-4382	198	8	hub	hub	PROPN
easat-4382	198	9	(	(	PUNCT
easat-4382	198	10	from	from	ADP
easat-4382	198	11	docker	docker	PROPN
easat-4382	198	12	inc	inc	PROPN
easat-4382	199	1	[	[	X
easat-4382	199	2	10	10	NUM
easat-4382	199	3	]	]	NUM
easat-4382	199	4	)	)	PUNCT
easat-4382	199	5	.	.	PUNCT
easat-4382	200	1	cloud	cloud	ADJ
easat-4382	200	2	image	image	NOUN
easat-4382	200	3	repositories	repository	NOUN
easat-4382	200	4	like	like	ADP
easat-4382	200	5	docker	docker	PROPN
easat-4382	200	6	hub	hub	PROPN
easat-4382	200	7	and	and	CCONJ
easat-4382	200	8	quay	quay	NOUN
easat-4382	200	9	often	often	ADV
easat-4382	200	10	provide	provide	VERB
easat-4382	200	11	integrated	integrated	ADJ
easat-4382	200	12	image	image	NOUN
easat-4382	200	13	scanning	scanning	NOUN
easat-4382	200	14	and	and	CCONJ
easat-4382	200	15	signing	signing	NOUN
easat-4382	200	16	features	feature	NOUN
easat-4382	200	17	to	to	PART
easat-4382	200	18	enhance	enhance	VERB
easat-4382	200	19	container	container	NOUN
easat-4382	200	20	security	security	NOUN
easat-4382	200	21	.	.	PUNCT
easat-4382	201	1	docker	docker	PROPN
easat-4382	201	2	hub	hub	PROPN
easat-4382	201	3	,	,	PUNCT
easat-4382	201	4	for	for	ADP
easat-4382	201	5	instance	instance	NOUN
easat-4382	201	6	,	,	PUNCT
easat-4382	201	7	offers	offer	VERB
easat-4382	201	8	vulnerability	vulnerability	NOUN
easat-4382	201	9	scanning	scan	VERB
easat-4382	201	10	1252	1252	NUM
easat-4382	201	11	edelweiss	edelweiss	PROPN
easat-4382	201	12	applied	apply	VERB
easat-4382	201	13	science	science	NOUN
easat-4382	201	14	and	and	CCONJ
easat-4382	201	15	technology	technology	NOUN
easat-4382	201	16	issn	issn	PROPN
easat-4382	201	17	:	:	PUNCT
easat-4382	201	18	2576	2576	NUM
easat-4382	201	19	-	-	SYM
easat-4382	201	20	8484	8484	NUM
easat-4382	201	21	vol	vol	NOUN
easat-4382	201	22	.	.	PROPN
easat-4382	202	1	9	9	NUM
easat-4382	202	2	,	,	PUNCT
easat-4382	202	3	no	no	INTJ
easat-4382	202	4	.	.	NOUN
easat-4382	202	5	1	1	NUM
easat-4382	202	6	:	:	PUNCT
easat-4382	202	7	1243	1243	NUM
easat-4382	202	8	-	-	SYM
easat-4382	202	9	1261	1261	NUM
easat-4382	202	10	,	,	PUNCT
easat-4382	202	11	2025	2025	NUM
easat-4382	202	12	doi	doi	NOUN
easat-4382	202	13	:	:	PUNCT
easat-4382	202	14	10.55214/25768484.v9i1.4382	10.55214/25768484.v9i1.4382	NUM
easat-4382	202	15	©	©	PROPN
easat-4382	202	16	2025	2025	NUM
easat-4382	202	17	by	by	ADP
easat-4382	202	18	the	the	DET
easat-4382	202	19	authors	author	NOUN
easat-4382	202	20	;	;	PUNCT
easat-4382	202	21	licensee	licensee	PROPN
easat-4382	202	22	learning	learning	NOUN
easat-4382	202	23	gate	gate	NOUN
easat-4382	202	24	(	(	PUNCT
easat-4382	202	25	powered	power	VERB
easat-4382	202	26	by	by	ADP
easat-4382	202	27	tools	tool	NOUN
easat-4382	202	28	such	such	ADJ
easat-4382	202	29	as	as	ADP
easat-4382	202	30	snyk	snyk	NOUN
easat-4382	202	31	[	[	X
easat-4382	202	32	20	20	NUM
easat-4382	202	33	]	]	PUNCT
easat-4382	202	34	)	)	PUNCT
easat-4382	202	35	that	that	PRON
easat-4382	202	36	checks	check	VERB
easat-4382	202	37	images	image	NOUN
easat-4382	202	38	for	for	ADP
easat-4382	202	39	known	know	VERB
easat-4382	202	40	cves	cf	NOUN
easat-4382	202	41	while	while	SCONJ
easat-4382	202	42	supporting	support	VERB
easat-4382	202	43	docker	docker	PROPN
easat-4382	202	44	content	content	PROPN
easat-4382	202	45	trust	trust	NOUN
easat-4382	202	46	for	for	ADP
easat-4382	202	47	image	image	NOUN
easat-4382	202	48	signing	sign	VERB
easat-4382	202	49	to	to	PART
easat-4382	202	50	ensure	ensure	VERB
easat-4382	202	51	authenticity	authenticity	NOUN
easat-4382	202	52	.	.	PUNCT
easat-4382	203	1	conversely	conversely	ADV
easat-4382	203	2	,	,	PUNCT
easat-4382	203	3	quay	quay	NOUN
easat-4382	203	4	can	can	AUX
easat-4382	203	5	integrate	integrate	VERB
easat-4382	203	6	with	with	ADP
easat-4382	203	7	clair	clair	PROPN
easat-4382	203	8	[	[	X
easat-4382	203	9	21	21	NUM
easat-4382	203	10	]	]	PUNCT
easat-4382	203	11	for	for	ADP
easat-4382	203	12	vulnerability	vulnerability	NOUN
easat-4382	203	13	scanning	scanning	NOUN
easat-4382	203	14	and	and	CCONJ
easat-4382	203	15	supports	support	VERB
easat-4382	203	16	image	image	NOUN
easat-4382	203	17	signing	signing	NOUN
easat-4382	203	18	mechanisms	mechanism	NOUN
easat-4382	203	19	.	.	PUNCT
easat-4382	204	1	6.2	6.2	NUM
easat-4382	204	2	.	.	PUNCT
easat-4382	205	1	runtime	runtime	NOUN
easat-4382	205	2	security	security	NOUN
easat-4382	205	3	container	container	NOUN
easat-4382	205	4	runtime	runtime	NOUN
easat-4382	205	5	security	security	NOUN
easat-4382	205	6	begins	begin	VERB
easat-4382	205	7	with	with	ADP
easat-4382	205	8	minimizing	minimize	VERB
easat-4382	205	9	privileges	privilege	NOUN
easat-4382	205	10	allocated	allocate	VERB
easat-4382	205	11	to	to	ADP
easat-4382	205	12	each	each	DET
easat-4382	205	13	container	container	NOUN
easat-4382	205	14	,	,	PUNCT
easat-4382	205	15	ensuring	ensure	VERB
easat-4382	205	16	that	that	SCONJ
easat-4382	205	17	only	only	ADV
easat-4382	205	18	the	the	DET
easat-4382	205	19	necessary	necessary	ADJ
easat-4382	205	20	rights	right	NOUN
easat-4382	205	21	are	be	AUX
easat-4382	205	22	granted	grant	VERB
easat-4382	205	23	for	for	SCONJ
easat-4382	205	24	the	the	DET
easat-4382	205	25	application	application	NOUN
easat-4382	205	26	to	to	PART
easat-4382	205	27	function	function	VERB
easat-4382	205	28	.	.	PUNCT
easat-4382	206	1	for	for	ADP
easat-4382	206	2	example	example	NOUN
easat-4382	206	3	,	,	PUNCT
easat-4382	206	4	when	when	SCONJ
easat-4382	206	5	using	use	VERB
easat-4382	206	6	docker	docker	NOUN
easat-4382	206	7	,	,	PUNCT
easat-4382	206	8	containers	container	NOUN
easat-4382	206	9	can	can	AUX
easat-4382	206	10	be	be	AUX
easat-4382	206	11	run	run	VERB
easat-4382	206	12	as	as	ADP
easat-4382	206	13	a	a	DET
easat-4382	206	14	non	non	ADJ
easat-4382	206	15	-	-	ADJ
easat-4382	206	16	root	root	ADJ
easat-4382	206	17	user	user	NOUN
easat-4382	206	18	by	by	ADP
easat-4382	206	19	specifying	specify	VERB
easat-4382	206	20	the	the	DET
easat-4382	206	21	--user	--user	PUNCT
easat-4382	206	22	flag	flag	NOUN
easat-4382	206	23	or	or	CCONJ
easat-4382	206	24	by	by	ADP
easat-4382	206	25	defining	define	VERB
easat-4382	206	26	a	a	DET
easat-4382	206	27	user	user	NOUN
easat-4382	206	28	directive	directive	NOUN
easat-4382	206	29	in	in	ADP
easat-4382	206	30	dockerfile	dockerfile	NOUN
easat-4382	206	31	(	(	PUNCT
easat-4382	206	32	e.g.	e.g.	ADV
easat-4382	206	33	,	,	PUNCT
easat-4382	206	34	user	user	NOUN
easat-4382	206	35	1000	1000	NUM
easat-4382	206	36	)	)	PUNCT
easat-4382	206	37	.	.	PUNCT
easat-4382	207	1	this	this	DET
easat-4382	207	2	practice	practice	NOUN
easat-4382	207	3	prevents	prevent	VERB
easat-4382	207	4	attackers	attacker	NOUN
easat-4382	207	5	from	from	ADP
easat-4382	207	6	having	have	VERB
easat-4382	207	7	unrestricted	unrestricted	ADJ
easat-4382	207	8	root	root	NOUN
easat-4382	207	9	access	access	NOUN
easat-4382	207	10	if	if	SCONJ
easat-4382	207	11	they	they	PRON
easat-4382	207	12	manage	manage	VERB
easat-4382	207	13	to	to	PART
easat-4382	207	14	compromise	compromise	VERB
easat-4382	207	15	the	the	DET
easat-4382	207	16	container	container	NOUN
easat-4382	207	17	.	.	PUNCT
easat-4382	208	1	another	another	DET
easat-4382	208	2	best	good	ADJ
easat-4382	208	3	practice	practice	NOUN
easat-4382	208	4	is	be	AUX
easat-4382	208	5	to	to	PART
easat-4382	208	6	drop	drop	VERB
easat-4382	208	7	unnecessary	unnecessary	ADJ
easat-4382	208	8	linux	linux	PROPN
easat-4382	208	9	capabilities	capability	NOUN
easat-4382	208	10	,	,	PUNCT
easat-4382	208	11	which	which	PRON
easat-4382	208	12	by	by	ADP
easat-4382	208	13	default	default	NOUN
easat-4382	208	14	can	can	AUX
easat-4382	208	15	grant	grant	VERB
easat-4382	208	16	privileges	privilege	NOUN
easat-4382	208	17	beyond	beyond	ADP
easat-4382	208	18	what	what	PRON
easat-4382	208	19	is	be	AUX
easat-4382	208	20	needed	need	VERB
easat-4382	208	21	,	,	PUNCT
easat-4382	208	22	further	far	ADV
easat-4382	208	23	reducing	reduce	VERB
easat-4382	208	24	the	the	DET
easat-4382	208	25	attack	attack	NOUN
easat-4382	208	26	surface	surface	NOUN
easat-4382	208	27	.	.	PUNCT
easat-4382	209	1	avoiding	avoid	VERB
easat-4382	209	2	the	the	DET
easat-4382	209	3	--privileged	--privileged	NUM
easat-4382	209	4	flag	flag	NOUN
easat-4382	209	5	except	except	SCONJ
easat-4382	209	6	,	,	PUNCT
easat-4382	209	7	in	in	ADP
easat-4382	209	8	particular	particular	ADJ
easat-4382	209	9	,	,	PUNCT
easat-4382	209	10	controlled	control	VERB
easat-4382	209	11	scenarios	scenario	NOUN
easat-4382	209	12	is	be	AUX
easat-4382	209	13	also	also	ADV
easat-4382	209	14	crucial	crucial	ADJ
easat-4382	209	15	,	,	PUNCT
easat-4382	209	16	as	as	SCONJ
easat-4382	209	17	privileged	privileged	ADJ
easat-4382	209	18	containers	container	NOUN
easat-4382	209	19	can	can	AUX
easat-4382	209	20	effectively	effectively	ADV
easat-4382	209	21	operate	operate	VERB
easat-4382	209	22	with	with	ADP
easat-4382	209	23	host	host	NOUN
easat-4382	209	24	-	-	PUNCT
easat-4382	209	25	level	level	NOUN
easat-4382	209	26	permissions	permission	NOUN
easat-4382	209	27	,	,	PUNCT
easat-4382	209	28	making	make	VERB
easat-4382	209	29	them	they	PRON
easat-4382	209	30	a	a	DET
easat-4382	209	31	prime	prime	ADJ
easat-4382	209	32	target	target	NOUN
easat-4382	209	33	for	for	ADP
easat-4382	209	34	malicious	malicious	ADJ
easat-4382	209	35	actors	actor	NOUN
easat-4382	209	36	.	.	PUNCT
easat-4382	210	1	additionally	additionally	ADV
easat-4382	210	2	,	,	PUNCT
easat-4382	210	3	linux	linux	PROPN
easat-4382	210	4	kernel	kernel	PROPN
easat-4382	210	5	security	security	NOUN
easat-4382	210	6	modules	module	NOUN
easat-4382	210	7	are	be	AUX
easat-4382	210	8	essential	essential	ADJ
easat-4382	210	9	in	in	ADP
easat-4382	210	10	restricting	restrict	VERB
easat-4382	210	11	container	container	NOUN
easat-4382	210	12	actions	action	NOUN
easat-4382	210	13	at	at	ADP
easat-4382	210	14	runtime	runtime	NOUN
easat-4382	210	15	.	.	PUNCT
easat-4382	211	1	docker	docker	PROPN
easat-4382	211	2	inc	inc	PROPN
easat-4382	212	1	[	[	X
easat-4382	212	2	18	18	NUM
easat-4382	212	3	]	]	PUNCT
easat-4382	212	4	allows	allow	VERB
easat-4382	212	5	the	the	DET
easat-4382	212	6	filtering	filtering	NOUN
easat-4382	212	7	of	of	ADP
easat-4382	212	8	system	system	NOUN
easat-4382	212	9	calls	call	NOUN
easat-4382	212	10	,	,	PUNCT
easat-4382	212	11	blocking	block	VERB
easat-4382	212	12	or	or	CCONJ
easat-4382	212	13	limiting	limit	VERB
easat-4382	212	14	those	those	DET
easat-4382	212	15	containerized	containerized	ADJ
easat-4382	212	16	applications	application	NOUN
easat-4382	212	17	that	that	PRON
easat-4382	212	18	should	should	AUX
easat-4382	212	19	not	not	PART
easat-4382	212	20	be	be	AUX
easat-4382	212	21	invoked	invoke	VERB
easat-4382	212	22	.	.	PUNCT
easat-4382	213	1	apparmor	apparmor	NOUN
easat-4382	214	1	[	[	X
easat-4382	214	2	16	16	NUM
easat-4382	214	3	]	]	PUNCT
easat-4382	214	4	and	and	CCONJ
easat-4382	214	5	selinux	selinux	X
easat-4382	215	1	[	[	X
easat-4382	215	2	15	15	NUM
easat-4382	215	3	]	]	PUNCT
easat-4382	215	4	provide	provide	VERB
easat-4382	215	5	mandatory	mandatory	ADJ
easat-4382	215	6	access	access	NOUN
easat-4382	215	7	control	control	NOUN
easat-4382	215	8	(	(	PUNCT
easat-4382	215	9	mac	mac	NOUN
easat-4382	215	10	)	)	PUNCT
easat-4382	215	11	frameworks	framework	NOUN
easat-4382	215	12	that	that	PRON
easat-4382	215	13	tightly	tightly	ADV
easat-4382	215	14	define	define	VERB
easat-4382	215	15	what	what	PRON
easat-4382	215	16	processes	process	NOUN
easat-4382	215	17	can	can	AUX
easat-4382	215	18	access	access	VERB
easat-4382	215	19	,	,	PUNCT
easat-4382	215	20	from	from	ADP
easat-4382	215	21	file	file	NOUN
easat-4382	215	22	paths	path	NOUN
easat-4382	215	23	to	to	ADP
easat-4382	215	24	network	network	NOUN
easat-4382	215	25	interfaces	interface	NOUN
easat-4382	215	26	.	.	PUNCT
easat-4382	216	1	enforcing	enforce	VERB
easat-4382	216	2	such	such	ADJ
easat-4382	216	3	policies	policy	NOUN
easat-4382	216	4	can	can	AUX
easat-4382	216	5	contain	contain	VERB
easat-4382	216	6	the	the	DET
easat-4382	216	7	damage	damage	NOUN
easat-4382	216	8	of	of	ADP
easat-4382	216	9	a	a	DET
easat-4382	216	10	breach	breach	NOUN
easat-4382	216	11	and	and	CCONJ
easat-4382	216	12	prevent	prevent	VERB
easat-4382	216	13	unauthorized	unauthorized	ADJ
easat-4382	216	14	actions	action	NOUN
easat-4382	216	15	inside	inside	ADP
easat-4382	216	16	the	the	DET
easat-4382	216	17	container	container	NOUN
easat-4382	216	18	.	.	PUNCT
easat-4382	217	1	beyond	beyond	ADP
easat-4382	217	2	docker	docker	NOUN
easat-4382	217	3	,	,	PUNCT
easat-4382	217	4	alternative	alternative	ADJ
easat-4382	217	5	runtimes	runtime	NOUN
easat-4382	217	6	like	like	ADP
easat-4382	217	7	podman	podman	NOUN
easat-4382	217	8	[	[	X
easat-4382	217	9	22	22	NUM
easat-4382	217	10	]	]	PUNCT
easat-4382	217	11	or	or	CCONJ
easat-4382	217	12	cri	cri	PROPN
easat-4382	217	13	-	-	NOUN
easat-4382	217	14	o	o	NOUN
easat-4382	218	1	[	[	X
easat-4382	218	2	23	23	NUM
easat-4382	218	3	]	]	PUNCT
easat-4382	218	4	are	be	AUX
easat-4382	218	5	often	often	ADV
easat-4382	218	6	touted	tout	VERB
easat-4382	218	7	for	for	ADP
easat-4382	218	8	security	security	NOUN
easat-4382	218	9	benefits	benefit	NOUN
easat-4382	218	10	.	.	PUNCT
easat-4382	219	1	podman	podman	NOUN
easat-4382	219	2	,	,	PUNCT
easat-4382	219	3	for	for	ADP
easat-4382	219	4	instance	instance	NOUN
easat-4382	219	5	,	,	PUNCT
easat-4382	219	6	supports	support	VERB
easat-4382	219	7	rootless	rootless	ADJ
easat-4382	219	8	containers	container	NOUN
easat-4382	219	9	by	by	ADP
easat-4382	219	10	default	default	NOUN
easat-4382	219	11	,	,	PUNCT
easat-4382	219	12	letting	let	VERB
easat-4382	219	13	containers	container	NOUN
easat-4382	219	14	run	run	VERB
easat-4382	219	15	with	with	ADP
easat-4382	219	16	userlevel	userlevel	ADJ
easat-4382	219	17	privileges	privilege	NOUN
easat-4382	219	18	rather	rather	ADV
easat-4382	219	19	than	than	ADP
easat-4382	219	20	root	root	NOUN
easat-4382	219	21	-	-	PUNCT
easat-4382	219	22	level	level	NOUN
easat-4382	219	23	,	,	PUNCT
easat-4382	219	24	thereby	thereby	ADV
easat-4382	219	25	reducing	reduce	VERB
easat-4382	219	26	the	the	DET
easat-4382	219	27	impact	impact	NOUN
easat-4382	219	28	of	of	ADP
easat-4382	219	29	a	a	DET
easat-4382	219	30	potential	potential	ADJ
easat-4382	219	31	compromise	compromise	NOUN
easat-4382	219	32	.	.	PUNCT
easat-4382	220	1	cri	cri	PROPN
easat-4382	220	2	-	-	NOUN
easat-4382	220	3	o	o	NOUN
easat-4382	220	4	,	,	PUNCT
easat-4382	220	5	purpose	purpose	NOUN
easat-4382	220	6	-	-	PUNCT
easat-4382	220	7	built	build	VERB
easat-4382	220	8	for	for	ADP
easat-4382	220	9	kubernetes	kubernete	NOUN
easat-4382	220	10	,	,	PUNCT
easat-4382	220	11	also	also	ADV
easat-4382	220	12	integrates	integrate	VERB
easat-4382	220	13	well	well	ADV
easat-4382	220	14	with	with	ADP
easat-4382	220	15	these	these	DET
easat-4382	220	16	security	security	NOUN
easat-4382	220	17	modules	module	NOUN
easat-4382	220	18	,	,	PUNCT
easat-4382	220	19	providing	provide	VERB
easat-4382	220	20	a	a	DET
easat-4382	220	21	streamlined	streamlined	ADJ
easat-4382	220	22	,	,	PUNCT
easat-4382	220	23	minimalistic	minimalistic	ADJ
easat-4382	220	24	runtime	runtime	NOUN
easat-4382	220	25	that	that	PRON
easat-4382	220	26	can	can	AUX
easat-4382	220	27	be	be	AUX
easat-4382	220	28	easier	easy	ADJ
easat-4382	220	29	to	to	PART
easat-4382	220	30	harden	harden	VERB
easat-4382	220	31	than	than	ADP
easat-4382	220	32	more	more	ADJ
easat-4382	220	33	general	general	ADJ
easat-4382	220	34	-	-	PUNCT
easat-4382	220	35	purpose	purpose	NOUN
easat-4382	220	36	container	container	NOUN
easat-4382	220	37	engines	engine	NOUN
easat-4382	220	38	.	.	PUNCT
easat-4382	221	1	6.3	6.3	NUM
easat-4382	221	2	.	.	PUNCT
easat-4382	222	1	network	network	NOUN
easat-4382	222	2	security	security	NOUN
easat-4382	222	3	container	container	NOUN
easat-4382	222	4	network	network	NOUN
easat-4382	222	5	security	security	NOUN
easat-4382	222	6	fundamentally	fundamentally	ADV
easat-4382	222	7	relies	rely	VERB
easat-4382	222	8	on	on	ADP
easat-4382	222	9	network	network	NOUN
easat-4382	222	10	segmentation	segmentation	NOUN
easat-4382	222	11	to	to	PART
easat-4382	222	12	limit	limit	VERB
easat-4382	222	13	each	each	DET
easat-4382	222	14	container	container	NOUN
easat-4382	222	15	’s	’s	PART
easat-4382	222	16	exposure	exposure	NOUN
easat-4382	222	17	and	and	CCONJ
easat-4382	222	18	control	control	NOUN
easat-4382	222	19	traffic	traffic	NOUN
easat-4382	222	20	flow	flow	NOUN
easat-4382	222	21	between	between	ADP
easat-4382	222	22	services	service	NOUN
easat-4382	222	23	.	.	PUNCT
easat-4382	223	1	by	by	ADP
easat-4382	223	2	creating	create	VERB
easat-4382	223	3	logically	logically	ADV
easat-4382	223	4	isolated	isolate	VERB
easat-4382	223	5	networks	network	NOUN
easat-4382	223	6	or	or	CCONJ
easat-4382	223	7	using	use	VERB
easat-4382	223	8	technologies	technology	NOUN
easat-4382	223	9	like	like	ADP
easat-4382	223	10	kubernetes	kubernete	NOUN
easat-4382	223	11	network	network	NOUN
easat-4382	223	12	policies	policy	NOUN
easat-4382	223	13	[	[	X
easat-4382	223	14	24	24	NUM
easat-4382	223	15	]	]	PUNCT
easat-4382	223	16	operators	operator	NOUN
easat-4382	223	17	can	can	AUX
easat-4382	223	18	define	define	VERB
easat-4382	223	19	which	which	DET
easat-4382	223	20	containers	container	NOUN
easat-4382	223	21	can	can	AUX
easat-4382	223	22	communicate	communicate	VERB
easat-4382	223	23	with	with	ADP
easat-4382	223	24	one	one	NUM
easat-4382	223	25	another	another	DET
easat-4382	223	26	,	,	PUNCT
easat-4382	223	27	effectively	effectively	ADV
easat-4382	223	28	locking	lock	VERB
easat-4382	223	29	down	down	ADP
easat-4382	223	30	routes	route	NOUN
easat-4382	223	31	that	that	PRON
easat-4382	223	32	should	should	AUX
easat-4382	223	33	remain	remain	VERB
easat-4382	223	34	inaccessible	inaccessible	ADJ
easat-4382	223	35	.	.	PUNCT
easat-4382	224	1	this	this	DET
easat-4382	224	2	segmentation	segmentation	NOUN
easat-4382	224	3	approach	approach	NOUN
easat-4382	224	4	reduces	reduce	VERB
easat-4382	224	5	lateral	lateral	ADJ
easat-4382	224	6	movement	movement	NOUN
easat-4382	224	7	risks	risk	NOUN
easat-4382	224	8	—	—	PUNCT
easat-4382	224	9	if	if	SCONJ
easat-4382	224	10	one	one	NUM
easat-4382	224	11	container	container	NOUN
easat-4382	224	12	is	be	AUX
easat-4382	224	13	compromised	compromise	VERB
easat-4382	224	14	,	,	PUNCT
easat-4382	224	15	the	the	DET
easat-4382	224	16	attacker	attacker	NOUN
easat-4382	224	17	’s	’s	PART
easat-4382	224	18	ability	ability	NOUN
easat-4382	224	19	to	to	PART
easat-4382	224	20	target	target	VERB
easat-4382	224	21	other	other	ADJ
easat-4382	224	22	containers	container	NOUN
easat-4382	224	23	is	be	AUX
easat-4382	224	24	contained	contain	VERB
easat-4382	224	25	by	by	ADP
easat-4382	224	26	strict	strict	ADJ
easat-4382	224	27	access	access	NOUN
easat-4382	224	28	controls	control	NOUN
easat-4382	224	29	.	.	PUNCT
easat-4382	225	1	additionally	additionally	ADV
easat-4382	225	2	,	,	PUNCT
easat-4382	225	3	network	network	NOUN
easat-4382	225	4	segmentation	segmentation	NOUN
easat-4382	225	5	can	can	AUX
easat-4382	225	6	be	be	AUX
easat-4382	225	7	implemented	implement	VERB
easat-4382	225	8	at	at	ADP
easat-4382	225	9	multiple	multiple	ADJ
easat-4382	225	10	layers	layer	NOUN
easat-4382	225	11	,	,	PUNCT
easat-4382	225	12	such	such	ADJ
easat-4382	225	13	as	as	ADP
easat-4382	225	14	isolating	isolate	VERB
easat-4382	225	15	microservices	microservice	NOUN
easat-4382	225	16	within	within	ADP
easat-4382	225	17	their	their	PRON
easat-4382	225	18	namespaces	namespace	NOUN
easat-4382	225	19	or	or	CCONJ
easat-4382	225	20	subnets	subnet	NOUN
easat-4382	225	21	,	,	PUNCT
easat-4382	225	22	ensuring	ensure	VERB
easat-4382	225	23	that	that	SCONJ
easat-4382	225	24	only	only	ADV
easat-4382	225	25	the	the	DET
easat-4382	225	26	minimum	minimum	ADJ
easat-4382	225	27	required	require	VERB
easat-4382	225	28	connections	connection	NOUN
easat-4382	225	29	are	be	AUX
easat-4382	225	30	permitted	permit	VERB
easat-4382	225	31	for	for	ADP
easat-4382	225	32	regular	regular	ADJ
easat-4382	225	33	operation	operation	NOUN
easat-4382	225	34	.	.	PUNCT
easat-4382	226	1	an	an	DET
easat-4382	226	2	essential	essential	ADJ
easat-4382	226	3	addition	addition	NOUN
easat-4382	226	4	to	to	ADP
easat-4382	226	5	segmentation	segmentation	NOUN
easat-4382	226	6	is	be	AUX
easat-4382	226	7	encrypting	encrypt	VERB
easat-4382	226	8	communications	communication	NOUN
easat-4382	226	9	between	between	ADP
easat-4382	226	10	containerized	containerized	ADJ
easat-4382	226	11	services	service	NOUN
easat-4382	226	12	.	.	PUNCT
easat-4382	227	1	when	when	SCONJ
easat-4382	227	2	network	network	NOUN
easat-4382	227	3	traffic	traffic	NOUN
easat-4382	227	4	traverses	traverse	NOUN
easat-4382	227	5	potentially	potentially	ADV
easat-4382	227	6	untrusted	untrusted	ADJ
easat-4382	227	7	environments	environment	NOUN
easat-4382	227	8	—	—	PUNCT
easat-4382	227	9	like	like	ADP
easat-4382	227	10	the	the	DET
easat-4382	227	11	public	public	ADJ
easat-4382	227	12	internet	internet	NOUN
easat-4382	227	13	or	or	CCONJ
easat-4382	227	14	even	even	ADV
easat-4382	227	15	a	a	DET
easat-4382	227	16	shared	share	VERB
easat-4382	227	17	internal	internal	ADJ
easat-4382	227	18	network	network	NOUN
easat-4382	227	19	—	—	PUNCT
easat-4382	227	20	encryption	encryption	NOUN
easat-4382	227	21	safeguards	safeguard	VERB
easat-4382	227	22	sensitive	sensitive	ADJ
easat-4382	227	23	data	datum	NOUN
easat-4382	227	24	and	and	CCONJ
easat-4382	227	25	credentials	credential	NOUN
easat-4382	227	26	from	from	ADP
easat-4382	227	27	interception	interception	NOUN
easat-4382	227	28	or	or	CCONJ
easat-4382	227	29	tampering	tampering	NOUN
easat-4382	227	30	.	.	PUNCT
easat-4382	228	1	implementing	implement	VERB
easat-4382	228	2	mutual	mutual	ADJ
easat-4382	228	3	tls	tls	NOUN
easat-4382	229	1	[	[	X
easat-4382	229	2	19	19	NUM
easat-4382	229	3	]	]	PUNCT
easat-4382	229	4	is	be	AUX
easat-4382	229	5	particularly	particularly	ADV
easat-4382	229	6	effective	effective	ADJ
easat-4382	229	7	,	,	PUNCT
easat-4382	229	8	as	as	SCONJ
easat-4382	229	9	it	it	PRON
easat-4382	229	10	encrypts	encrypt	VERB
easat-4382	229	11	data	datum	NOUN
easat-4382	229	12	in	in	ADP
easat-4382	229	13	transit	transit	NOUN
easat-4382	229	14	and	and	CCONJ
easat-4382	229	15	ensures	ensure	VERB
easat-4382	229	16	strong	strong	ADJ
easat-4382	229	17	authentication	authentication	NOUN
easat-4382	229	18	between	between	ADP
easat-4382	229	19	client	client	NOUN
easat-4382	229	20	and	and	CCONJ
easat-4382	229	21	server	server	NOUN
easat-4382	229	22	containers	container	NOUN
easat-4382	229	23	.	.	PUNCT
easat-4382	230	1	in	in	ADP
easat-4382	230	2	kubernetes	kubernete	NOUN
easat-4382	230	3	environments	environment	NOUN
easat-4382	230	4	,	,	PUNCT
easat-4382	230	5	service	service	NOUN
easat-4382	230	6	meshes	mesh	VERB
easat-4382	230	7	like	like	ADP
easat-4382	230	8	istio	istio	NOUN
easat-4382	230	9	or	or	CCONJ
easat-4382	230	10	linkerd	linkerd	NOUN
easat-4382	230	11	can	can	AUX
easat-4382	230	12	automate	automate	VERB
easat-4382	230	13	this	this	DET
easat-4382	230	14	process	process	NOUN
easat-4382	230	15	by	by	ADP
easat-4382	230	16	injecting	inject	VERB
easat-4382	230	17	sidecar	sidecar	NOUN
easat-4382	230	18	proxies	proxy	NOUN
easat-4382	230	19	that	that	PRON
easat-4382	230	20	handle	handle	VERB
easat-4382	230	21	certificate	certificate	NOUN
easat-4382	230	22	management	management	NOUN
easat-4382	230	23	and	and	CCONJ
easat-4382	230	24	traffic	traffic	NOUN
easat-4382	230	25	encryption	encryption	NOUN
easat-4382	230	26	without	without	ADP
easat-4382	230	27	requiring	require	VERB
easat-4382	230	28	changes	change	NOUN
easat-4382	230	29	in	in	ADP
easat-4382	230	30	application	application	NOUN
easat-4382	230	31	code	code	NOUN
easat-4382	230	32	.	.	PUNCT
easat-4382	231	1	6.4	6.4	NUM
easat-4382	231	2	.	.	PUNCT
easat-4382	232	1	secrets	secret	NOUN
easat-4382	232	2	management	management	NOUN
easat-4382	232	3	secrets	secret	NOUN
easat-4382	232	4	management	management	NOUN
easat-4382	232	5	is	be	AUX
easat-4382	232	6	a	a	DET
easat-4382	232	7	critical	critical	ADJ
easat-4382	232	8	aspect	aspect	NOUN
easat-4382	232	9	of	of	ADP
easat-4382	232	10	containerized	containerized	ADJ
easat-4382	232	11	application	application	NOUN
easat-4382	232	12	security	security	NOUN
easat-4382	232	13	,	,	PUNCT
easat-4382	232	14	as	as	SCONJ
easat-4382	232	15	improperly	improperly	ADV
easat-4382	232	16	stored	store	VERB
easat-4382	232	17	or	or	CCONJ
easat-4382	232	18	handled	handle	VERB
easat-4382	232	19	credentials	credential	NOUN
easat-4382	232	20	—	—	PUNCT
easat-4382	232	21	such	such	ADJ
easat-4382	232	22	as	as	ADP
easat-4382	232	23	api	api	NOUN
easat-4382	232	24	keys	key	NOUN
easat-4382	232	25	,	,	PUNCT
easat-4382	232	26	passwords	password	NOUN
easat-4382	232	27	,	,	PUNCT
easat-4382	232	28	and	and	CCONJ
easat-4382	232	29	tokens	token	NOUN
easat-4382	232	30	—	—	PUNCT
easat-4382	232	31	can	can	AUX
easat-4382	232	32	serve	serve	VERB
easat-4382	232	33	as	as	ADP
easat-4382	232	34	prime	prime	ADJ
easat-4382	232	35	entry	entry	NOUN
easat-4382	232	36	points	point	NOUN
easat-4382	232	37	for	for	ADP
easat-4382	232	38	1253	1253	NUM
easat-4382	232	39	edelweiss	edelweiss	PROPN
easat-4382	232	40	applied	apply	VERB
easat-4382	232	41	science	science	NOUN
easat-4382	232	42	and	and	CCONJ
easat-4382	232	43	technology	technology	NOUN
easat-4382	232	44	issn	issn	PROPN
easat-4382	232	45	:	:	PUNCT
easat-4382	232	46	2576	2576	NUM
easat-4382	232	47	-	-	SYM
easat-4382	232	48	8484	8484	NUM
easat-4382	232	49	vol	vol	NOUN
easat-4382	232	50	.	.	PROPN
easat-4382	233	1	9	9	NUM
easat-4382	233	2	,	,	PUNCT
easat-4382	233	3	no	no	INTJ
easat-4382	233	4	.	.	NOUN
easat-4382	233	5	1	1	NUM
easat-4382	233	6	:	:	PUNCT
easat-4382	233	7	1243	1243	NUM
easat-4382	233	8	-	-	SYM
easat-4382	233	9	1261	1261	NUM
easat-4382	233	10	,	,	PUNCT
easat-4382	233	11	2025	2025	NUM
easat-4382	233	12	doi	doi	NOUN
easat-4382	233	13	:	:	PUNCT
easat-4382	233	14	10.55214/25768484.v9i1.4382	10.55214/25768484.v9i1.4382	NUM
easat-4382	233	15	©	©	PROPN
easat-4382	233	16	2025	2025	NUM
easat-4382	233	17	by	by	ADP
easat-4382	233	18	the	the	DET
easat-4382	233	19	authors	author	NOUN
easat-4382	233	20	;	;	PUNCT
easat-4382	234	1	licensee	licensee	PROPN
easat-4382	234	2	learning	learn	VERB
easat-4382	234	3	gate	gate	NOUN
easat-4382	234	4	attackers	attacker	NOUN
easat-4382	234	5	.	.	PUNCT
easat-4382	235	1	storing	store	VERB
easat-4382	235	2	secrets	secret	NOUN
easat-4382	235	3	directly	directly	ADV
easat-4382	235	4	within	within	ADP
easat-4382	235	5	container	container	NOUN
easat-4382	235	6	images	image	NOUN
easat-4382	235	7	or	or	CCONJ
easat-4382	235	8	as	as	ADP
easat-4382	235	9	plain	plain	ADJ
easat-4382	235	10	-	-	PUNCT
easat-4382	235	11	text	text	NOUN
easat-4382	235	12	environment	environment	NOUN
easat-4382	235	13	variables	variable	NOUN
easat-4382	235	14	makes	make	VERB
easat-4382	235	15	them	they	PRON
easat-4382	235	16	easy	easy	ADJ
easat-4382	235	17	to	to	PART
easat-4382	235	18	expose	expose	VERB
easat-4382	235	19	,	,	PUNCT
easat-4382	235	20	whether	whether	SCONJ
easat-4382	235	21	through	through	ADP
easat-4382	235	22	runtime	runtime	NOUN
easat-4382	235	23	logs	log	NOUN
easat-4382	235	24	,	,	PUNCT
easat-4382	235	25	container	container	NOUN
easat-4382	235	26	registry	registry	NOUN
easat-4382	235	27	leaks	leak	NOUN
easat-4382	235	28	,	,	PUNCT
easat-4382	235	29	or	or	CCONJ
easat-4382	235	30	compromised	compromise	VERB
easat-4382	235	31	images	image	NOUN
easat-4382	235	32	.	.	PUNCT
easat-4382	236	1	instead	instead	ADV
easat-4382	236	2	,	,	PUNCT
easat-4382	236	3	centralized	centralized	ADJ
easat-4382	236	4	solutions	solution	NOUN
easat-4382	236	5	like	like	ADP
easat-4382	236	6	hashicorp	hashicorp	NOUN
easat-4382	236	7	vault	vault	NOUN
easat-4382	236	8	[	[	X
easat-4382	236	9	13	13	NUM
easat-4382	236	10	]	]	PUNCT
easat-4382	236	11	should	should	AUX
easat-4382	236	12	be	be	AUX
easat-4382	236	13	used	use	VERB
easat-4382	236	14	.	.	PUNCT
easat-4382	237	1	vault	vault	NOUN
easat-4382	237	2	provides	provide	VERB
easat-4382	237	3	a	a	DET
easat-4382	237	4	secure	secure	ADJ
easat-4382	237	5	,	,	PUNCT
easat-4382	237	6	encrypted	encrypt	VERB
easat-4382	237	7	store	store	NOUN
easat-4382	237	8	for	for	ADP
easat-4382	237	9	sensitive	sensitive	ADJ
easat-4382	237	10	data	datum	NOUN
easat-4382	237	11	and	and	CCONJ
easat-4382	237	12	dynamic	dynamic	ADJ
easat-4382	237	13	secrets	secret	NOUN
easat-4382	237	14	that	that	PRON
easat-4382	237	15	expire	expire	VERB
easat-4382	237	16	after	after	ADP
easat-4382	237	17	a	a	DET
easat-4382	237	18	set	set	ADJ
easat-4382	237	19	time	time	NOUN
easat-4382	237	20	.	.	PUNCT
easat-4382	238	1	vault	vault	NOUN
easat-4382	238	2	’s	’s	PART
easat-4382	238	3	integration	integration	NOUN
easat-4382	238	4	with	with	ADP
easat-4382	238	5	container	container	NOUN
easat-4382	238	6	orchestration	orchestration	NOUN
easat-4382	238	7	platforms	platform	NOUN
easat-4382	238	8	allows	allow	VERB
easat-4382	238	9	secrets	secret	NOUN
easat-4382	238	10	to	to	PART
easat-4382	238	11	be	be	AUX
easat-4382	238	12	injected	inject	VERB
easat-4382	238	13	on	on	ADP
easat-4382	238	14	-	-	PUNCT
easat-4382	238	15	demand	demand	NOUN
easat-4382	238	16	,	,	PUNCT
easat-4382	238	17	ensuring	ensure	VERB
easat-4382	238	18	that	that	SCONJ
easat-4382	238	19	applications	application	NOUN
easat-4382	238	20	only	only	ADV
easat-4382	238	21	have	have	VERB
easat-4382	238	22	access	access	NOUN
easat-4382	238	23	to	to	ADP
easat-4382	238	24	the	the	DET
easat-4382	238	25	credentials	credential	NOUN
easat-4382	238	26	they	they	PRON
easat-4382	238	27	need	need	VERB
easat-4382	238	28	for	for	ADP
easat-4382	238	29	as	as	ADV
easat-4382	238	30	long	long	ADV
easat-4382	238	31	as	as	SCONJ
easat-4382	238	32	they	they	PRON
easat-4382	238	33	need	need	VERB
easat-4382	238	34	them	they	PRON
easat-4382	238	35	.	.	PUNCT
easat-4382	239	1	this	this	PRON
easat-4382	239	2	limits	limit	VERB
easat-4382	239	3	the	the	DET
easat-4382	239	4	potential	potential	ADJ
easat-4382	239	5	impact	impact	NOUN
easat-4382	239	6	of	of	ADP
easat-4382	239	7	a	a	DET
easat-4382	239	8	breach	breach	NOUN
easat-4382	239	9	and	and	CCONJ
easat-4382	239	10	makes	make	VERB
easat-4382	239	11	it	it	PRON
easat-4382	239	12	easier	easy	ADJ
easat-4382	239	13	to	to	PART
easat-4382	239	14	rotate	rotate	VERB
easat-4382	239	15	secrets	secret	NOUN
easat-4382	239	16	or	or	CCONJ
easat-4382	239	17	revoke	revoke	VERB
easat-4382	239	18	compromised	compromise	VERB
easat-4382	239	19	credentials	credential	NOUN
easat-4382	239	20	quickly	quickly	ADV
easat-4382	239	21	.	.	PUNCT
easat-4382	240	1	in	in	ADP
easat-4382	240	2	kubernetes	kubernete	NOUN
easat-4382	240	3	,	,	PUNCT
easat-4382	240	4	the	the	DET
easat-4382	240	5	native	native	ADJ
easat-4382	240	6	approach	approach	NOUN
easat-4382	240	7	to	to	ADP
easat-4382	240	8	secrets	secret	NOUN
easat-4382	240	9	management	management	NOUN
easat-4382	240	10	involves	involve	VERB
easat-4382	240	11	using	use	VERB
easat-4382	240	12	kubernetes	kubernete	NOUN
easat-4382	240	13	secrets	secret	NOUN
easat-4382	240	14	[	[	X
easat-4382	240	15	25	25	NUM
easat-4382	240	16	]	]	PUNCT
easat-4382	240	17	which	which	PRON
easat-4382	240	18	can	can	AUX
easat-4382	240	19	be	be	AUX
easat-4382	240	20	mounted	mount	VERB
easat-4382	240	21	as	as	ADP
easat-4382	240	22	volumes	volume	NOUN
easat-4382	240	23	or	or	CCONJ
easat-4382	240	24	exposed	expose	VERB
easat-4382	240	25	as	as	ADP
easat-4382	240	26	environment	environment	NOUN
easat-4382	240	27	variables	variable	NOUN
easat-4382	240	28	to	to	ADP
easat-4382	240	29	running	run	VERB
easat-4382	240	30	containers	container	NOUN
easat-4382	240	31	.	.	PUNCT
easat-4382	241	1	kubernetes	kubernete	NOUN
easat-4382	241	2	secrets	secret	NOUN
easat-4382	241	3	are	be	AUX
easat-4382	241	4	base64	base64	ADV
easat-4382	241	5	-	-	PUNCT
easat-4382	241	6	encoded	encode	VERB
easat-4382	241	7	objects	object	NOUN
easat-4382	241	8	,	,	PUNCT
easat-4382	241	9	and	and	CCONJ
easat-4382	241	10	while	while	SCONJ
easat-4382	241	11	not	not	PART
easat-4382	241	12	inherently	inherently	ADV
easat-4382	241	13	encrypted	encrypt	VERB
easat-4382	241	14	by	by	ADP
easat-4382	241	15	default	default	NOUN
easat-4382	241	16	,	,	PUNCT
easat-4382	241	17	they	they	PRON
easat-4382	241	18	can	can	AUX
easat-4382	241	19	be	be	AUX
easat-4382	241	20	protected	protect	VERB
easat-4382	241	21	with	with	ADP
easat-4382	241	22	encryption	encryption	NOUN
easat-4382	241	23	at	at	ADP
easat-4382	241	24	rest	rest	NOUN
easat-4382	241	25	in	in	ADP
easat-4382	241	26	the	the	DET
easat-4382	241	27	cluster	cluster	NOUN
easat-4382	241	28	’s	’s	PART
easat-4382	241	29	etcd	etcd	NOUN
easat-4382	241	30	store	store	NOUN
easat-4382	241	31	if	if	SCONJ
easat-4382	241	32	properly	properly	ADV
easat-4382	241	33	configured	configure	VERB
easat-4382	241	34	.	.	PUNCT
easat-4382	242	1	rbac	rbac	PROPN
easat-4382	242	2	policies	policy	NOUN
easat-4382	242	3	can	can	AUX
easat-4382	242	4	further	far	ADV
easat-4382	242	5	secure	secure	VERB
easat-4382	242	6	who	who	PRON
easat-4382	242	7	can	can	AUX
easat-4382	242	8	read	read	VERB
easat-4382	242	9	or	or	CCONJ
easat-4382	242	10	modify	modify	VERB
easat-4382	242	11	the	the	DET
easat-4382	242	12	secret	secret	ADJ
easat-4382	242	13	objects	object	NOUN
easat-4382	242	14	within	within	ADP
easat-4382	242	15	the	the	DET
easat-4382	242	16	cluster	cluster	NOUN
easat-4382	242	17	.	.	PUNCT
easat-4382	243	1	combining	combine	VERB
easat-4382	243	2	these	these	DET
easat-4382	243	3	built	build	VERB
easat-4382	243	4	-	-	PUNCT
easat-4382	243	5	in	in	ADP
easat-4382	243	6	capabilities	capability	NOUN
easat-4382	243	7	with	with	ADP
easat-4382	243	8	an	an	DET
easat-4382	243	9	external	external	ADJ
easat-4382	243	10	secrets	secret	NOUN
easat-4382	243	11	manager	manager	NOUN
easat-4382	243	12	(	(	PUNCT
easat-4382	243	13	such	such	ADJ
easat-4382	243	14	as	as	ADP
easat-4382	243	15	vault	vault	NOUN
easat-4382	243	16	)	)	PUNCT
easat-4382	243	17	can	can	AUX
easat-4382	243	18	add	add	VERB
easat-4382	243	19	another	another	DET
easat-4382	243	20	layer	layer	NOUN
easat-4382	243	21	of	of	ADP
easat-4382	243	22	security	security	NOUN
easat-4382	243	23	and	and	CCONJ
easat-4382	243	24	flexibility	flexibility	NOUN
easat-4382	243	25	,	,	PUNCT
easat-4382	243	26	particularly	particularly	ADV
easat-4382	243	27	in	in	ADP
easat-4382	243	28	large	large	ADJ
easat-4382	243	29	-	-	PUNCT
easat-4382	243	30	scale	scale	NOUN
easat-4382	243	31	or	or	CCONJ
easat-4382	243	32	multi	multi	ADJ
easat-4382	243	33	-	-	ADJ
easat-4382	243	34	tenant	tenant	ADJ
easat-4382	243	35	environments	environment	NOUN
easat-4382	243	36	.	.	PUNCT
easat-4382	244	1	ultimately	ultimately	ADV
easat-4382	244	2	,	,	PUNCT
easat-4382	244	3	any	any	DET
easat-4382	244	4	effective	effective	ADJ
easat-4382	244	5	secrets	secret	NOUN
easat-4382	244	6	management	management	NOUN
easat-4382	244	7	strategy	strategy	NOUN
easat-4382	244	8	should	should	AUX
easat-4382	244	9	emphasize	emphasize	VERB
easat-4382	244	10	short	short	ADJ
easat-4382	244	11	-	-	PUNCT
easat-4382	244	12	lived	live	VERB
easat-4382	244	13	credentials	credential	NOUN
easat-4382	244	14	,	,	PUNCT
easat-4382	244	15	automated	automated	ADJ
easat-4382	244	16	rotation	rotation	NOUN
easat-4382	244	17	,	,	PUNCT
easat-4382	244	18	and	and	CCONJ
easat-4382	244	19	secure	secure	VERB
easat-4382	244	20	storage	storage	NOUN
easat-4382	244	21	and	and	CCONJ
easat-4382	244	22	retrieval	retrieval	NOUN
easat-4382	244	23	mechanisms	mechanism	NOUN
easat-4382	244	24	to	to	PART
easat-4382	244	25	minimize	minimize	VERB
easat-4382	244	26	the	the	DET
easat-4382	244	27	exposure	exposure	NOUN
easat-4382	244	28	window	window	NOUN
easat-4382	244	29	if	if	SCONJ
easat-4382	244	30	credentials	credential	NOUN
easat-4382	244	31	are	be	AUX
easat-4382	244	32	ever	ever	ADV
easat-4382	244	33	compromised	compromise	VERB
easat-4382	244	34	.	.	PUNCT
easat-4382	245	1	6.5	6.5	NUM
easat-4382	245	2	.	.	PUNCT
easat-4382	246	1	host	host	NOUN
easat-4382	246	2	security	security	NOUN
easat-4382	246	3	the	the	DET
easat-4382	246	4	security	security	NOUN
easat-4382	246	5	of	of	ADP
easat-4382	246	6	a	a	DET
easat-4382	246	7	container	container	NOUN
easat-4382	246	8	host	host	NOUN
easat-4382	246	9	is	be	AUX
easat-4382	246	10	vital	vital	ADJ
easat-4382	246	11	because	because	SCONJ
easat-4382	246	12	containers	container	NOUN
easat-4382	246	13	share	share	VERB
easat-4382	246	14	the	the	DET
easat-4382	246	15	host	host	NOUN
easat-4382	246	16	operating	operating	NOUN
easat-4382	246	17	system	system	NOUN
easat-4382	246	18	kernel	kernel	NOUN
easat-4382	246	19	.	.	PUNCT
easat-4382	247	1	if	if	SCONJ
easat-4382	247	2	the	the	DET
easat-4382	247	3	host	host	NOUN
easat-4382	247	4	is	be	AUX
easat-4382	247	5	compromised	compromise	VERB
easat-4382	247	6	,	,	PUNCT
easat-4382	247	7	attackers	attacker	NOUN
easat-4382	247	8	can	can	AUX
easat-4382	247	9	access	access	VERB
easat-4382	247	10	every	every	DET
easat-4382	247	11	container	container	NOUN
easat-4382	247	12	running	run	VERB
easat-4382	247	13	on	on	ADP
easat-4382	247	14	it	it	PRON
easat-4382	247	15	.	.	PUNCT
easat-4382	248	1	consequently	consequently	ADV
easat-4382	248	2	,	,	PUNCT
easat-4382	248	3	keeping	keep	VERB
easat-4382	248	4	the	the	DET
easat-4382	248	5	host	host	NOUN
easat-4382	248	6	operating	operating	NOUN
easat-4382	248	7	system	system	NOUN
easat-4382	248	8	up	up	ADP
easat-4382	248	9	to	to	ADP
easat-4382	248	10	date	date	NOUN
easat-4382	248	11	with	with	ADP
easat-4382	248	12	security	security	NOUN
easat-4382	248	13	patches	patch	NOUN
easat-4382	248	14	,	,	PUNCT
easat-4382	248	15	particularly	particularly	ADV
easat-4382	248	16	kernel	kernel	ADJ
easat-4382	248	17	-	-	PUNCT
easat-4382	248	18	level	level	NOUN
easat-4382	248	19	patches	patch	NOUN
easat-4382	248	20	,	,	PUNCT
easat-4382	248	21	is	be	AUX
easat-4382	248	22	a	a	DET
easat-4382	248	23	top	top	ADJ
easat-4382	248	24	priority	priority	NOUN
easat-4382	248	25	.	.	PUNCT
easat-4382	249	1	many	many	ADJ
easat-4382	249	2	distributions	distribution	NOUN
easat-4382	249	3	offer	offer	VERB
easat-4382	249	4	live	live	ADJ
easat-4382	249	5	patching	patch	VERB
easat-4382	249	6	mechanisms	mechanism	NOUN
easat-4382	249	7	(	(	PUNCT
easat-4382	249	8	e.g.	e.g.	ADV
easat-4382	249	9	,	,	PUNCT
easat-4382	249	10	canonical	canonical	PROPN
easat-4382	249	11	’s	’s	PART
easat-4382	249	12	livepatch	livepatch	NOUN
easat-4382	249	13	for	for	ADP
easat-4382	249	14	ubuntu	ubuntu	NOUN
easat-4382	249	15	[	[	X
easat-4382	249	16	26	26	NUM
easat-4382	249	17	]	]	PUNCT
easat-4382	249	18	)	)	PUNCT
easat-4382	249	19	that	that	PRON
easat-4382	249	20	allow	allow	VERB
easat-4382	249	21	kernel	kernel	PROPN
easat-4382	249	22	updates	update	NOUN
easat-4382	249	23	without	without	ADP
easat-4382	249	24	downtime	downtime	NOUN
easat-4382	249	25	,	,	PUNCT
easat-4382	249	26	which	which	PRON
easat-4382	249	27	is	be	AUX
easat-4382	249	28	especially	especially	ADV
easat-4382	249	29	valuable	valuable	ADJ
easat-4382	249	30	in	in	ADP
easat-4382	249	31	production	production	NOUN
easat-4382	249	32	environments	environment	NOUN
easat-4382	249	33	where	where	SCONJ
easat-4382	249	34	high	high	ADJ
easat-4382	249	35	availability	availability	NOUN
easat-4382	249	36	is	be	AUX
easat-4382	249	37	essential	essential	ADJ
easat-4382	249	38	.	.	PUNCT
easat-4382	250	1	access	access	NOUN
easat-4382	250	2	control	control	NOUN
easat-4382	250	3	measures	measure	NOUN
easat-4382	250	4	,	,	PUNCT
easat-4382	250	5	such	such	ADJ
easat-4382	250	6	as	as	ADP
easat-4382	250	7	ssh	ssh	NOUN
easat-4382	250	8	hardening	hardening	NOUN
easat-4382	250	9	(	(	PUNCT
easat-4382	250	10	disabling	disable	VERB
easat-4382	250	11	root	root	NOUN
easat-4382	250	12	logins	login	NOUN
easat-4382	250	13	,	,	PUNCT
easat-4382	250	14	using	use	VERB
easat-4382	250	15	key	key	NOUN
easat-4382	250	16	-	-	PUNCT
easat-4382	250	17	based	base	VERB
easat-4382	250	18	authentication	authentication	NOUN
easat-4382	250	19	)	)	PUNCT
easat-4382	250	20	,	,	PUNCT
easat-4382	250	21	implementing	implement	VERB
easat-4382	250	22	robust	robust	ADJ
easat-4382	250	23	firewall	firewall	NOUN
easat-4382	250	24	rules	rule	NOUN
easat-4382	250	25	,	,	PUNCT
easat-4382	250	26	and	and	CCONJ
easat-4382	250	27	restricting	restrict	VERB
easat-4382	250	28	which	which	PRON
easat-4382	250	29	users	user	NOUN
easat-4382	250	30	or	or	CCONJ
easat-4382	250	31	automation	automation	NOUN
easat-4382	250	32	systems	system	NOUN
easat-4382	250	33	can	can	AUX
easat-4382	250	34	modify	modify	VERB
easat-4382	250	35	container	container	NOUN
easat-4382	250	36	configurations	configuration	NOUN
easat-4382	250	37	reduce	reduce	VERB
easat-4382	250	38	the	the	DET
easat-4382	250	39	likelihood	likelihood	NOUN
easat-4382	250	40	of	of	ADP
easat-4382	250	41	unauthorized	unauthorized	ADJ
easat-4382	250	42	changes	change	NOUN
easat-4382	250	43	.	.	PUNCT
easat-4382	251	1	applying	apply	VERB
easat-4382	251	2	the	the	DET
easat-4382	251	3	principle	principle	NOUN
easat-4382	251	4	of	of	ADP
easat-4382	251	5	least	least	ADJ
easat-4382	251	6	privilege	privilege	NOUN
easat-4382	251	7	to	to	ADP
easat-4382	251	8	host	host	NOUN
easat-4382	251	9	accounts	account	NOUN
easat-4382	251	10	,	,	PUNCT
easat-4382	251	11	limiting	limit	VERB
easat-4382	251	12	administrative	administrative	ADJ
easat-4382	251	13	rights	right	NOUN
easat-4382	251	14	,	,	PUNCT
easat-4382	251	15	and	and	CCONJ
easat-4382	251	16	routinely	routinely	ADV
easat-4382	251	17	auditing	audit	VERB
easat-4382	251	18	login	login	NOUN
easat-4382	251	19	and	and	CCONJ
easat-4382	251	20	sudo	sudo	NOUN
easat-4382	251	21	access	access	NOUN
easat-4382	251	22	fortify	fortify	VERB
easat-4382	251	23	the	the	DET
easat-4382	251	24	container	container	NOUN
easat-4382	251	25	host	host	NOUN
easat-4382	251	26	.	.	PUNCT
easat-4382	252	1	in	in	ADP
easat-4382	252	2	this	this	DET
easat-4382	252	3	context	context	NOUN
easat-4382	252	4	,	,	PUNCT
easat-4382	252	5	operating	operating	NOUN
easat-4382	252	6	systems	system	NOUN
easat-4382	252	7	like	like	ADP
easat-4382	252	8	fedora	fedora	PROPN
easat-4382	252	9	coreos	coreos	X
easat-4382	252	10	[	[	X
easat-4382	252	11	27	27	NUM
easat-4382	252	12	]	]	PUNCT
easat-4382	252	13	offer	offer	VERB
easat-4382	252	14	a	a	DET
easat-4382	252	15	strong	strong	ADJ
easat-4382	252	16	foundation	foundation	NOUN
easat-4382	252	17	for	for	ADP
easat-4382	252	18	securing	secure	VERB
easat-4382	252	19	container	container	NOUN
easat-4382	252	20	hosts	host	NOUN
easat-4382	252	21	.	.	PUNCT
easat-4382	253	1	fedora	fedora	PROPN
easat-4382	253	2	coreos	coreos	PROPN
easat-4382	253	3	is	be	AUX
easat-4382	253	4	a	a	DET
easat-4382	253	5	minimal	minimal	ADJ
easat-4382	253	6	,	,	PUNCT
easat-4382	253	7	automatically	automatically	ADV
easat-4382	253	8	updating	updating	NOUN
easat-4382	253	9	,	,	PUNCT
easat-4382	253	10	container	container	NOUN
easat-4382	253	11	-	-	PUNCT
easat-4382	253	12	focused	focus	VERB
easat-4382	253	13	operating	operating	NOUN
easat-4382	253	14	system	system	NOUN
easat-4382	253	15	designed	design	VERB
easat-4382	253	16	to	to	PART
easat-4382	253	17	provide	provide	VERB
easat-4382	253	18	a	a	DET
easat-4382	253	19	streamlined	streamlined	ADJ
easat-4382	253	20	,	,	PUNCT
easat-4382	253	21	secure	secure	ADJ
easat-4382	253	22	base	base	NOUN
easat-4382	253	23	for	for	ADP
easat-4382	253	24	running	run	VERB
easat-4382	253	25	containerized	containerized	ADJ
easat-4382	253	26	workloads	workload	NOUN
easat-4382	253	27	.	.	PUNCT
easat-4382	254	1	by	by	ADP
easat-4382	254	2	default	default	NOUN
easat-4382	254	3	,	,	PUNCT
easat-4382	254	4	it	it	PRON
easat-4382	254	5	includes	include	VERB
easat-4382	254	6	only	only	ADV
easat-4382	254	7	the	the	DET
easat-4382	254	8	essential	essential	ADJ
easat-4382	254	9	components	component	NOUN
easat-4382	254	10	needed	need	VERB
easat-4382	254	11	to	to	PART
easat-4382	254	12	run	run	VERB
easat-4382	254	13	containers	container	NOUN
easat-4382	254	14	,	,	PUNCT
easat-4382	254	15	reducing	reduce	VERB
easat-4382	254	16	the	the	DET
easat-4382	254	17	attack	attack	NOUN
easat-4382	254	18	surface	surface	NOUN
easat-4382	254	19	and	and	CCONJ
easat-4382	254	20	simplifying	simplify	VERB
easat-4382	254	21	system	system	NOUN
easat-4382	254	22	administration	administration	NOUN
easat-4382	254	23	.	.	PUNCT
easat-4382	255	1	automatic	automatic	ADJ
easat-4382	255	2	updates	update	NOUN
easat-4382	255	3	ensure	ensure	VERB
easat-4382	255	4	that	that	SCONJ
easat-4382	255	5	fedora	fedora	PROPN
easat-4382	255	6	coreos	coreos	PROPN
easat-4382	255	7	frequently	frequently	ADV
easat-4382	255	8	applies	apply	VERB
easat-4382	255	9	the	the	DET
easat-4382	255	10	latest	late	ADJ
easat-4382	255	11	security	security	NOUN
easat-4382	255	12	patches	patch	NOUN
easat-4382	255	13	,	,	PUNCT
easat-4382	255	14	mitigating	mitigate	VERB
easat-4382	255	15	the	the	DET
easat-4382	255	16	risk	risk	NOUN
easat-4382	255	17	of	of	ADP
easat-4382	255	18	known	know	VERB
easat-4382	255	19	vulnerabilities	vulnerability	NOUN
easat-4382	255	20	.	.	PUNCT
easat-4382	256	1	additionally	additionally	ADV
easat-4382	256	2	,	,	PUNCT
easat-4382	256	3	its	its	PRON
easat-4382	256	4	immutable	immutable	ADJ
easat-4382	256	5	file	file	NOUN
easat-4382	256	6	system	system	NOUN
easat-4382	256	7	approach	approach	NOUN
easat-4382	256	8	limits	limit	VERB
easat-4382	256	9	unauthorized	unauthorized	ADJ
easat-4382	256	10	or	or	CCONJ
easat-4382	256	11	accidental	accidental	ADJ
easat-4382	256	12	changes	change	NOUN
easat-4382	256	13	,	,	PUNCT
easat-4382	256	14	further	far	ADV
easat-4382	256	15	securing	secure	VERB
easat-4382	256	16	the	the	DET
easat-4382	256	17	underlying	underlie	VERB
easat-4382	256	18	os	os	NOUN
easat-4382	256	19	.	.	PUNCT
easat-4382	257	1	when	when	SCONJ
easat-4382	257	2	combined	combine	VERB
easat-4382	257	3	with	with	ADP
easat-4382	257	4	strict	strict	ADJ
easat-4382	257	5	access	access	NOUN
easat-4382	257	6	control	control	NOUN
easat-4382	257	7	,	,	PUNCT
easat-4382	257	8	running	running	NOUN
easat-4382	257	9	containers	container	NOUN
easat-4382	257	10	as	as	ADP
easat-4382	257	11	non	non	ADJ
easat-4382	257	12	-	-	NOUN
easat-4382	257	13	root	root	NOUN
easat-4382	257	14	,	,	PUNCT
easat-4382	257	15	and	and	CCONJ
easat-4382	257	16	other	other	ADJ
easat-4382	257	17	best	good	ADJ
easat-4382	257	18	practices	practice	NOUN
easat-4382	257	19	,	,	PUNCT
easat-4382	257	20	fedora	fedora	PROPN
easat-4382	257	21	coreos	coreo	NOUN
easat-4382	257	22	and	and	CCONJ
easat-4382	257	23	similar	similar	ADJ
easat-4382	257	24	container	container	NOUN
easat-4382	257	25	-	-	PUNCT
easat-4382	257	26	focused	focus	VERB
easat-4382	257	27	operating	operating	NOUN
easat-4382	257	28	systems	system	NOUN
easat-4382	257	29	help	help	VERB
easat-4382	257	30	organizations	organization	NOUN
easat-4382	257	31	maintain	maintain	VERB
easat-4382	257	32	a	a	DET
easat-4382	257	33	secure	secure	ADJ
easat-4382	257	34	,	,	PUNCT
easat-4382	257	35	consistent	consistent	ADJ
easat-4382	257	36	,	,	PUNCT
easat-4382	257	37	and	and	CCONJ
easat-4382	257	38	easily	easily	ADV
easat-4382	257	39	managed	manage	VERB
easat-4382	257	40	environment	environment	NOUN
easat-4382	257	41	for	for	ADP
easat-4382	257	42	their	their	PRON
easat-4382	257	43	container	container	NOUN
easat-4382	257	44	deployments	deployment	NOUN
easat-4382	257	45	.	.	PUNCT
easat-4382	258	1	7	7	X
easat-4382	258	2	.	.	X
easat-4382	258	3	container	container	NOUN
easat-4382	258	4	orchestration	orchestration	NOUN
easat-4382	258	5	and	and	CCONJ
easat-4382	258	6	security	security	NOUN
easat-4382	258	7	kubernetes	kubernete	NOUN
easat-4382	258	8	orchestrates	orchestrate	VERB
easat-4382	258	9	containers	container	NOUN
easat-4382	258	10	by	by	ADP
easat-4382	258	11	abstracting	abstract	VERB
easat-4382	258	12	away	away	ADP
easat-4382	258	13	individual	individual	ADJ
easat-4382	258	14	hosts	host	NOUN
easat-4382	258	15	and	and	CCONJ
easat-4382	258	16	grouping	group	VERB
easat-4382	258	17	them	they	PRON
easat-4382	258	18	into	into	ADP
easat-4382	258	19	clusters	cluster	NOUN
easat-4382	258	20	,	,	PUNCT
easat-4382	258	21	then	then	ADV
easat-4382	258	22	automating	automate	VERB
easat-4382	258	23	tasks	task	NOUN
easat-4382	258	24	like	like	ADP
easat-4382	258	25	deployments	deployment	NOUN
easat-4382	258	26	,	,	PUNCT
easat-4382	258	27	container	container	NOUN
easat-4382	258	28	scheduling	scheduling	NOUN
easat-4382	258	29	,	,	PUNCT
easat-4382	258	30	and	and	CCONJ
easat-4382	258	31	scaling	scaling	NOUN
easat-4382	258	32	.	.	PUNCT
easat-4382	259	1	while	while	SCONJ
easat-4382	259	2	this	this	DET
easat-4382	259	3	process	process	NOUN
easat-4382	259	4	streamlines	streamline	VERB
easat-4382	259	5	operational	operational	ADJ
easat-4382	259	6	workflows	workflow	NOUN
easat-4382	259	7	,	,	PUNCT
easat-4382	259	8	it	it	PRON
easat-4382	259	9	also	also	ADV
easat-4382	259	10	adds	add	VERB
easat-4382	259	11	complexity	complexity	NOUN
easat-4382	259	12	to	to	ADP
easat-4382	259	13	security	security	NOUN
easat-4382	259	14	management	management	NOUN
easat-4382	259	15	because	because	SCONJ
easat-4382	259	16	there	there	PRON
easat-4382	259	17	are	be	VERB
easat-4382	259	18	multiple	multiple	ADJ
easat-4382	259	19	layers	layer	NOUN
easat-4382	259	20	to	to	PART
easat-4382	259	21	consider	consider	VERB
easat-4382	259	22	—	—	PUNCT
easat-4382	259	23	pods	pod	NOUN
easat-4382	259	24	,	,	PUNCT
easat-4382	259	25	services	service	NOUN
easat-4382	259	26	,	,	PUNCT
easat-4382	259	27	nodes	node	NOUN
easat-4382	259	28	,	,	PUNCT
easat-4382	259	29	and	and	CCONJ
easat-4382	259	30	even	even	ADV
easat-4382	259	31	cluster	cluster	NOUN
easat-4382	259	32	-	-	PUNCT
easat-4382	259	33	level	level	NOUN
easat-4382	259	34	components	component	NOUN
easat-4382	259	35	such	such	ADJ
easat-4382	259	36	as	as	ADP
easat-4382	259	37	the	the	DET
easat-4382	259	38	api	api	NOUN
easat-4382	259	39	server	server	NOUN
easat-4382	259	40	,	,	PUNCT
easat-4382	259	41	etcd	etcd	NOUN
easat-4382	259	42	,	,	PUNCT
easat-4382	259	43	and	and	CCONJ
easat-4382	259	44	controllers	controller	NOUN
easat-4382	259	45	.	.	PUNCT
easat-4382	260	1	kubernetes	kubernete	NOUN
easat-4382	260	2	dynamically	dynamically	ADV
easat-4382	260	3	assigns	assign	VERB
easat-4382	260	4	ip	ip	DET
easat-4382	260	5	addresses	address	NOUN
easat-4382	260	6	and	and	CCONJ
easat-4382	260	7	routes	route	NOUN
easat-4382	260	8	traffic	traffic	NOUN
easat-4382	260	9	between	between	ADP
easat-4382	260	10	containers	container	NOUN
easat-4382	260	11	,	,	PUNCT
easat-4382	260	12	making	make	VERB
easat-4382	260	13	the	the	DET
easat-4382	260	14	environment	environment	NOUN
easat-4382	260	15	far	far	ADV
easat-4382	260	16	more	more	ADV
easat-4382	260	17	ephemeral	ephemeral	ADJ
easat-4382	260	18	and	and	CCONJ
easat-4382	260	19	distributed	distribute	VERB
easat-4382	260	20	than	than	ADP
easat-4382	260	21	in	in	ADP
easat-4382	260	22	a	a	DET
easat-4382	260	23	traditional	traditional	ADJ
easat-4382	260	24	monolithic	monolithic	ADJ
easat-4382	260	25	setup	setup	NOUN
easat-4382	260	26	.	.	PUNCT
easat-4382	261	1	this	this	PRON
easat-4382	261	2	increases	increase	VERB
easat-4382	261	3	the	the	DET
easat-4382	261	4	potential	potential	ADJ
easat-4382	261	5	attack	attack	NOUN
easat-4382	261	6	surface	surface	NOUN
easat-4382	261	7	,	,	PUNCT
easat-4382	261	8	as	as	SCONJ
easat-4382	261	9	each	each	DET
easat-4382	261	10	pod	pod	NOUN
easat-4382	261	11	or	or	CCONJ
easat-4382	261	12	service	service	NOUN
easat-4382	261	13	endpoint	endpoint	NOUN
easat-4382	261	14	becomes	become	VERB
easat-4382	261	15	a	a	DET
easat-4382	261	16	point	point	NOUN
easat-4382	261	17	that	that	PRON
easat-4382	261	18	must	must	AUX
easat-4382	261	19	be	be	AUX
easat-4382	261	20	secured	secure	VERB
easat-4382	261	21	.	.	PUNCT
easat-4382	262	1	additionally	additionally	ADV
easat-4382	262	2	,	,	PUNCT
easat-4382	262	3	misconfigurations	misconfiguration	NOUN
easat-4382	262	4	in	in	ADP
easat-4382	262	5	cluster	cluster	NOUN
easat-4382	262	6	components	component	NOUN
easat-4382	262	7	—	—	PUNCT
easat-4382	262	8	like	like	ADP
easat-4382	262	9	insecure	insecure	ADJ
easat-4382	262	10	kubernetes	kubernete	NOUN
easat-4382	262	11	api	api	PROPN
easat-4382	262	12	1254	1254	NUM
easat-4382	262	13	edelweiss	edelweiss	PROPN
easat-4382	262	14	applied	apply	VERB
easat-4382	262	15	science	science	NOUN
easat-4382	262	16	and	and	CCONJ
easat-4382	262	17	technology	technology	NOUN
easat-4382	262	18	issn	issn	PROPN
easat-4382	262	19	:	:	PUNCT
easat-4382	262	20	2576	2576	NUM
easat-4382	262	21	-	-	SYM
easat-4382	262	22	8484	8484	NUM
easat-4382	262	23	vol	vol	NOUN
easat-4382	262	24	.	.	PROPN
easat-4382	263	1	9	9	NUM
easat-4382	263	2	,	,	PUNCT
easat-4382	263	3	no	no	INTJ
easat-4382	263	4	.	.	NOUN
easat-4382	263	5	1	1	NUM
easat-4382	263	6	:	:	PUNCT
easat-4382	263	7	1243	1243	NUM
easat-4382	263	8	-	-	SYM
easat-4382	263	9	1261	1261	NUM
easat-4382	263	10	,	,	PUNCT
easat-4382	263	11	2025	2025	NUM
easat-4382	263	12	doi	doi	NOUN
easat-4382	263	13	:	:	PUNCT
easat-4382	263	14	10.55214/25768484.v9i1.4382	10.55214/25768484.v9i1.4382	NUM
easat-4382	263	15	©	©	PROPN
easat-4382	263	16	2025	2025	NUM
easat-4382	263	17	by	by	ADP
easat-4382	263	18	the	the	DET
easat-4382	263	19	authors	author	NOUN
easat-4382	263	20	;	;	PUNCT
easat-4382	264	1	licensee	licensee	PROPN
easat-4382	264	2	learning	learn	VERB
easat-4382	264	3	gate	gate	PROPN
easat-4382	264	4	server	server	NOUN
easat-4382	264	5	settings	setting	NOUN
easat-4382	264	6	,	,	PUNCT
easat-4382	264	7	permissive	permissive	ADJ
easat-4382	264	8	network	network	NOUN
easat-4382	264	9	policies	policy	NOUN
easat-4382	264	10	,	,	PUNCT
easat-4382	264	11	or	or	CCONJ
easat-4382	264	12	overly	overly	ADV
easat-4382	264	13	broad	broad	ADJ
easat-4382	264	14	authentication	authentication	NOUN
easat-4382	264	15	tokens	token	NOUN
easat-4382	264	16	—	—	PUNCT
easat-4382	264	17	can	can	AUX
easat-4382	264	18	open	open	VERB
easat-4382	264	19	the	the	DET
easat-4382	264	20	door	door	NOUN
easat-4382	264	21	to	to	ADP
easat-4382	264	22	unauthorized	unauthorized	ADJ
easat-4382	264	23	access	access	NOUN
easat-4382	264	24	.	.	PUNCT
easat-4382	265	1	7.1	7.1	NUM
easat-4382	265	2	.	.	PUNCT
easat-4382	266	1	role	role	NOUN
easat-4382	266	2	-	-	PUNCT
easat-4382	266	3	based	base	VERB
easat-4382	266	4	access	access	NOUN
easat-4382	266	5	controls	control	VERB
easat-4382	266	6	rbac	rbac	NOUN
easat-4382	267	1	[	[	X
easat-4382	267	2	28	28	NUM
easat-4382	267	3	]	]	PUNCT
easat-4382	267	4	in	in	ADP
easat-4382	267	5	kubernetes	kubernete	NOUN
easat-4382	267	6	is	be	AUX
easat-4382	267	7	a	a	DET
easat-4382	267	8	crucial	crucial	ADJ
easat-4382	267	9	security	security	NOUN
easat-4382	267	10	measure	measure	NOUN
easat-4382	267	11	to	to	PART
easat-4382	267	12	mitigate	mitigate	VERB
easat-4382	267	13	these	these	DET
easat-4382	267	14	risks	risk	NOUN
easat-4382	267	15	,	,	PUNCT
easat-4382	267	16	enabling	enable	VERB
easat-4382	267	17	granular	granular	ADJ
easat-4382	267	18	control	control	NOUN
easat-4382	267	19	over	over	ADP
easat-4382	267	20	what	what	PRON
easat-4382	267	21	actions	action	NOUN
easat-4382	267	22	users	user	NOUN
easat-4382	267	23	and	and	CCONJ
easat-4382	267	24	service	service	NOUN
easat-4382	267	25	accounts	account	NOUN
easat-4382	267	26	can	can	AUX
easat-4382	267	27	perform	perform	VERB
easat-4382	267	28	on	on	ADP
easat-4382	267	29	cluster	cluster	NOUN
easat-4382	267	30	resources	resource	NOUN
easat-4382	267	31	.	.	PUNCT
easat-4382	268	1	administrators	administrator	NOUN
easat-4382	268	2	define	define	VERB
easat-4382	268	3	roles	role	NOUN
easat-4382	268	4	(	(	PUNCT
easat-4382	268	5	or	or	CCONJ
easat-4382	268	6	cluster	cluster	NOUN
easat-4382	268	7	-	-	PUNCT
easat-4382	268	8	wide	wide	ADJ
easat-4382	268	9	cluster	cluster	NOUN
easat-4382	268	10	roles	role	NOUN
easat-4382	268	11	)	)	PUNCT
easat-4382	268	12	that	that	PRON
easat-4382	268	13	specify	specify	VERB
easat-4382	268	14	permissions	permission	NOUN
easat-4382	268	15	—	—	PUNCT
easat-4382	268	16	such	such	ADJ
easat-4382	268	17	as	as	ADP
easat-4382	268	18	listing	list	VERB
easat-4382	268	19	pods	pod	NOUN
easat-4382	268	20	or	or	CCONJ
easat-4382	268	21	modifying	modify	VERB
easat-4382	268	22	deployments	deployment	NOUN
easat-4382	268	23	—	—	PUNCT
easat-4382	268	24	and	and	CCONJ
easat-4382	268	25	then	then	ADV
easat-4382	268	26	bind	bind	VERB
easat-4382	268	27	these	these	DET
easat-4382	268	28	roles	role	NOUN
easat-4382	268	29	to	to	ADP
easat-4382	268	30	subjects	subject	NOUN
easat-4382	268	31	(	(	PUNCT
easat-4382	268	32	users	user	NOUN
easat-4382	268	33	,	,	PUNCT
easat-4382	268	34	groups	group	NOUN
easat-4382	268	35	,	,	PUNCT
easat-4382	268	36	or	or	CCONJ
easat-4382	268	37	service	service	NOUN
easat-4382	268	38	accounts	account	NOUN
easat-4382	268	39	)	)	PUNCT
easat-4382	268	40	.	.	PUNCT
easat-4382	269	1	this	this	PRON
easat-4382	269	2	ensures	ensure	VERB
easat-4382	269	3	a	a	DET
easat-4382	269	4	least	least	ADJ
easat-4382	269	5	-	-	PUNCT
easat-4382	269	6	privilege	privilege	NOUN
easat-4382	269	7	model	model	NOUN
easat-4382	269	8	so	so	SCONJ
easat-4382	269	9	that	that	SCONJ
easat-4382	269	10	each	each	DET
easat-4382	269	11	component	component	NOUN
easat-4382	269	12	or	or	CCONJ
easat-4382	269	13	user	user	NOUN
easat-4382	269	14	only	only	ADV
easat-4382	269	15	has	have	VERB
easat-4382	269	16	the	the	DET
easat-4382	269	17	access	access	NOUN
easat-4382	269	18	necessary	necessary	ADJ
easat-4382	269	19	for	for	ADP
easat-4382	269	20	its	its	PRON
easat-4382	269	21	functions	function	NOUN
easat-4382	269	22	.	.	PUNCT
easat-4382	270	1	for	for	ADP
easat-4382	270	2	instance	instance	NOUN
easat-4382	270	3	,	,	PUNCT
easat-4382	270	4	a	a	DET
easat-4382	270	5	ci	ci	PROPN
easat-4382	270	6	/	/	SYM
easat-4382	270	7	cd	cd	NOUN
easat-4382	270	8	pipeline	pipeline	NOUN
easat-4382	270	9	service	service	NOUN
easat-4382	270	10	account	account	NOUN
easat-4382	270	11	might	might	AUX
easat-4382	270	12	have	have	VERB
easat-4382	270	13	permission	permission	NOUN
easat-4382	270	14	to	to	PART
easat-4382	270	15	create	create	VERB
easat-4382	270	16	or	or	CCONJ
easat-4382	270	17	update	update	VERB
easat-4382	270	18	deployments	deployment	NOUN
easat-4382	270	19	in	in	ADP
easat-4382	270	20	a	a	DET
easat-4382	270	21	specific	specific	ADJ
easat-4382	270	22	namespace	namespace	NOUN
easat-4382	270	23	but	but	CCONJ
easat-4382	270	24	no	no	DET
easat-4382	270	25	right	right	NOUN
easat-4382	270	26	to	to	PART
easat-4382	270	27	view	view	VERB
easat-4382	270	28	secrets	secret	NOUN
easat-4382	270	29	or	or	CCONJ
easat-4382	270	30	interact	interact	VERB
easat-4382	270	31	with	with	ADP
easat-4382	270	32	other	other	ADJ
easat-4382	270	33	namespaces	namespace	NOUN
easat-4382	270	34	.	.	PUNCT
easat-4382	271	1	by	by	ADP
easat-4382	271	2	defining	define	VERB
easat-4382	271	3	the	the	DET
easat-4382	271	4	roles	role	NOUN
easat-4382	271	5	,	,	PUNCT
easat-4382	271	6	kubernetes	kubernete	NOUN
easat-4382	271	7	operators	operator	NOUN
easat-4382	271	8	reduce	reduce	VERB
easat-4382	271	9	the	the	DET
easat-4382	271	10	risk	risk	NOUN
easat-4382	271	11	of	of	ADP
easat-4382	271	12	accidental	accidental	ADJ
easat-4382	271	13	or	or	CCONJ
easat-4382	271	14	malicious	malicious	ADJ
easat-4382	271	15	misuse	misuse	NOUN
easat-4382	271	16	of	of	ADP
easat-4382	271	17	privileged	privileged	ADJ
easat-4382	271	18	operations	operation	NOUN
easat-4382	271	19	.	.	PUNCT
easat-4382	272	1	7.2	7.2	NUM
easat-4382	272	2	.	.	PUNCT
easat-4382	273	1	pod	pod	NOUN
easat-4382	273	2	security	security	NOUN
easat-4382	273	3	policies	policy	NOUN
easat-4382	273	4	beyond	beyond	ADP
easat-4382	273	5	rbac	rbac	NOUN
easat-4382	273	6	,	,	PUNCT
easat-4382	273	7	enforcing	enforce	VERB
easat-4382	273	8	security	security	NOUN
easat-4382	273	9	policies	policy	NOUN
easat-4382	273	10	at	at	ADP
easat-4382	273	11	the	the	DET
easat-4382	273	12	pod	pod	NOUN
easat-4382	273	13	level	level	NOUN
easat-4382	273	14	is	be	AUX
easat-4382	273	15	vital	vital	ADJ
easat-4382	273	16	for	for	ADP
easat-4382	273	17	maintaining	maintain	VERB
easat-4382	273	18	a	a	DET
easat-4382	273	19	robust	robust	ADJ
easat-4382	273	20	security	security	NOUN
easat-4382	273	21	posture	posture	NOUN
easat-4382	273	22	.	.	PUNCT
easat-4382	274	1	in	in	ADP
easat-4382	274	2	newer	new	ADJ
easat-4382	274	3	kubernetes	kubernete	NOUN
easat-4382	274	4	releases	release	NOUN
easat-4382	274	5	,	,	PUNCT
easat-4382	274	6	pod	pod	ADJ
easat-4382	274	7	security	security	NOUN
easat-4382	274	8	admission	admission	NOUN
easat-4382	274	9	[	[	X
easat-4382	274	10	29	29	NUM
easat-4382	274	11	]	]	PUNCT
easat-4382	274	12	(	(	PUNCT
easat-4382	274	13	replacing	replace	VERB
easat-4382	274	14	the	the	DET
easat-4382	274	15	older	old	ADJ
easat-4382	274	16	pod	pod	NOUN
easat-4382	274	17	security	security	NOUN
easat-4382	274	18	policies	policy	NOUN
easat-4382	274	19	)	)	PUNCT
easat-4382	274	20	allows	allow	VERB
easat-4382	274	21	administrators	administrator	NOUN
easat-4382	274	22	to	to	PART
easat-4382	274	23	define	define	VERB
easat-4382	274	24	baseline	baseline	ADJ
easat-4382	274	25	pod	pod	NOUN
easat-4382	274	26	requirements	requirement	NOUN
easat-4382	274	27	—	—	PUNCT
easat-4382	274	28	such	such	ADJ
easat-4382	274	29	as	as	ADP
easat-4382	274	30	disallowing	disallow	VERB
easat-4382	274	31	privileged	privileged	ADJ
easat-4382	274	32	containers	container	NOUN
easat-4382	274	33	,	,	PUNCT
easat-4382	274	34	requiring	require	VERB
easat-4382	274	35	a	a	DET
easat-4382	274	36	read	read	VERB
easat-4382	274	37	-	-	PUNCT
easat-4382	274	38	only	only	ADV
easat-4382	274	39	root	root	NOUN
easat-4382	274	40	file	file	NOUN
easat-4382	274	41	system	system	NOUN
easat-4382	274	42	,	,	PUNCT
easat-4382	274	43	or	or	CCONJ
easat-4382	274	44	ensuring	ensure	VERB
easat-4382	274	45	containers	container	NOUN
easat-4382	274	46	run	run	VERB
easat-4382	274	47	as	as	ADP
easat-4382	274	48	non	non	ADJ
easat-4382	274	49	-	-	ADJ
easat-4382	274	50	root	root	ADJ
easat-4382	274	51	users	user	NOUN
easat-4382	274	52	.	.	PUNCT
easat-4382	275	1	for	for	ADP
easat-4382	275	2	example	example	NOUN
easat-4382	275	3	,	,	PUNCT
easat-4382	275	4	a	a	DET
easat-4382	275	5	policy	policy	NOUN
easat-4382	275	6	might	might	AUX
easat-4382	275	7	forbid	forbid	VERB
easat-4382	275	8	containers	container	NOUN
easat-4382	275	9	from	from	ADP
easat-4382	275	10	escalating	escalate	VERB
easat-4382	275	11	privileges	privilege	NOUN
easat-4382	275	12	or	or	CCONJ
easat-4382	275	13	mounting	mount	VERB
easat-4382	275	14	sensitive	sensitive	ADJ
easat-4382	275	15	host	host	NOUN
easat-4382	275	16	paths	path	NOUN
easat-4382	275	17	containing	contain	VERB
easat-4382	275	18	the	the	DET
easat-4382	275	19	blast	blast	NOUN
easat-4382	275	20	radius	radius	NOUN
easat-4382	275	21	if	if	SCONJ
easat-4382	275	22	an	an	DET
easat-4382	275	23	attacker	attacker	NOUN
easat-4382	275	24	compromises	compromise	VERB
easat-4382	275	25	a	a	DET
easat-4382	275	26	container	container	NOUN
easat-4382	275	27	.	.	PUNCT
easat-4382	276	1	combining	combine	VERB
easat-4382	276	2	pod	pod	ADJ
easat-4382	276	3	-	-	PUNCT
easat-4382	276	4	level	level	NOUN
easat-4382	276	5	security	security	NOUN
easat-4382	276	6	policies	policy	NOUN
easat-4382	276	7	with	with	ADP
easat-4382	276	8	network	network	NOUN
easat-4382	276	9	policies	policy	NOUN
easat-4382	276	10	(	(	PUNCT
easat-4382	276	11	to	to	PART
easat-4382	276	12	restrict	restrict	VERB
easat-4382	276	13	pod	pod	NOUN
easat-4382	276	14	-	-	PUNCT
easat-4382	276	15	to	to	ADP
easat-4382	276	16	-	-	PUNCT
easat-4382	276	17	pod	pod	NOUN
easat-4382	276	18	communication	communication	NOUN
easat-4382	276	19	)	)	PUNCT
easat-4382	276	20	and	and	CCONJ
easat-4382	277	1	rbac	rbac	PROPN
easat-4382	277	2	helps	help	VERB
easat-4382	277	3	build	build	VERB
easat-4382	277	4	a	a	DET
easat-4382	277	5	layered	layered	ADJ
easat-4382	277	6	defense	defense	NOUN
easat-4382	277	7	strategy	strategy	NOUN
easat-4382	277	8	.	.	PUNCT
easat-4382	278	1	for	for	ADP
easat-4382	278	2	instance	instance	NOUN
easat-4382	278	3	,	,	PUNCT
easat-4382	278	4	a	a	DET
easat-4382	278	5	development	development	NOUN
easat-4382	278	6	namespace	namespace	NOUN
easat-4382	278	7	might	might	AUX
easat-4382	278	8	enforce	enforce	VERB
easat-4382	278	9	a	a	DET
easat-4382	278	10	more	more	ADV
easat-4382	278	11	permissive	permissive	ADJ
easat-4382	278	12	policy	policy	NOUN
easat-4382	278	13	to	to	PART
easat-4382	278	14	allow	allow	VERB
easat-4382	278	15	debugging	debugging	NOUN
easat-4382	278	16	,	,	PUNCT
easat-4382	278	17	whereas	whereas	SCONJ
easat-4382	278	18	a	a	DET
easat-4382	278	19	production	production	NOUN
easat-4382	278	20	namespace	namespace	NOUN
easat-4382	278	21	enforces	enforce	VERB
easat-4382	278	22	a	a	DET
easat-4382	278	23	strict	strict	ADJ
easat-4382	278	24	policy	policy	NOUN
easat-4382	278	25	with	with	ADP
easat-4382	278	26	no	no	DET
easat-4382	278	27	privileged	privileged	ADJ
easat-4382	278	28	pods	pod	NOUN
easat-4382	278	29	.	.	PUNCT
easat-4382	279	1	pod	pod	NOUN
easat-4382	279	2	security	security	NOUN
easat-4382	279	3	admission	admission	NOUN
easat-4382	279	4	(	(	PUNCT
easat-4382	279	5	psa	psa	NOUN
easat-4382	279	6	)	)	PUNCT
easat-4382	279	7	in	in	ADP
easat-4382	279	8	kubernetes	kubernete	NOUN
easat-4382	279	9	is	be	AUX
easat-4382	279	10	the	the	DET
easat-4382	279	11	newer	new	ADJ
easat-4382	279	12	mechanism	mechanism	NOUN
easat-4382	279	13	for	for	ADP
easat-4382	279	14	enforcing	enforce	VERB
easat-4382	279	15	pod	pod	NOUN
easat-4382	279	16	security	security	NOUN
easat-4382	279	17	constraints	constraint	NOUN
easat-4382	279	18	,	,	PUNCT
easat-4382	279	19	replacing	replace	VERB
easat-4382	279	20	the	the	DET
easat-4382	279	21	older	old	ADJ
easat-4382	279	22	pod	pod	NOUN
easat-4382	279	23	security	security	NOUN
easat-4382	279	24	policies	policy	NOUN
easat-4382	279	25	(	(	PUNCT
easat-4382	279	26	psps	psp	NOUN
easat-4382	279	27	)	)	PUNCT
easat-4382	279	28	.	.	PUNCT
easat-4382	280	1	unlike	unlike	ADP
easat-4382	280	2	psps	psp	NOUN
easat-4382	280	3	,	,	PUNCT
easat-4382	280	4	which	which	PRON
easat-4382	280	5	rely	rely	VERB
easat-4382	280	6	on	on	ADP
easat-4382	280	7	cluster	cluster	NOUN
easat-4382	280	8	-	-	PUNCT
easat-4382	280	9	wide	wide	ADJ
easat-4382	280	10	resources	resource	NOUN
easat-4382	280	11	and	and	CCONJ
easat-4382	280	12	could	could	AUX
easat-4382	280	13	be	be	AUX
easat-4382	280	14	cumbersome	cumbersome	ADJ
easat-4382	280	15	to	to	ADP
easat-4382	280	16	configure	configure	NOUN
easat-4382	280	17	,	,	PUNCT
easat-4382	280	18	psa	psa	VERB
easat-4382	280	19	defines	define	NOUN
easat-4382	280	20	standardized	standardized	ADJ
easat-4382	280	21	enforcement	enforcement	NOUN
easat-4382	280	22	levels	level	NOUN
easat-4382	280	23	(	(	PUNCT
easat-4382	280	24	privileged	privileged	ADJ
easat-4382	280	25	,	,	PUNCT
easat-4382	280	26	baseline	baseline	ADJ
easat-4382	280	27	,	,	PUNCT
easat-4382	280	28	and	and	CCONJ
easat-4382	280	29	restricted	restrict	VERB
easat-4382	280	30	)	)	PUNCT
easat-4382	280	31	and	and	CCONJ
easat-4382	280	32	uses	use	VERB
easat-4382	280	33	namespace	namespace	NOUN
easat-4382	280	34	labels	label	NOUN
easat-4382	280	35	and	and	CCONJ
easat-4382	280	36	built	build	VERB
easat-4382	280	37	-	-	PUNCT
easat-4382	280	38	in	in	ADP
easat-4382	280	39	admission	admission	NOUN
easat-4382	280	40	checks	check	NOUN
easat-4382	280	41	,	,	PUNCT
easat-4382	280	42	making	make	VERB
easat-4382	280	43	it	it	PRON
easat-4382	280	44	more	more	ADV
easat-4382	280	45	straightforward	straightforward	ADJ
easat-4382	280	46	and	and	CCONJ
easat-4382	280	47	more	more	ADV
easat-4382	280	48	consistent	consistent	ADJ
easat-4382	280	49	to	to	PART
easat-4382	280	50	apply	apply	VERB
easat-4382	280	51	security	security	NOUN
easat-4382	280	52	controls	control	NOUN
easat-4382	280	53	.	.	PUNCT
easat-4382	281	1	for	for	ADP
easat-4382	281	2	example	example	NOUN
easat-4382	281	3	,	,	PUNCT
easat-4382	281	4	a	a	DET
easat-4382	281	5	“	"	PUNCT
easat-4382	281	6	restricted	restrict	VERB
easat-4382	281	7	”	"	PUNCT
easat-4382	281	8	level	level	NOUN
easat-4382	281	9	may	may	AUX
easat-4382	281	10	prohibit	prohibit	VERB
easat-4382	281	11	privilege	privilege	NOUN
easat-4382	281	12	escalation	escalation	NOUN
easat-4382	281	13	or	or	CCONJ
easat-4382	281	14	running	run	VERB
easat-4382	281	15	as	as	ADP
easat-4382	281	16	root	root	NOUN
easat-4382	281	17	,	,	PUNCT
easat-4382	281	18	while	while	SCONJ
easat-4382	281	19	a	a	DET
easat-4382	281	20	“	"	PUNCT
easat-4382	281	21	baseline	baseline	NOUN
easat-4382	281	22	”	"	PUNCT
easat-4382	281	23	level	level	NOUN
easat-4382	281	24	might	might	AUX
easat-4382	281	25	allow	allow	VERB
easat-4382	281	26	minimal	minimal	ADJ
easat-4382	281	27	privileges	privilege	NOUN
easat-4382	281	28	needed	need	VERB
easat-4382	281	29	for	for	ADP
easat-4382	281	30	typical	typical	ADJ
easat-4382	281	31	applications	application	NOUN
easat-4382	281	32	.	.	PUNCT
easat-4382	282	1	this	this	DET
easat-4382	282	2	declarative	declarative	NOUN
easat-4382	282	3	,	,	PUNCT
easat-4382	282	4	namespace	namespace	NOUN
easat-4382	282	5	-	-	PUNCT
easat-4382	282	6	based	base	VERB
easat-4382	282	7	approach	approach	NOUN
easat-4382	282	8	streamlines	streamline	VERB
easat-4382	282	9	the	the	DET
easat-4382	282	10	security	security	NOUN
easat-4382	282	11	posture	posture	NOUN
easat-4382	282	12	across	across	ADP
easat-4382	282	13	clusters	cluster	NOUN
easat-4382	282	14	by	by	ADP
easat-4382	282	15	ensuring	ensure	VERB
easat-4382	282	16	that	that	SCONJ
easat-4382	282	17	pods	pod	NOUN
easat-4382	282	18	deployed	deploy	VERB
easat-4382	282	19	in	in	ADP
easat-4382	282	20	each	each	DET
easat-4382	282	21	namespace	namespace	NOUN
easat-4382	282	22	can	can	AUX
easat-4382	282	23	not	not	PART
easat-4382	282	24	exceed	exceed	VERB
easat-4382	282	25	the	the	DET
easat-4382	282	26	defined	define	VERB
easat-4382	282	27	security	security	NOUN
easat-4382	282	28	level	level	NOUN
easat-4382	282	29	.	.	PUNCT
easat-4382	283	1	in	in	ADP
easat-4382	283	2	addition	addition	NOUN
easat-4382	283	3	,	,	PUNCT
easat-4382	283	4	psa	psa	VERB
easat-4382	283	5	integrates	integrate	NOUN
easat-4382	283	6	more	more	ADV
easat-4382	283	7	seamlessly	seamlessly	ADV
easat-4382	283	8	into	into	ADP
easat-4382	283	9	the	the	DET
easat-4382	283	10	kubernetes	kubernete	NOUN
easat-4382	283	11	admission	admission	NOUN
easat-4382	283	12	chain	chain	NOUN
easat-4382	283	13	,	,	PUNCT
easat-4382	283	14	improving	improve	VERB
easat-4382	283	15	compatibility	compatibility	NOUN
easat-4382	283	16	with	with	ADP
easat-4382	283	17	other	other	ADJ
easat-4382	283	18	security	security	NOUN
easat-4382	283	19	features	feature	NOUN
easat-4382	283	20	and	and	CCONJ
easat-4382	283	21	providing	provide	VERB
easat-4382	283	22	a	a	DET
easat-4382	283	23	clear	clear	ADJ
easat-4382	283	24	audit	audit	NOUN
easat-4382	283	25	trail	trail	NOUN
easat-4382	283	26	when	when	SCONJ
easat-4382	283	27	pods	pod	NOUN
easat-4382	283	28	are	be	AUX
easat-4382	283	29	denied	deny	VERB
easat-4382	283	30	or	or	CCONJ
easat-4382	283	31	modified	modify	VERB
easat-4382	283	32	.	.	PUNCT
easat-4382	284	1	the	the	DET
easat-4382	284	2	benefits	benefit	NOUN
easat-4382	284	3	include	include	VERB
easat-4382	284	4	a	a	DET
easat-4382	284	5	more	more	ADV
easat-4382	284	6	straightforward	straightforward	ADJ
easat-4382	284	7	configuration	configuration	NOUN
easat-4382	284	8	model	model	NOUN
easat-4382	284	9	,	,	PUNCT
easat-4382	284	10	reduced	reduce	VERB
easat-4382	284	11	complexity	complexity	NOUN
easat-4382	284	12	in	in	ADP
easat-4382	284	13	administering	administer	VERB
easat-4382	284	14	pod	pod	NOUN
easat-4382	284	15	security	security	NOUN
easat-4382	284	16	,	,	PUNCT
easat-4382	284	17	and	and	CCONJ
easat-4382	284	18	better	well	ADJ
easat-4382	284	19	alignment	alignment	NOUN
easat-4382	284	20	with	with	ADP
easat-4382	284	21	modern	modern	ADJ
easat-4382	284	22	best	good	ADJ
easat-4382	284	23	practices	practice	NOUN
easat-4382	284	24	for	for	ADP
easat-4382	284	25	kubernetes	kubernete	NOUN
easat-4382	284	26	security	security	NOUN
easat-4382	284	27	.	.	PUNCT
easat-4382	285	1	7.3	7.3	NUM
easat-4382	285	2	.	.	PUNCT
easat-4382	286	1	network	network	NOUN
easat-4382	286	2	policies	policy	NOUN
easat-4382	286	3	in	in	ADP
easat-4382	286	4	kubernetes	kubernete	NOUN
easat-4382	286	5	,	,	PUNCT
easat-4382	286	6	network	network	NOUN
easat-4382	286	7	policies	policy	NOUN
easat-4382	286	8	[	[	X
easat-4382	286	9	24	24	NUM
easat-4382	286	10	]	]	PUNCT
easat-4382	286	11	define	define	VERB
easat-4382	286	12	how	how	SCONJ
easat-4382	286	13	pods	pod	NOUN
easat-4382	286	14	can	can	AUX
easat-4382	286	15	communicate	communicate	VERB
easat-4382	286	16	with	with	ADP
easat-4382	286	17	each	each	DET
easat-4382	286	18	other	other	ADJ
easat-4382	286	19	and	and	CCONJ
easat-4382	286	20	external	external	ADJ
easat-4382	286	21	endpoints	endpoint	NOUN
easat-4382	286	22	,	,	PUNCT
easat-4382	286	23	effectively	effectively	ADV
easat-4382	286	24	implementing	implement	VERB
easat-4382	286	25	a	a	DET
easat-4382	286	26	firewall	firewall	ADJ
easat-4382	286	27	-	-	ADJ
easat-4382	286	28	like	like	ADJ
easat-4382	286	29	mechanism	mechanism	NOUN
easat-4382	286	30	at	at	ADP
easat-4382	286	31	the	the	DET
easat-4382	286	32	pod	pod	NOUN
easat-4382	286	33	level	level	NOUN
easat-4382	286	34	.	.	PUNCT
easat-4382	287	1	by	by	ADP
easat-4382	287	2	default	default	NOUN
easat-4382	287	3	,	,	PUNCT
easat-4382	287	4	many	many	ADJ
easat-4382	287	5	kubernetes	kubernete	NOUN
easat-4382	287	6	setups	setup	NOUN
easat-4382	287	7	allow	allow	VERB
easat-4382	287	8	all	all	DET
easat-4382	287	9	pods	pod	NOUN
easat-4382	287	10	to	to	PART
easat-4382	287	11	talk	talk	VERB
easat-4382	287	12	to	to	ADP
easat-4382	287	13	each	each	DET
easat-4382	287	14	other	other	ADJ
easat-4382	287	15	without	without	ADP
easat-4382	287	16	restriction	restriction	NOUN
easat-4382	287	17	;	;	PUNCT
easat-4382	287	18	network	network	NOUN
easat-4382	287	19	policies	policy	NOUN
easat-4382	287	20	enable	enable	VERB
easat-4382	287	21	administrators	administrator	NOUN
easat-4382	287	22	to	to	PART
easat-4382	287	23	lock	lock	VERB
easat-4382	287	24	this	this	PRON
easat-4382	287	25	down	down	ADP
easat-4382	287	26	and	and	CCONJ
easat-4382	287	27	adopt	adopt	VERB
easat-4382	287	28	a	a	DET
easat-4382	287	29	more	more	ADV
easat-4382	287	30	fine	fine	ADV
easat-4382	287	31	-	-	PUNCT
easat-4382	287	32	grained	grain	VERB
easat-4382	287	33	,	,	PUNCT
easat-4382	287	34	zero	zero	NUM
easat-4382	287	35	-	-	PUNCT
easat-4382	287	36	trust	trust	NOUN
easat-4382	287	37	approach	approach	NOUN
easat-4382	287	38	.	.	PUNCT
easat-4382	288	1	for	for	ADP
easat-4382	288	2	example	example	NOUN
easat-4382	288	3	,	,	PUNCT
easat-4382	288	4	a	a	DET
easat-4382	288	5	network	network	NOUN
easat-4382	288	6	policy	policy	NOUN
easat-4382	288	7	might	might	AUX
easat-4382	288	8	allow	allow	VERB
easat-4382	288	9	incoming	incoming	ADJ
easat-4382	288	10	traffic	traffic	NOUN
easat-4382	288	11	to	to	ADP
easat-4382	288	12	a	a	DET
easat-4382	288	13	“	"	PUNCT
easat-4382	288	14	backend	backend	NOUN
easat-4382	288	15	”	"	PUNCT
easat-4382	288	16	pod	pod	NOUN
easat-4382	288	17	only	only	ADV
easat-4382	288	18	from	from	ADP
easat-4382	288	19	pods	pod	NOUN
easat-4382	288	20	labeled	label	VERB
easat-4382	288	21	“	"	PUNCT
easat-4382	288	22	frontend	frontend	NOUN
easat-4382	288	23	,	,	PUNCT
easat-4382	288	24	”	"	PUNCT
easat-4382	288	25	blocking	block	VERB
easat-4382	288	26	all	all	DET
easat-4382	288	27	other	other	ADJ
easat-4382	288	28	traffic	traffic	NOUN
easat-4382	288	29	.	.	PUNCT
easat-4382	289	1	another	another	DET
easat-4382	289	2	policy	policy	NOUN
easat-4382	289	3	could	could	AUX
easat-4382	289	4	disallow	disallow	VERB
easat-4382	289	5	egress	egress	NOUN
easat-4382	289	6	from	from	ADP
easat-4382	289	7	certain	certain	ADJ
easat-4382	289	8	pods	pod	NOUN
easat-4382	289	9	to	to	ADP
easat-4382	289	10	external	external	ADJ
easat-4382	289	11	networks	network	NOUN
easat-4382	289	12	,	,	PUNCT
easat-4382	289	13	restricting	restrict	VERB
easat-4382	289	14	a	a	DET
easat-4382	289	15	sensitive	sensitive	ADJ
easat-4382	289	16	service	service	NOUN
easat-4382	289	17	’s	’s	PART
easat-4382	289	18	internet	internet	NOUN
easat-4382	289	19	access	access	NOUN
easat-4382	289	20	.	.	PUNCT
easat-4382	290	1	this	this	DET
easat-4382	290	2	capability	capability	NOUN
easat-4382	290	3	is	be	AUX
easat-4382	290	4	critical	critical	ADJ
easat-4382	290	5	for	for	ADP
easat-4382	290	6	a	a	DET
easat-4382	290	7	robust	robust	ADJ
easat-4382	290	8	kubernetes	kubernete	NOUN
easat-4382	290	9	security	security	NOUN
easat-4382	290	10	posture	posture	NOUN
easat-4382	290	11	,	,	PUNCT
easat-4382	290	12	as	as	SCONJ
easat-4382	290	13	it	it	PRON
easat-4382	290	14	prevents	prevent	VERB
easat-4382	290	15	lateral	lateral	ADJ
easat-4382	290	16	movement	movement	NOUN
easat-4382	290	17	by	by	ADP
easat-4382	290	18	attackers	attacker	NOUN
easat-4382	290	19	who	who	PRON
easat-4382	290	20	may	may	AUX
easat-4382	290	21	compromise	compromise	VERB
easat-4382	290	22	one	one	NUM
easat-4382	290	23	pod	pod	NOUN
easat-4382	290	24	and	and	CCONJ
easat-4382	290	25	attempt	attempt	VERB
easat-4382	290	26	to	to	PART
easat-4382	290	27	pivot	pivot	NOUN
easat-4382	290	28	to	to	ADP
easat-4382	290	29	other	other	ADJ
easat-4382	290	30	pods	pod	NOUN
easat-4382	290	31	or	or	CCONJ
easat-4382	290	32	services	service	NOUN
easat-4382	290	33	.	.	PUNCT
easat-4382	291	1	network	network	NOUN
easat-4382	291	2	policies	policy	NOUN
easat-4382	291	3	integrate	integrate	VERB
easat-4382	291	4	seamlessly	seamlessly	ADV
easat-4382	291	5	with	with	ADP
easat-4382	291	6	the	the	DET
easat-4382	291	7	underlying	underlie	VERB
easat-4382	291	8	container	container	NOUN
easat-4382	291	9	network	network	NOUN
easat-4382	291	10	interface	interface	NOUN
easat-4382	291	11	(	(	PUNCT
easat-4382	291	12	cni	cni	PROPN
easat-4382	291	13	)	)	PUNCT
easat-4382	291	14	plugins	plugin	NOUN
easat-4382	291	15	(	(	PUNCT
easat-4382	291	16	like	like	ADP
easat-4382	291	17	calico	calico	NOUN
easat-4382	291	18	or	or	CCONJ
easat-4382	291	19	cilium	cilium	NOUN
easat-4382	291	20	[	[	X
easat-4382	291	21	30	30	NUM
easat-4382	291	22	]	]	NUM
easat-4382	291	23	)	)	PUNCT
easat-4382	291	24	,	,	PUNCT
easat-4382	291	25	which	which	PRON
easat-4382	291	26	enforce	enforce	VERB
easat-4382	291	27	these	these	DET
easat-4382	291	28	rules	rule	NOUN
easat-4382	291	29	at	at	ADP
easat-4382	291	30	the	the	DET
easat-4382	291	31	1255	1255	NUM
easat-4382	291	32	edelweiss	edelweiss	PROPN
easat-4382	291	33	applied	apply	VERB
easat-4382	291	34	science	science	NOUN
easat-4382	291	35	and	and	CCONJ
easat-4382	291	36	technology	technology	NOUN
easat-4382	291	37	issn	issn	PROPN
easat-4382	291	38	:	:	PUNCT
easat-4382	291	39	2576	2576	NUM
easat-4382	291	40	-	-	SYM
easat-4382	291	41	8484	8484	NUM
easat-4382	291	42	vol	vol	NOUN
easat-4382	291	43	.	.	PROPN
easat-4382	292	1	9	9	NUM
easat-4382	292	2	,	,	PUNCT
easat-4382	292	3	no	no	INTJ
easat-4382	292	4	.	.	NOUN
easat-4382	292	5	1	1	NUM
easat-4382	292	6	:	:	PUNCT
easat-4382	292	7	1243	1243	NUM
easat-4382	292	8	-	-	SYM
easat-4382	292	9	1261	1261	NUM
easat-4382	292	10	,	,	PUNCT
easat-4382	292	11	2025	2025	NUM
easat-4382	292	12	doi	doi	NOUN
easat-4382	292	13	:	:	PUNCT
easat-4382	292	14	10.55214/25768484.v9i1.4382	10.55214/25768484.v9i1.4382	NUM
easat-4382	292	15	©	©	PROPN
easat-4382	292	16	2025	2025	NUM
easat-4382	292	17	by	by	ADP
easat-4382	292	18	the	the	DET
easat-4382	292	19	authors	author	NOUN
easat-4382	292	20	;	;	PUNCT
easat-4382	292	21	licensee	licensee	PROPN
easat-4382	292	22	learning	learn	VERB
easat-4382	292	23	gate	gate	NOUN
easat-4382	292	24	network	network	NOUN
easat-4382	292	25	layer	layer	NOUN
easat-4382	292	26	.	.	PUNCT
easat-4382	293	1	network	network	NOUN
easat-4382	293	2	policies	policy	NOUN
easat-4382	293	3	help	help	VERB
easat-4382	293	4	it	it	PRON
easat-4382	293	5	professionals	professional	NOUN
easat-4382	293	6	isolate	isolate	VERB
easat-4382	293	7	workloads	workload	NOUN
easat-4382	293	8	,	,	PUNCT
easat-4382	293	9	enforce	enforce	VERB
easat-4382	293	10	the	the	DET
easat-4382	293	11	least	least	ADJ
easat-4382	293	12	-	-	PUNCT
easat-4382	293	13	privilege	privilege	NOUN
easat-4382	293	14	communication	communication	NOUN
easat-4382	293	15	,	,	PUNCT
easat-4382	293	16	and	and	CCONJ
easat-4382	293	17	reduce	reduce	VERB
easat-4382	293	18	the	the	DET
easat-4382	293	19	attack	attack	NOUN
easat-4382	293	20	surface	surface	NOUN
easat-4382	293	21	in	in	ADP
easat-4382	293	22	dynamic	dynamic	ADJ
easat-4382	293	23	,	,	PUNCT
easat-4382	293	24	multi	multi	ADJ
easat-4382	293	25	-	-	NOUN
easat-4382	293	26	tenant	tenant	ADJ
easat-4382	293	27	kubernetes	kubernete	VERB
easat-4382	293	28	clusters	cluster	NOUN
easat-4382	293	29	.	.	PUNCT
easat-4382	294	1	7.4	7.4	NUM
easat-4382	294	2	.	.	PUNCT
easat-4382	295	1	the	the	DET
easat-4382	295	2	role	role	NOUN
easat-4382	295	3	of	of	ADP
easat-4382	295	4	service	service	NOUN
easat-4382	295	5	meshes	mesh	NOUN
easat-4382	295	6	in	in	ADP
easat-4382	295	7	security	security	NOUN
easat-4382	295	8	service	service	NOUN
easat-4382	295	9	meshes	mesh	NOUN
easat-4382	295	10	like	like	ADP
easat-4382	295	11	istio	istio	NOUN
easat-4382	295	12	[	[	X
easat-4382	295	13	31	31	NUM
easat-4382	295	14	]	]	PUNCT
easat-4382	295	15	and	and	CCONJ
easat-4382	295	16	linkerd	linkerd	NOUN
easat-4382	295	17	[	[	X
easat-4382	295	18	32	32	NUM
easat-4382	295	19	]	]	PUNCT
easat-4382	295	20	enhance	enhance	VERB
easat-4382	295	21	container	container	NOUN
easat-4382	295	22	security	security	NOUN
easat-4382	295	23	in	in	ADP
easat-4382	295	24	kubernetes	kubernete	NOUN
easat-4382	295	25	clusters	cluster	NOUN
easat-4382	295	26	by	by	ADP
easat-4382	295	27	providing	provide	VERB
easat-4382	295	28	a	a	DET
easat-4382	295	29	transparent	transparent	ADJ
easat-4382	295	30	layer	layer	NOUN
easat-4382	295	31	for	for	ADP
easat-4382	295	32	managing	manage	VERB
easat-4382	295	33	and	and	CCONJ
easat-4382	295	34	securing	secure	VERB
easat-4382	295	35	inter	inter	ADJ
easat-4382	295	36	-	-	ADJ
easat-4382	295	37	service	service	ADJ
easat-4382	295	38	communication	communication	NOUN
easat-4382	295	39	.	.	PUNCT
easat-4382	296	1	figure	figure	VERB
easat-4382	296	2	6	6	NUM
easat-4382	296	3	.	.	PUNCT
easat-4382	297	1	the	the	DET
easat-4382	297	2	istio	istio	PROPN
easat-4382	297	3	service	service	NOUN
easat-4382	297	4	mesh	mesh	NOUN
easat-4382	297	5	(	(	PUNCT
easat-4382	297	6	from	from	ADP
easat-4382	297	7	the	the	DET
easat-4382	297	8	istio	istio	NOUN
easat-4382	297	9	authors	author	NOUN
easat-4382	297	10	[	[	X
easat-4382	297	11	30	30	NUM
easat-4382	297	12	]	]	PUNCT
easat-4382	297	13	)	)	PUNCT
easat-4382	297	14	.	.	PUNCT
easat-4382	298	1	they	they	PRON
easat-4382	298	2	work	work	VERB
easat-4382	298	3	through	through	ADP
easat-4382	298	4	sidecar	sidecar	ADJ
easat-4382	298	5	proxies	proxy	NOUN
easat-4382	298	6	(	(	PUNCT
easat-4382	298	7	e.g.	e.g.	ADV
easat-4382	298	8	,	,	PUNCT
easat-4382	298	9	envoy	envoy	NOUN
easat-4382	298	10	or	or	CCONJ
easat-4382	298	11	linkerd	linkerd	NOUN
easat-4382	298	12	-	-	PUNCT
easat-4382	298	13	proxy	proxy	NOUN
easat-4382	298	14	)	)	PUNCT
easat-4382	298	15	injected	inject	VERB
easat-4382	298	16	into	into	ADP
easat-4382	298	17	each	each	DET
easat-4382	298	18	pod	pod	NOUN
easat-4382	298	19	,	,	PUNCT
easat-4382	298	20	automatically	automatically	ADV
easat-4382	298	21	encrypting	encrypt	VERB
easat-4382	298	22	traffic	traffic	NOUN
easat-4382	298	23	and	and	CCONJ
easat-4382	298	24	enforcing	enforce	VERB
easat-4382	298	25	policies	policy	NOUN
easat-4382	298	26	without	without	ADP
easat-4382	298	27	requiring	require	VERB
easat-4382	298	28	modification	modification	NOUN
easat-4382	298	29	to	to	ADP
easat-4382	298	30	the	the	DET
easat-4382	298	31	application	application	NOUN
easat-4382	298	32	code	code	NOUN
easat-4382	298	33	.	.	PUNCT
easat-4382	299	1	one	one	NUM
easat-4382	299	2	core	core	NOUN
easat-4382	299	3	feature	feature	NOUN
easat-4382	299	4	is	be	AUX
easat-4382	299	5	mutual	mutual	ADJ
easat-4382	299	6	tls	tls	NOUN
easat-4382	299	7	(	(	PUNCT
easat-4382	299	8	mls	mls	PROPN
easat-4382	299	9	)	)	PUNCT
easat-4382	299	10	,	,	PUNCT
easat-4382	299	11	which	which	PRON
easat-4382	299	12	ensures	ensure	VERB
easat-4382	299	13	both	both	DET
easat-4382	299	14	ends	end	NOUN
easat-4382	299	15	of	of	ADP
easat-4382	299	16	a	a	DET
easat-4382	299	17	connection	connection	NOUN
easat-4382	299	18	authenticate	authenticate	NOUN
easat-4382	299	19	each	each	DET
easat-4382	299	20	other	other	ADJ
easat-4382	299	21	,	,	PUNCT
easat-4382	299	22	and	and	CCONJ
easat-4382	299	23	all	all	DET
easat-4382	299	24	data	datum	NOUN
easat-4382	299	25	in	in	ADP
easat-4382	299	26	transit	transit	NOUN
easat-4382	299	27	is	be	AUX
easat-4382	299	28	encrypted	encrypt	VERB
easat-4382	299	29	,	,	PUNCT
easat-4382	299	30	significantly	significantly	ADV
easat-4382	299	31	reducing	reduce	VERB
easat-4382	299	32	the	the	DET
easat-4382	299	33	risk	risk	NOUN
easat-4382	299	34	of	of	ADP
easat-4382	299	35	eavesdropping	eavesdropping	NOUN
easat-4382	299	36	or	or	CCONJ
easat-4382	299	37	tampering	tampering	NOUN
easat-4382	299	38	.	.	PUNCT
easat-4382	300	1	furthermore	furthermore	ADV
easat-4382	300	2	,	,	PUNCT
easat-4382	300	3	service	service	NOUN
easat-4382	300	4	meshes	mesh	NOUN
easat-4382	300	5	enable	enable	VERB
easat-4382	300	6	fine	fine	ADV
easat-4382	300	7	-	-	PUNCT
easat-4382	300	8	grained	grain	VERB
easat-4382	300	9	policy	policy	NOUN
easat-4382	300	10	enforcement	enforcement	NOUN
easat-4382	300	11	,	,	PUNCT
easat-4382	300	12	allowing	allow	VERB
easat-4382	300	13	only	only	ADJ
easat-4382	300	14	specific	specific	ADJ
easat-4382	300	15	services	service	NOUN
easat-4382	300	16	to	to	PART
easat-4382	300	17	communicate	communicate	VERB
easat-4382	300	18	or	or	CCONJ
easat-4382	300	19	setting	set	VERB
easat-4382	300	20	rate	rate	NOUN
easat-4382	300	21	limits	limit	NOUN
easat-4382	300	22	to	to	PART
easat-4382	300	23	mitigate	mitigate	VERB
easat-4382	300	24	denial	denial	NOUN
easat-4382	300	25	of	of	ADP
easat-4382	300	26	service	service	NOUN
easat-4382	300	27	(	(	PUNCT
easat-4382	300	28	dos	do	NOUN
easat-4382	300	29	)	)	PUNCT
easat-4382	300	30	attacks	attack	NOUN
easat-4382	300	31	.	.	PUNCT
easat-4382	301	1	they	they	PRON
easat-4382	301	2	also	also	ADV
easat-4382	301	3	offer	offer	VERB
easat-4382	301	4	powerful	powerful	ADJ
easat-4382	301	5	observability	observability	NOUN
easat-4382	301	6	features	feature	NOUN
easat-4382	301	7	by	by	ADP
easat-4382	301	8	collecting	collect	VERB
easat-4382	301	9	metrics	metric	NOUN
easat-4382	301	10	,	,	PUNCT
easat-4382	301	11	logs	log	NOUN
easat-4382	301	12	,	,	PUNCT
easat-4382	301	13	and	and	CCONJ
easat-4382	301	14	traces	trace	NOUN
easat-4382	301	15	at	at	ADP
easat-4382	301	16	the	the	DET
easat-4382	301	17	proxy	proxy	ADJ
easat-4382	301	18	layer	layer	NOUN
easat-4382	301	19	,	,	PUNCT
easat-4382	301	20	giving	give	VERB
easat-4382	301	21	it	it	PRON
easat-4382	301	22	professionals	professional	NOUN
easat-4382	301	23	deep	deep	ADJ
easat-4382	301	24	insights	insight	NOUN
easat-4382	301	25	into	into	ADP
easat-4382	301	26	traffic	traffic	NOUN
easat-4382	301	27	flows	flow	NOUN
easat-4382	301	28	,	,	PUNCT
easat-4382	301	29	performance	performance	NOUN
easat-4382	301	30	bottlenecks	bottleneck	NOUN
easat-4382	301	31	,	,	PUNCT
easat-4382	301	32	and	and	CCONJ
easat-4382	301	33	potential	potential	ADJ
easat-4382	301	34	security	security	NOUN
easat-4382	301	35	issues	issue	NOUN
easat-4382	301	36	.	.	PUNCT
easat-4382	302	1	for	for	ADP
easat-4382	302	2	example	example	NOUN
easat-4382	302	3	,	,	PUNCT
easat-4382	302	4	istio	istio	PROPN
easat-4382	302	5	’s	’s	PART
easat-4382	302	6	policy	policy	NOUN
easat-4382	302	7	engine	engine	NOUN
easat-4382	302	8	allows	allow	VERB
easat-4382	302	9	custom	custom	NOUN
easat-4382	302	10	authorization	authorization	NOUN
easat-4382	302	11	rules	rule	NOUN
easat-4382	302	12	based	base	VERB
easat-4382	302	13	on	on	ADP
easat-4382	302	14	attributes	attribute	NOUN
easat-4382	302	15	like	like	ADP
easat-4382	302	16	source	source	NOUN
easat-4382	302	17	,	,	PUNCT
easat-4382	302	18	destination	destination	NOUN
easat-4382	302	19	,	,	PUNCT
easat-4382	302	20	and	and	CCONJ
easat-4382	302	21	request	request	NOUN
easat-4382	302	22	method	method	NOUN
easat-4382	302	23	.	.	PUNCT
easat-4382	303	1	at	at	ADP
easat-4382	303	2	the	the	DET
easat-4382	303	3	same	same	ADJ
easat-4382	303	4	time	time	NOUN
easat-4382	303	5	,	,	PUNCT
easat-4382	303	6	linkerd	linkerd	NOUN
easat-4382	303	7	’s	’s	PART
easat-4382	303	8	“	"	PUNCT
easat-4382	303	9	automatic	automatic	ADJ
easat-4382	303	10	tls	tls	NOUN
easat-4382	303	11	”	"	PUNCT
easat-4382	303	12	can	can	AUX
easat-4382	303	13	secure	secure	VERB
easat-4382	303	14	inter	inter	ADJ
easat-4382	303	15	-	-	ADJ
easat-4382	303	16	pod	pod	ADJ
easat-4382	303	17	traffic	traffic	NOUN
easat-4382	303	18	even	even	ADV
easat-4382	303	19	if	if	SCONJ
easat-4382	303	20	applications	application	NOUN
easat-4382	303	21	are	be	AUX
easat-4382	303	22	not	not	PART
easat-4382	303	23	explicitly	explicitly	ADV
easat-4382	303	24	configured	configure	VERB
easat-4382	303	25	for	for	ADP
easat-4382	303	26	tls	tls	PROPN
easat-4382	303	27	.	.	PUNCT
easat-4382	304	1	by	by	ADP
easat-4382	304	2	centralizing	centralize	VERB
easat-4382	304	3	and	and	CCONJ
easat-4382	304	4	automating	automate	VERB
easat-4382	304	5	these	these	DET
easat-4382	304	6	capabilities	capability	NOUN
easat-4382	304	7	,	,	PUNCT
easat-4382	304	8	service	service	NOUN
easat-4382	304	9	meshes	mesh	NOUN
easat-4382	304	10	streamline	streamline	VERB
easat-4382	304	11	the	the	DET
easat-4382	304	12	adoption	adoption	NOUN
easat-4382	304	13	of	of	ADP
easat-4382	304	14	best	good	ADJ
easat-4382	304	15	practices	practice	NOUN
easat-4382	304	16	and	and	CCONJ
easat-4382	304	17	bolster	bolster	VERB
easat-4382	304	18	the	the	DET
easat-4382	304	19	overall	overall	ADJ
easat-4382	304	20	security	security	NOUN
easat-4382	304	21	posture	posture	NOUN
easat-4382	304	22	of	of	ADP
easat-4382	304	23	containerized	containerize	VERB
easat-4382	304	24	microservices	microservice	NOUN
easat-4382	304	25	environments	environment	NOUN
easat-4382	304	26	.	.	PUNCT
easat-4382	305	1	1256	1256	NUM
easat-4382	305	2	edelweiss	edelweiss	PROPN
easat-4382	305	3	applied	apply	VERB
easat-4382	305	4	science	science	NOUN
easat-4382	305	5	and	and	CCONJ
easat-4382	305	6	technology	technology	NOUN
easat-4382	305	7	issn	issn	PROPN
easat-4382	305	8	:	:	PUNCT
easat-4382	305	9	2576	2576	NUM
easat-4382	305	10	-	-	SYM
easat-4382	305	11	8484	8484	NUM
easat-4382	305	12	vol	vol	NOUN
easat-4382	305	13	.	.	PROPN
easat-4382	306	1	9	9	NUM
easat-4382	306	2	,	,	PUNCT
easat-4382	306	3	no	no	INTJ
easat-4382	306	4	.	.	NOUN
easat-4382	306	5	1	1	NUM
easat-4382	306	6	:	:	PUNCT
easat-4382	306	7	1243	1243	NUM
easat-4382	306	8	-	-	SYM
easat-4382	306	9	1261	1261	NUM
easat-4382	306	10	,	,	PUNCT
easat-4382	306	11	2025	2025	NUM
easat-4382	306	12	doi	doi	NOUN
easat-4382	306	13	:	:	PUNCT
easat-4382	306	14	10.55214/25768484.v9i1.4382	10.55214/25768484.v9i1.4382	NUM
easat-4382	306	15	©	©	PROPN
easat-4382	306	16	2025	2025	NUM
easat-4382	306	17	by	by	ADP
easat-4382	306	18	the	the	DET
easat-4382	306	19	authors	author	NOUN
easat-4382	306	20	;	;	PUNCT
easat-4382	306	21	licensee	licensee	PROPN
easat-4382	306	22	learning	learning	NOUN
easat-4382	306	23	gate	gate	NOUN
easat-4382	306	24	8	8	NUM
easat-4382	306	25	.	.	PUNCT
easat-4382	307	1	security	security	NOUN
easat-4382	307	2	best	good	ADJ
easat-4382	307	3	practices	practice	NOUN
easat-4382	307	4	in	in	ADP
easat-4382	307	5	container	container	NOUN
easat-4382	307	6	development	development	NOUN
easat-4382	307	7	best	good	ADJ
easat-4382	307	8	practice	practice	NOUN
easat-4382	307	9	methodologies	methodology	NOUN
easat-4382	307	10	for	for	ADP
easat-4382	307	11	container	container	NOUN
easat-4382	307	12	development	development	NOUN
easat-4382	307	13	are	be	AUX
easat-4382	307	14	crucial	crucial	ADJ
easat-4382	307	15	for	for	ADP
easat-4382	307	16	constructing	construct	VERB
easat-4382	307	17	secure	secure	ADJ
easat-4382	307	18	,	,	PUNCT
easat-4382	307	19	dependable	dependable	ADJ
easat-4382	307	20	,	,	PUNCT
easat-4382	307	21	and	and	CCONJ
easat-4382	307	22	efficient	efficient	ADJ
easat-4382	307	23	containerized	containerized	ADJ
easat-4382	307	24	applications	application	NOUN
easat-4382	307	25	.	.	PUNCT
easat-4382	308	1	containers	container	NOUN
easat-4382	308	2	facilitate	facilitate	VERB
easat-4382	308	3	development	development	NOUN
easat-4382	308	4	and	and	CCONJ
easat-4382	308	5	deployment	deployment	NOUN
easat-4382	308	6	;	;	PUNCT
easat-4382	308	7	nonetheless	nonetheless	ADV
easat-4382	308	8	,	,	PUNCT
easat-4382	308	9	their	their	PRON
easat-4382	308	10	dynamic	dynamic	ADJ
easat-4382	308	11	characteristics	characteristic	NOUN
easat-4382	308	12	require	require	VERB
easat-4382	308	13	meticulous	meticulous	ADJ
easat-4382	308	14	consideration	consideration	NOUN
easat-4382	308	15	of	of	ADP
easat-4382	308	16	security	security	NOUN
easat-4382	308	17	and	and	CCONJ
easat-4382	308	18	operating	operating	NOUN
easat-4382	308	19	measures	measure	NOUN
easat-4382	308	20	.	.	PUNCT
easat-4382	309	1	a	a	DET
easat-4382	309	2	crucial	crucial	ADJ
easat-4382	309	3	approach	approach	NOUN
easat-4382	309	4	is	be	AUX
easat-4382	309	5	shift	shift	NOUN
easat-4382	309	6	-	-	PUNCT
easat-4382	309	7	left	leave	VERB
easat-4382	309	8	security	security	NOUN
easat-4382	309	9	,	,	PUNCT
easat-4382	309	10	which	which	PRON
easat-4382	309	11	involves	involve	VERB
easat-4382	309	12	including	include	VERB
easat-4382	309	13	security	security	NOUN
easat-4382	309	14	measures	measure	NOUN
easat-4382	309	15	early	early	ADV
easat-4382	309	16	in	in	ADP
easat-4382	309	17	the	the	DET
easat-4382	309	18	development	development	NOUN
easat-4382	309	19	process	process	NOUN
easat-4382	309	20	to	to	PART
easat-4382	309	21	detect	detect	VERB
easat-4382	309	22	and	and	CCONJ
easat-4382	309	23	mitigate	mitigate	VERB
easat-4382	309	24	vulnerabilities	vulnerability	NOUN
easat-4382	309	25	before	before	ADP
easat-4382	309	26	release	release	NOUN
easat-4382	309	27	.	.	PUNCT
easat-4382	310	1	automated	automate	VERB
easat-4382	310	2	testing	testing	NOUN
easat-4382	310	3	and	and	CCONJ
easat-4382	310	4	scanning	scanning	NOUN
easat-4382	310	5	are	be	AUX
easat-4382	310	6	similarly	similarly	ADV
easat-4382	310	7	essential	essential	ADJ
easat-4382	310	8	,	,	PUNCT
easat-4382	310	9	facilitating	facilitate	VERB
easat-4382	310	10	ongoing	ongoing	ADJ
easat-4382	310	11	surveillance	surveillance	NOUN
easat-4382	310	12	of	of	ADP
easat-4382	310	13	container	container	NOUN
easat-4382	310	14	images	image	NOUN
easat-4382	310	15	and	and	CCONJ
easat-4382	310	16	configurations	configuration	NOUN
easat-4382	310	17	for	for	ADP
easat-4382	310	18	security	security	NOUN
easat-4382	310	19	vulnerabilities	vulnerability	NOUN
easat-4382	310	20	and	and	CCONJ
easat-4382	310	21	compliance	compliance	NOUN
easat-4382	310	22	breaches	breach	NOUN
easat-4382	310	23	.	.	PUNCT
easat-4382	311	1	consistent	consistent	ADJ
easat-4382	311	2	patch	patch	NOUN
easat-4382	311	3	management	management	NOUN
easat-4382	311	4	ensures	ensure	VERB
easat-4382	311	5	that	that	SCONJ
easat-4382	311	6	base	base	NOUN
easat-4382	311	7	images	image	NOUN
easat-4382	311	8	and	and	CCONJ
easat-4382	311	9	dependencies	dependency	NOUN
easat-4382	311	10	remain	remain	VERB
easat-4382	311	11	current	current	ADJ
easat-4382	311	12	,	,	PUNCT
easat-4382	311	13	mitigating	mitigate	VERB
easat-4382	311	14	exploitation	exploitation	NOUN
easat-4382	311	15	risk	risk	NOUN
easat-4382	311	16	.	.	PUNCT
easat-4382	312	1	furthermore	furthermore	ADV
easat-4382	312	2	,	,	PUNCT
easat-4382	312	3	implementing	implement	VERB
easat-4382	312	4	immutable	immutable	ADJ
easat-4382	312	5	infrastructure	infrastructure	NOUN
easat-4382	312	6	—	—	PUNCT
easat-4382	312	7	where	where	SCONJ
easat-4382	312	8	containers	container	NOUN
easat-4382	312	9	are	be	AUX
easat-4382	312	10	substituted	substitute	VERB
easat-4382	312	11	rather	rather	ADV
easat-4382	312	12	than	than	ADP
easat-4382	312	13	altered	alter	VERB
easat-4382	312	14	—	—	PUNCT
easat-4382	312	15	guarantees	guarantee	VERB
easat-4382	312	16	uniformity	uniformity	NOUN
easat-4382	312	17	reduces	reduce	VERB
easat-4382	312	18	drift	drift	NOUN
easat-4382	312	19	,	,	PUNCT
easat-4382	312	20	and	and	CCONJ
easat-4382	312	21	streamlines	streamlines	NOUN
easat-4382	312	22	troubleshooting	troubleshooting	NOUN
easat-4382	312	23	.	.	PUNCT
easat-4382	313	1	by	by	ADP
easat-4382	313	2	adhering	adhere	VERB
easat-4382	313	3	to	to	ADP
easat-4382	313	4	these	these	DET
easat-4382	313	5	guidelines	guideline	NOUN
easat-4382	313	6	,	,	PUNCT
easat-4382	313	7	developers	developer	NOUN
easat-4382	313	8	can	can	AUX
easat-4382	313	9	construct	construct	VERB
easat-4382	313	10	resilient	resilient	ADJ
easat-4382	313	11	,	,	PUNCT
easat-4382	313	12	scalable	scalable	ADJ
easat-4382	313	13	,	,	PUNCT
easat-4382	313	14	and	and	CCONJ
easat-4382	313	15	secure	secure	VERB
easat-4382	313	16	containerized	containerized	ADJ
easat-4382	313	17	applications	application	NOUN
easat-4382	313	18	that	that	PRON
easat-4382	313	19	conform	conform	VERB
easat-4382	313	20	to	to	ADP
easat-4382	313	21	contemporary	contemporary	ADJ
easat-4382	313	22	devops	devop	NOUN
easat-4382	313	23	procedures	procedure	NOUN
easat-4382	313	24	.	.	PUNCT
easat-4382	314	1	8.1	8.1	NUM
easat-4382	314	2	.	.	PUNCT
easat-4382	315	1	shift	shift	NOUN
easat-4382	315	2	-	-	PUNCT
easat-4382	315	3	left	leave	VERB
easat-4382	315	4	security	security	NOUN
easat-4382	315	5	shift	shift	NOUN
easat-4382	315	6	-	-	PUNCT
easat-4382	315	7	left	leave	VERB
easat-4382	315	8	security	security	NOUN
easat-4382	315	9	[	[	X
easat-4382	315	10	33	33	NUM
easat-4382	315	11	]	]	PUNCT
easat-4382	315	12	in	in	ADP
easat-4382	315	13	container	container	NOUN
easat-4382	315	14	development	development	NOUN
easat-4382	315	15	emphasizes	emphasize	VERB
easat-4382	315	16	embedding	embed	VERB
easat-4382	315	17	security	security	NOUN
easat-4382	315	18	checks	check	NOUN
easat-4382	315	19	and	and	CCONJ
easat-4382	315	20	measures	measure	NOUN
easat-4382	315	21	as	as	ADV
easat-4382	315	22	early	early	ADV
easat-4382	315	23	as	as	ADP
easat-4382	315	24	possible	possible	ADJ
easat-4382	315	25	in	in	ADP
easat-4382	315	26	the	the	DET
easat-4382	315	27	software	software	NOUN
easat-4382	315	28	development	development	NOUN
easat-4382	315	29	lifecycle	lifecycle	NOUN
easat-4382	315	30	(	(	PUNCT
easat-4382	315	31	sdlc	sdlc	PROPN
easat-4382	315	32	)	)	PUNCT
easat-4382	315	33	rather	rather	ADV
easat-4382	315	34	than	than	ADP
easat-4382	315	35	forcing	force	VERB
easat-4382	315	36	them	they	PRON
easat-4382	315	37	on	on	ADP
easat-4382	315	38	at	at	ADP
easat-4382	315	39	the	the	DET
easat-4382	315	40	end	end	NOUN
easat-4382	315	41	.	.	PUNCT
easat-4382	316	1	this	this	DET
easat-4382	316	2	approach	approach	NOUN
easat-4382	316	3	,	,	PUNCT
easat-4382	316	4	often	often	ADV
easat-4382	316	5	called	call	VERB
easat-4382	316	6	devsecops	devsecop	NOUN
easat-4382	316	7	,	,	PUNCT
easat-4382	316	8	aims	aim	VERB
easat-4382	316	9	to	to	PART
easat-4382	316	10	detect	detect	VERB
easat-4382	316	11	and	and	CCONJ
easat-4382	316	12	fix	fix	VERB
easat-4382	316	13	vulnerabilities	vulnerability	NOUN
easat-4382	316	14	before	before	SCONJ
easat-4382	316	15	they	they	PRON
easat-4382	316	16	become	become	VERB
easat-4382	316	17	production	production	NOUN
easat-4382	316	18	.	.	PUNCT
easat-4382	317	1	for	for	ADP
easat-4382	317	2	instance	instance	NOUN
easat-4382	317	3	,	,	PUNCT
easat-4382	317	4	developers	developer	NOUN
easat-4382	317	5	can	can	AUX
easat-4382	317	6	incorporate	incorporate	VERB
easat-4382	317	7	container	container	NOUN
easat-4382	317	8	image	image	NOUN
easat-4382	317	9	scanning	scanning	NOUN
easat-4382	317	10	(	(	PUNCT
easat-4382	317	11	e.g.	e.g.	ADV
easat-4382	317	12	,	,	PUNCT
easat-4382	317	13	using	use	VERB
easat-4382	317	14	clair	clair	NOUN
easat-4382	318	1	[	[	X
easat-4382	318	2	21	21	NUM
easat-4382	318	3	]	]	X
easat-4382	318	4	;	;	PUNCT
easat-4382	318	5	trivy	trivy	PROPN
easat-4382	319	1	[	[	X
easat-4382	319	2	34	34	NUM
easat-4382	319	3	]	]	PUNCT
easat-4382	319	4	or	or	CCONJ
easat-4382	319	5	snyk	snyk	X
easat-4382	319	6	[	[	X
easat-4382	319	7	20	20	NUM
easat-4382	319	8	]	]	PUNCT
easat-4382	319	9	)	)	PUNCT
easat-4382	319	10	directly	directly	ADV
easat-4382	319	11	into	into	ADP
easat-4382	319	12	their	their	PRON
easat-4382	319	13	ci	ci	NOUN
easat-4382	319	14	/	/	SYM
easat-4382	319	15	cd	cd	NOUN
easat-4382	319	16	pipelines	pipeline	NOUN
easat-4382	319	17	.	.	PUNCT
easat-4382	320	1	when	when	SCONJ
easat-4382	320	2	a	a	DET
easat-4382	320	3	developer	developer	NOUN
easat-4382	320	4	commits	commit	VERB
easat-4382	320	5	code	code	NOUN
easat-4382	320	6	,	,	PUNCT
easat-4382	320	7	automated	automate	VERB
easat-4382	320	8	jobs	job	NOUN
easat-4382	320	9	run	run	VERB
easat-4382	320	10	to	to	PART
easat-4382	320	11	check	check	VERB
easat-4382	320	12	for	for	ADP
easat-4382	320	13	known	known	ADJ
easat-4382	320	14	cves	cf	NOUN
easat-4382	320	15	,	,	PUNCT
easat-4382	320	16	outdated	outdated	ADJ
easat-4382	320	17	libraries	library	NOUN
easat-4382	320	18	,	,	PUNCT
easat-4382	320	19	or	or	CCONJ
easat-4382	320	20	insecure	insecure	ADJ
easat-4382	320	21	configurations	configuration	NOUN
easat-4382	320	22	in	in	ADP
easat-4382	320	23	the	the	DET
easat-4382	320	24	image	image	NOUN
easat-4382	320	25	.	.	PUNCT
easat-4382	321	1	if	if	SCONJ
easat-4382	321	2	any	any	DET
easat-4382	321	3	issues	issue	NOUN
easat-4382	321	4	are	be	AUX
easat-4382	321	5	found	find	VERB
easat-4382	321	6	,	,	PUNCT
easat-4382	321	7	the	the	DET
easat-4382	321	8	pipeline	pipeline	NOUN
easat-4382	321	9	can	can	AUX
easat-4382	321	10	automatically	automatically	ADV
easat-4382	321	11	fail	fail	VERB
easat-4382	321	12	or	or	CCONJ
easat-4382	321	13	notify	notify	VERB
easat-4382	321	14	the	the	DET
easat-4382	321	15	relevant	relevant	ADJ
easat-4382	321	16	team	team	NOUN
easat-4382	321	17	,	,	PUNCT
easat-4382	321	18	prompting	prompt	VERB
easat-4382	321	19	quick	quick	ADJ
easat-4382	321	20	remediation	remediation	NOUN
easat-4382	321	21	.	.	PUNCT
easat-4382	322	1	this	this	DET
easat-4382	322	2	proactive	proactive	ADJ
easat-4382	322	3	strategy	strategy	NOUN
easat-4382	322	4	reduces	reduce	VERB
easat-4382	322	5	the	the	DET
easat-4382	322	6	time	time	NOUN
easat-4382	322	7	and	and	CCONJ
easat-4382	322	8	cost	cost	NOUN
easat-4382	322	9	of	of	ADP
easat-4382	322	10	patching	patch	VERB
easat-4382	322	11	vulnerabilities	vulnerability	NOUN
easat-4382	322	12	late	late	ADV
easat-4382	322	13	in	in	ADP
easat-4382	322	14	the	the	DET
easat-4382	322	15	development	development	NOUN
easat-4382	322	16	cycle	cycle	NOUN
easat-4382	322	17	.	.	PUNCT
easat-4382	323	1	to	to	PART
easat-4382	323	2	implement	implement	VERB
easat-4382	323	3	shift	shift	NOUN
easat-4382	323	4	-	-	PUNCT
easat-4382	323	5	left	leave	VERB
easat-4382	323	6	security	security	NOUN
easat-4382	323	7	,	,	PUNCT
easat-4382	323	8	it	it	PRON
easat-4382	323	9	professionals	professional	NOUN
easat-4382	323	10	can	can	AUX
easat-4382	323	11	define	define	VERB
easat-4382	323	12	policy	policy	NOUN
easat-4382	323	13	-	-	PUNCT
easat-4382	323	14	as	as	ADP
easat-4382	323	15	-	-	PUNCT
easat-4382	323	16	code	code	NOUN
easat-4382	323	17	rules	rule	NOUN
easat-4382	323	18	that	that	PRON
easat-4382	323	19	govern	govern	VERB
easat-4382	323	20	everything	everything	PRON
easat-4382	323	21	from	from	ADP
easat-4382	323	22	allowed	allow	VERB
easat-4382	323	23	base	base	NOUN
easat-4382	323	24	images	image	NOUN
easat-4382	323	25	to	to	ADP
easat-4382	323	26	required	require	VERB
easat-4382	323	27	security	security	NOUN
easat-4382	323	28	tests	test	NOUN
easat-4382	323	29	.	.	PUNCT
easat-4382	324	1	a	a	DET
easat-4382	324	2	ci	ci	NOUN
easat-4382	324	3	/	/	SYM
easat-4382	324	4	cd	cd	NOUN
easat-4382	324	5	platform	platform	NOUN
easat-4382	324	6	(	(	PUNCT
easat-4382	324	7	e.g.	e.g.	ADV
easat-4382	324	8	,	,	PUNCT
easat-4382	324	9	jenkins	jenkin	NOUN
easat-4382	324	10	[	[	X
easat-4382	324	11	35	35	NUM
easat-4382	324	12	]	]	X
easat-4382	324	13	gitlab	gitlab	PROPN
easat-4382	324	14	ci	ci	PROPN
easat-4382	325	1	[	[	X
easat-4382	325	2	36	36	NUM
easat-4382	325	3	]	]	PUNCT
easat-4382	325	4	github	github	PROPN
easat-4382	325	5	actions	action	NOUN
easat-4382	325	6	[	[	X
easat-4382	325	7	37	37	NUM
easat-4382	325	8	]	]	PUNCT
easat-4382	325	9	)	)	PUNCT
easat-4382	325	10	then	then	ADV
easat-4382	325	11	enforces	enforce	VERB
easat-4382	325	12	these	these	DET
easat-4382	325	13	rules	rule	NOUN
easat-4382	325	14	at	at	ADP
easat-4382	325	15	each	each	DET
easat-4382	325	16	stage	stage	NOUN
easat-4382	325	17	of	of	ADP
easat-4382	325	18	the	the	DET
easat-4382	325	19	build	build	NOUN
easat-4382	325	20	process	process	NOUN
easat-4382	325	21	.	.	PUNCT
easat-4382	326	1	for	for	ADP
easat-4382	326	2	example	example	NOUN
easat-4382	326	3	,	,	PUNCT
easat-4382	326	4	if	if	SCONJ
easat-4382	326	5	an	an	DET
easat-4382	326	6	image	image	NOUN
easat-4382	326	7	fails	fail	VERB
easat-4382	326	8	a	a	DET
easat-4382	326	9	vulnerability	vulnerability	NOUN
easat-4382	326	10	scan	scan	NOUN
easat-4382	326	11	or	or	CCONJ
easat-4382	326	12	any	any	DET
easat-4382	326	13	dependencies	dependency	NOUN
easat-4382	326	14	are	be	AUX
easat-4382	326	15	out	out	ADP
easat-4382	326	16	of	of	ADP
easat-4382	326	17	compliance	compliance	NOUN
easat-4382	326	18	,	,	PUNCT
easat-4382	326	19	the	the	DET
easat-4382	326	20	pipeline	pipeline	NOUN
easat-4382	326	21	will	will	AUX
easat-4382	326	22	stop	stop	VERB
easat-4382	326	23	,	,	PUNCT
easat-4382	326	24	preventing	prevent	VERB
easat-4382	326	25	the	the	DET
easat-4382	326	26	insecure	insecure	ADJ
easat-4382	326	27	container	container	NOUN
easat-4382	326	28	from	from	ADP
easat-4382	326	29	progressing	progress	VERB
easat-4382	326	30	to	to	ADP
easat-4382	326	31	later	later	ADJ
easat-4382	326	32	stages	stage	NOUN
easat-4382	326	33	.	.	PUNCT
easat-4382	327	1	integration	integration	NOUN
easat-4382	327	2	with	with	ADP
easat-4382	327	3	container	container	NOUN
easat-4382	327	4	registries	registry	NOUN
easat-4382	327	5	also	also	ADV
easat-4382	327	6	helps	help	VERB
easat-4382	327	7	automate	automate	VERB
easat-4382	327	8	the	the	DET
easat-4382	327	9	promotion	promotion	NOUN
easat-4382	327	10	or	or	CCONJ
easat-4382	327	11	rollback	rollback	NOUN
easat-4382	327	12	of	of	ADP
easat-4382	327	13	images	image	NOUN
easat-4382	327	14	based	base	VERB
easat-4382	327	15	on	on	ADP
easat-4382	327	16	scan	scan	ADJ
easat-4382	327	17	results	result	NOUN
easat-4382	327	18	.	.	PUNCT
easat-4382	328	1	moreover	moreover	ADV
easat-4382	328	2	,	,	PUNCT
easat-4382	328	3	hooking	hook	VERB
easat-4382	328	4	into	into	ADP
easat-4382	328	5	developer	developer	NOUN
easat-4382	328	6	tools	tool	NOUN
easat-4382	328	7	like	like	ADP
easat-4382	328	8	ide	ide	NOUN
easat-4382	328	9	plugins	plugin	NOUN
easat-4382	328	10	or	or	CCONJ
easat-4382	328	11	pre	pre	ADJ
easat-4382	328	12	-	-	ADJ
easat-4382	328	13	commit	commit	ADJ
easat-4382	328	14	hooks	hook	NOUN
easat-4382	328	15	can	can	AUX
easat-4382	328	16	catch	catch	VERB
easat-4382	328	17	basic	basic	ADJ
easat-4382	328	18	misconfigurations	misconfiguration	NOUN
easat-4382	328	19	(	(	PUNCT
easat-4382	328	20	e.g.	e.g.	ADV
easat-4382	328	21	,	,	PUNCT
easat-4382	328	22	api	api	NOUN
easat-4382	328	23	keys	key	NOUN
easat-4382	328	24	or	or	CCONJ
easat-4382	328	25	passwords	password	NOUN
easat-4382	328	26	present	present	ADJ
easat-4382	328	27	in	in	ADP
easat-4382	328	28	plain	plain	ADJ
easat-4382	328	29	text	text	NOUN
easat-4382	328	30	)	)	PUNCT
easat-4382	328	31	before	before	SCONJ
easat-4382	328	32	they	they	PRON
easat-4382	328	33	even	even	ADV
easat-4382	328	34	hit	hit	VERB
easat-4382	328	35	the	the	DET
easat-4382	328	36	repository	repository	NOUN
easat-4382	328	37	.	.	PUNCT
easat-4382	329	1	shift	shift	NOUN
easat-4382	329	2	-	-	PUNCT
easat-4382	329	3	left	leave	VERB
easat-4382	329	4	security	security	NOUN
easat-4382	329	5	ensures	ensure	VERB
easat-4382	329	6	containers	container	NOUN
easat-4382	329	7	remain	remain	VERB
easat-4382	329	8	secure	secure	ADJ
easat-4382	329	9	,	,	PUNCT
easat-4382	329	10	efficient	efficient	ADJ
easat-4382	329	11	,	,	PUNCT
easat-4382	329	12	and	and	CCONJ
easat-4382	329	13	compliant	compliant	ADJ
easat-4382	329	14	throughout	throughout	ADP
easat-4382	329	15	their	their	PRON
easat-4382	329	16	lifecycle	lifecycle	NOUN
easat-4382	329	17	by	by	ADP
easat-4382	329	18	embedding	embed	VERB
easat-4382	329	19	security	security	NOUN
easat-4382	329	20	controls	control	NOUN
easat-4382	329	21	at	at	ADP
easat-4382	329	22	every	every	DET
easat-4382	329	23	stepfrom	stepfrom	PROPN
easat-4382	329	24	code	code	NOUN
easat-4382	329	25	commit	commit	VERB
easat-4382	329	26	to	to	ADP
easat-4382	329	27	production	production	NOUN
easat-4382	329	28	deployment	deployment	NOUN
easat-4382	329	29	.	.	PUNCT
easat-4382	330	1	8.2	8.2	NUM
easat-4382	330	2	.	.	PUNCT
easat-4382	330	3	automated	automate	VERB
easat-4382	330	4	testing	testing	NOUN
easat-4382	330	5	and	and	CCONJ
easat-4382	330	6	scanning	scan	VERB
easat-4382	330	7	automated	automate	VERB
easat-4382	330	8	testing	testing	NOUN
easat-4382	330	9	and	and	CCONJ
easat-4382	330	10	scanning	scan	VERB
easat-4382	330	11	for	for	ADP
easat-4382	330	12	container	container	NOUN
easat-4382	330	13	security	security	NOUN
easat-4382	330	14	include	include	VERB
easat-4382	330	15	three	three	NUM
easat-4382	330	16	main	main	ADJ
easat-4382	330	17	parts	part	NOUN
easat-4382	330	18	:	:	PUNCT
easat-4382	330	19	vulnerability	vulnerability	NOUN
easat-4382	330	20	scanning	scanning	NOUN
easat-4382	330	21	,	,	PUNCT
easat-4382	330	22	static	static	ADJ
easat-4382	330	23	analysis	analysis	NOUN
easat-4382	330	24	,	,	PUNCT
easat-4382	330	25	and	and	CCONJ
easat-4382	330	26	runtime	runtime	NOUN
easat-4382	330	27	monitoring	monitoring	NOUN
easat-4382	330	28	.	.	PUNCT
easat-4382	331	1	vulnerability	vulnerability	NOUN
easat-4382	331	2	scanning	scanning	NOUN
easat-4382	331	3	tools	tool	NOUN
easat-4382	331	4	(	(	PUNCT
easat-4382	331	5	e.g.	e.g.	ADV
easat-4382	331	6	,	,	PUNCT
easat-4382	331	7	trivy	trivy	ADJ
easat-4382	332	1	[	[	X
easat-4382	332	2	34	34	NUM
easat-4382	332	3	]	]	PUNCT
easat-4382	332	4	and	and	CCONJ
easat-4382	332	5	clair	clair	PROPN
easat-4382	332	6	[	[	X
easat-4382	332	7	21	21	NUM
easat-4382	332	8	]	]	PUNCT
easat-4382	332	9	or	or	CCONJ
easat-4382	332	10	anchore	anchore	ADV
easat-4382	333	1	[	[	X
easat-4382	333	2	38	38	NUM
easat-4382	333	3	]	]	PUNCT
easat-4382	333	4	)	)	PUNCT
easat-4382	333	5	can	can	AUX
easat-4382	333	6	be	be	AUX
easat-4382	333	7	integrated	integrate	VERB
easat-4382	333	8	into	into	ADP
easat-4382	333	9	ci	ci	NOUN
easat-4382	333	10	/	/	SYM
easat-4382	333	11	cd	cd	NOUN
easat-4382	333	12	pipelines	pipeline	NOUN
easat-4382	333	13	to	to	PART
easat-4382	333	14	identify	identify	VERB
easat-4382	333	15	known	know	VERB
easat-4382	333	16	cves	cf	NOUN
easat-4382	333	17	or	or	CCONJ
easat-4382	333	18	outdated	outdated	ADJ
easat-4382	333	19	dependencies	dependency	NOUN
easat-4382	333	20	in	in	ADP
easat-4382	333	21	container	container	NOUN
easat-4382	333	22	images	image	NOUN
easat-4382	333	23	as	as	ADV
easat-4382	333	24	soon	soon	ADV
easat-4382	333	25	as	as	SCONJ
easat-4382	333	26	they	they	PRON
easat-4382	333	27	are	be	AUX
easat-4382	333	28	built	build	VERB
easat-4382	333	29	.	.	PUNCT
easat-4382	334	1	static	static	ADJ
easat-4382	334	2	analysis	analysis	NOUN
easat-4382	334	3	tools	tool	NOUN
easat-4382	334	4	further	far	ADV
easat-4382	334	5	enhance	enhance	VERB
easat-4382	334	6	this	this	DET
easat-4382	334	7	process	process	NOUN
easat-4382	334	8	by	by	ADP
easat-4382	334	9	examining	examine	VERB
easat-4382	334	10	dockerfiles	dockerfile	NOUN
easat-4382	334	11	,	,	PUNCT
easat-4382	334	12	kubernetes	kubernete	NOUN
easat-4382	334	13	manifests	manifest	NOUN
easat-4382	334	14	,	,	PUNCT
easat-4382	334	15	and	and	CCONJ
easat-4382	334	16	other	other	ADJ
easat-4382	334	17	configuration	configuration	NOUN
easat-4382	334	18	files	file	NOUN
easat-4382	334	19	to	to	PART
easat-4382	334	20	detect	detect	VERB
easat-4382	334	21	insecure	insecure	ADJ
easat-4382	334	22	defaults	default	NOUN
easat-4382	334	23	—	—	PUNCT
easat-4382	334	24	such	such	ADJ
easat-4382	334	25	as	as	ADP
easat-4382	334	26	running	run	VERB
easat-4382	334	27	containers	container	NOUN
easat-4382	334	28	with	with	ADP
easat-4382	334	29	root	root	NOUN
easat-4382	334	30	privileges	privilege	NOUN
easat-4382	334	31	,	,	PUNCT
easat-4382	334	32	exposing	expose	VERB
easat-4382	334	33	unnecessary	unnecessary	ADJ
easat-4382	334	34	ports	port	NOUN
easat-4382	334	35	,	,	PUNCT
easat-4382	334	36	or	or	CCONJ
easat-4382	334	37	storing	store	VERB
easat-4382	334	38	secrets	secret	NOUN
easat-4382	334	39	in	in	ADP
easat-4382	334	40	plain	plain	ADJ
easat-4382	334	41	text	text	NOUN
easat-4382	334	42	.	.	PUNCT
easat-4382	335	1	these	these	DET
easat-4382	335	2	checks	check	NOUN
easat-4382	335	3	can	can	AUX
easat-4382	335	4	be	be	AUX
easat-4382	335	5	enforced	enforce	VERB
easat-4382	335	6	automatically	automatically	ADV
easat-4382	335	7	,	,	PUNCT
easat-4382	335	8	preventing	prevent	VERB
easat-4382	335	9	misconfigured	misconfigured	ADJ
easat-4382	335	10	or	or	CCONJ
easat-4382	335	11	vulnerable	vulnerable	ADJ
easat-4382	335	12	images	image	NOUN
easat-4382	335	13	from	from	ADP
easat-4382	335	14	passing	pass	VERB
easat-4382	335	15	critical	critical	ADJ
easat-4382	335	16	checks	check	NOUN
easat-4382	335	17	in	in	ADP
easat-4382	335	18	the	the	DET
easat-4382	335	19	build	build	NOUN
easat-4382	335	20	pipeline	pipeline	NOUN
easat-4382	335	21	.	.	PUNCT
easat-4382	336	1	runtime	runtime	NOUN
easat-4382	336	2	monitoring	monitoring	NOUN
easat-4382	336	3	provides	provide	VERB
easat-4382	336	4	continuous	continuous	ADJ
easat-4382	336	5	inspection	inspection	NOUN
easat-4382	336	6	of	of	ADP
easat-4382	336	7	containers	container	NOUN
easat-4382	336	8	in	in	ADP
easat-4382	336	9	staging	staging	NOUN
easat-4382	336	10	or	or	CCONJ
easat-4382	336	11	production	production	NOUN
easat-4382	336	12	environments	environment	NOUN
easat-4382	336	13	.	.	PUNCT
easat-4382	337	1	security	security	NOUN
easat-4382	337	2	-	-	PUNCT
easat-4382	337	3	oriented	orient	VERB
easat-4382	337	4	agents	agent	NOUN
easat-4382	337	5	or	or	CCONJ
easat-4382	337	6	kernel	kernel	NOUN
easat-4382	337	7	modules	module	NOUN
easat-4382	337	8	,	,	PUNCT
easat-4382	337	9	such	such	ADJ
easat-4382	337	10	as	as	ADP
easat-4382	337	11	falco	falco	PROPN
easat-4382	337	12	[	[	X
easat-4382	337	13	39	39	NUM
easat-4382	337	14	]	]	PUNCT
easat-4382	337	15	sysdig	sysdig	NOUN
easat-4382	338	1	[	[	X
easat-4382	338	2	40	40	NUM
easat-4382	338	3	]	]	PUNCT
easat-4382	338	4	or	or	CCONJ
easat-4382	338	5	even	even	ADV
easat-4382	338	6	linux	linux	PROPN
easat-4382	338	7	kernel	kernel	PROPN
easat-4382	338	8	security	security	NOUN
easat-4382	338	9	modules	module	NOUN
easat-4382	338	10	like	like	ADP
easat-4382	338	11	apparmor	apparmor	NOUN
easat-4382	338	12	or	or	CCONJ
easat-4382	338	13	selinux	selinux	ADJ
easat-4382	338	14	,	,	PUNCT
easat-4382	338	15	observe	observe	VERB
easat-4382	338	16	real	real	ADJ
easat-4382	338	17	-	-	PUNCT
easat-4382	338	18	time	time	NOUN
easat-4382	338	19	container	container	NOUN
easat-4382	338	20	behavior	behavior	NOUN
easat-4382	338	21	.	.	PUNCT
easat-4382	339	1	they	they	PRON
easat-4382	339	2	watch	watch	VERB
easat-4382	339	3	for	for	ADP
easat-4382	339	4	anomalous	anomalous	ADJ
easat-4382	339	5	patterns	pattern	NOUN
easat-4382	339	6	,	,	PUNCT
easat-4382	339	7	such	such	ADJ
easat-4382	339	8	as	as	ADP
easat-4382	339	9	suspicious	suspicious	ADJ
easat-4382	339	10	system	system	NOUN
easat-4382	339	11	calls	call	NOUN
easat-4382	339	12	,	,	PUNCT
easat-4382	339	13	privilege	privilege	NOUN
easat-4382	339	14	escalations	escalation	NOUN
easat-4382	339	15	,	,	PUNCT
easat-4382	339	16	or	or	CCONJ
easat-4382	339	17	unexpected	unexpected	ADJ
easat-4382	339	18	1257	1257	NUM
easat-4382	339	19	edelweiss	edelweiss	PROPN
easat-4382	339	20	applied	apply	VERB
easat-4382	339	21	science	science	NOUN
easat-4382	339	22	and	and	CCONJ
easat-4382	339	23	technology	technology	NOUN
easat-4382	339	24	issn	issn	PROPN
easat-4382	339	25	:	:	PUNCT
easat-4382	339	26	2576	2576	NUM
easat-4382	339	27	-	-	SYM
easat-4382	339	28	8484	8484	NUM
easat-4382	339	29	vol	vol	NOUN
easat-4382	339	30	.	.	PROPN
easat-4382	340	1	9	9	NUM
easat-4382	340	2	,	,	PUNCT
easat-4382	340	3	no	no	INTJ
easat-4382	340	4	.	.	NOUN
easat-4382	340	5	1	1	NUM
easat-4382	340	6	:	:	PUNCT
easat-4382	340	7	1243	1243	NUM
easat-4382	340	8	-	-	SYM
easat-4382	340	9	1261	1261	NUM
easat-4382	340	10	,	,	PUNCT
easat-4382	340	11	2025	2025	NUM
easat-4382	340	12	doi	doi	NOUN
easat-4382	340	13	:	:	PUNCT
easat-4382	340	14	10.55214/25768484.v9i1.4382	10.55214/25768484.v9i1.4382	NUM
easat-4382	340	15	©	©	PROPN
easat-4382	340	16	2025	2025	NUM
easat-4382	340	17	by	by	ADP
easat-4382	340	18	the	the	DET
easat-4382	340	19	authors	author	NOUN
easat-4382	340	20	;	;	PUNCT
easat-4382	340	21	licensee	licensee	PROPN
easat-4382	340	22	learning	learn	VERB
easat-4382	340	23	gate	gate	NOUN
easat-4382	340	24	network	network	NOUN
easat-4382	340	25	connections	connection	NOUN
easat-4382	340	26	,	,	PUNCT
easat-4382	340	27	that	that	PRON
easat-4382	340	28	might	might	AUX
easat-4382	340	29	indicate	indicate	VERB
easat-4382	340	30	an	an	DET
easat-4382	340	31	ongoing	ongoing	ADJ
easat-4382	340	32	compromise	compromise	NOUN
easat-4382	340	33	.	.	PUNCT
easat-4382	341	1	for	for	ADP
easat-4382	341	2	instance	instance	NOUN
easat-4382	341	3	,	,	PUNCT
easat-4382	341	4	falco	falco	PROPN
easat-4382	341	5	can	can	AUX
easat-4382	341	6	be	be	AUX
easat-4382	341	7	configured	configure	VERB
easat-4382	341	8	to	to	PART
easat-4382	341	9	alert	alert	VERB
easat-4382	341	10	if	if	SCONJ
easat-4382	341	11	a	a	DET
easat-4382	341	12	running	run	VERB
easat-4382	341	13	container	container	NOUN
easat-4382	341	14	suddenly	suddenly	ADV
easat-4382	341	15	spawns	spawn	VERB
easat-4382	341	16	a	a	DET
easat-4382	341	17	shell	shell	NOUN
easat-4382	341	18	,	,	PUNCT
easat-4382	341	19	which	which	PRON
easat-4382	341	20	could	could	AUX
easat-4382	341	21	indicate	indicate	VERB
easat-4382	341	22	malicious	malicious	ADJ
easat-4382	341	23	activity	activity	NOUN
easat-4382	341	24	.	.	PUNCT
easat-4382	342	1	8.3	8.3	NUM
easat-4382	342	2	.	.	PUNCT
easat-4382	343	1	regular	regular	ADJ
easat-4382	343	2	patch	patch	PROPN
easat-4382	343	3	management	management	NOUN
easat-4382	343	4	regular	regular	ADJ
easat-4382	343	5	patch	patch	NOUN
easat-4382	343	6	management	management	NOUN
easat-4382	343	7	in	in	ADP
easat-4382	343	8	containerized	containerized	ADJ
easat-4382	343	9	environments	environment	NOUN
easat-4382	343	10	is	be	AUX
easat-4382	343	11	a	a	DET
easat-4382	343	12	significant	significant	ADJ
easat-4382	343	13	part	part	NOUN
easat-4382	343	14	of	of	ADP
easat-4382	343	15	container	container	NOUN
easat-4382	343	16	security	security	NOUN
easat-4382	343	17	because	because	SCONJ
easat-4382	343	18	multiple	multiple	ADJ
easat-4382	343	19	software	software	NOUN
easat-4382	343	20	layers	layer	NOUN
easat-4382	343	21	,	,	PUNCT
easat-4382	343	22	including	include	VERB
easat-4382	343	23	the	the	DET
easat-4382	343	24	base	base	NOUN
easat-4382	343	25	image	image	NOUN
easat-4382	343	26	,	,	PUNCT
easat-4382	343	27	application	application	NOUN
easat-4382	343	28	dependencies	dependency	NOUN
easat-4382	343	29	,	,	PUNCT
easat-4382	343	30	and	and	CCONJ
easat-4382	343	31	the	the	DET
easat-4382	343	32	host	host	NOUN
easat-4382	343	33	operating	operating	NOUN
easat-4382	343	34	system	system	NOUN
easat-4382	343	35	,	,	PUNCT
easat-4382	343	36	must	must	AUX
easat-4382	343	37	all	all	PRON
easat-4382	343	38	remain	remain	VERB
easat-4382	343	39	up	up	ADP
easat-4382	343	40	to	to	ADP
easat-4382	343	41	date	date	NOUN
easat-4382	343	42	to	to	PART
easat-4382	343	43	prevent	prevent	VERB
easat-4382	343	44	known	known	ADJ
easat-4382	343	45	vulnerabilities	vulnerability	NOUN
easat-4382	343	46	from	from	ADP
easat-4382	343	47	being	be	AUX
easat-4382	343	48	exploited	exploit	VERB
easat-4382	343	49	.	.	PUNCT
easat-4382	344	1	containers	container	NOUN
easat-4382	344	2	often	often	ADV
easat-4382	344	3	inherit	inherit	VERB
easat-4382	344	4	layers	layer	NOUN
easat-4382	344	5	from	from	ADP
easat-4382	344	6	base	base	NOUN
easat-4382	344	7	images	image	NOUN
easat-4382	344	8	,	,	PUNCT
easat-4382	344	9	meaning	mean	VERB
easat-4382	344	10	if	if	SCONJ
easat-4382	344	11	the	the	DET
easat-4382	344	12	base	base	NOUN
easat-4382	344	13	image	image	NOUN
easat-4382	344	14	contains	contain	VERB
easat-4382	344	15	outdated	outdated	ADJ
easat-4382	344	16	libraries	library	NOUN
easat-4382	344	17	or	or	CCONJ
easat-4382	344	18	packages	package	NOUN
easat-4382	344	19	with	with	ADP
easat-4382	344	20	security	security	NOUN
easat-4382	344	21	flaws	flaw	NOUN
easat-4382	344	22	,	,	PUNCT
easat-4382	344	23	every	every	DET
easat-4382	344	24	image	image	NOUN
easat-4382	344	25	derived	derive	VERB
easat-4382	344	26	from	from	ADP
easat-4382	344	27	it	it	PRON
easat-4382	344	28	will	will	AUX
easat-4382	344	29	inherit	inherit	VERB
easat-4382	344	30	those	those	DET
easat-4382	344	31	vulnerabilities	vulnerability	NOUN
easat-4382	344	32	.	.	PUNCT
easat-4382	345	1	for	for	ADP
easat-4382	345	2	example	example	NOUN
easat-4382	345	3	,	,	PUNCT
easat-4382	345	4	if	if	SCONJ
easat-4382	345	5	you	you	PRON
easat-4382	345	6	use	use	VERB
easat-4382	345	7	a	a	DET
easat-4382	345	8	popular	popular	ADJ
easat-4382	345	9	base	base	NOUN
easat-4382	345	10	image	image	NOUN
easat-4382	345	11	from	from	ADP
easat-4382	345	12	a	a	DET
easat-4382	345	13	public	public	ADJ
easat-4382	345	14	repository	repository	NOUN
easat-4382	345	15	and	and	CCONJ
easat-4382	345	16	a	a	DET
easat-4382	345	17	critical	critical	ADJ
easat-4382	345	18	cve	cve	NOUN
easat-4382	345	19	is	be	AUX
easat-4382	345	20	discovered	discover	VERB
easat-4382	345	21	in	in	ADP
easat-4382	345	22	one	one	NUM
easat-4382	345	23	of	of	ADP
easat-4382	345	24	its	its	PRON
easat-4382	345	25	core	core	NOUN
easat-4382	345	26	libraries	library	NOUN
easat-4382	345	27	,	,	PUNCT
easat-4382	345	28	all	all	DET
easat-4382	345	29	downstream	downstream	ADJ
easat-4382	345	30	images	image	NOUN
easat-4382	345	31	derived	derive	VERB
easat-4382	345	32	from	from	ADP
easat-4382	345	33	that	that	DET
easat-4382	345	34	base	base	NOUN
easat-4382	345	35	image	image	NOUN
easat-4382	345	36	are	be	AUX
easat-4382	345	37	suddenly	suddenly	ADV
easat-4382	345	38	at	at	ADP
easat-4382	345	39	risk	risk	NOUN
easat-4382	345	40	.	.	PUNCT
easat-4382	346	1	to	to	PART
easat-4382	346	2	address	address	VERB
easat-4382	346	3	this	this	PRON
easat-4382	346	4	,	,	PUNCT
easat-4382	346	5	developers	developer	NOUN
easat-4382	346	6	should	should	AUX
easat-4382	346	7	implement	implement	VERB
easat-4382	346	8	automated	automate	VERB
easat-4382	346	9	scanning	scanning	NOUN
easat-4382	346	10	and	and	CCONJ
easat-4382	346	11	rebuild	rebuild	VERB
easat-4382	346	12	processes	process	NOUN
easat-4382	346	13	in	in	ADP
easat-4382	346	14	their	their	PRON
easat-4382	346	15	ci	ci	NOUN
easat-4382	346	16	/	/	SYM
easat-4382	346	17	cd	cd	NOUN
easat-4382	346	18	pipelines	pipeline	NOUN
easat-4382	346	19	.	.	PUNCT
easat-4382	347	1	additionally	additionally	ADV
easat-4382	347	2	,	,	PUNCT
easat-4382	347	3	setting	set	VERB
easat-4382	347	4	up	up	ADP
easat-4382	347	5	notifications	notification	NOUN
easat-4382	347	6	for	for	ADP
easat-4382	347	7	critical	critical	ADJ
easat-4382	347	8	patches	patch	NOUN
easat-4382	347	9	and	and	CCONJ
easat-4382	347	10	incorporating	incorporate	VERB
easat-4382	347	11	“	"	PUNCT
easat-4382	347	12	pull	pull	VERB
easat-4382	347	13	and	and	CCONJ
easat-4382	347	14	rebuild	rebuild	VERB
easat-4382	347	15	”	"	PUNCT
easat-4382	347	16	policies	policy	NOUN
easat-4382	347	17	can	can	AUX
easat-4382	347	18	ensure	ensure	VERB
easat-4382	347	19	that	that	SCONJ
easat-4382	347	20	new	new	ADJ
easat-4382	347	21	,	,	PUNCT
easat-4382	347	22	patched	patched	ADJ
easat-4382	347	23	versions	version	NOUN
easat-4382	347	24	of	of	ADP
easat-4382	347	25	base	base	NOUN
easat-4382	347	26	images	image	NOUN
easat-4382	347	27	are	be	AUX
easat-4382	347	28	promptly	promptly	ADV
easat-4382	347	29	adopted	adopt	VERB
easat-4382	347	30	and	and	CCONJ
easat-4382	347	31	even	even	ADV
easat-4382	347	32	automatically	automatically	ADV
easat-4382	347	33	pushed	push	VERB
easat-4382	347	34	to	to	ADP
easat-4382	347	35	the	the	DET
easat-4382	347	36	testing	testing	NOUN
easat-4382	347	37	environment	environment	NOUN
easat-4382	347	38	.	.	PUNCT
easat-4382	348	1	8.4	8.4	NUM
easat-4382	348	2	.	.	PUNCT
easat-4382	348	3	immutable	immutable	ADJ
easat-4382	348	4	infrastructure	infrastructure	NOUN
easat-4382	348	5	immutable	immutable	ADJ
easat-4382	348	6	infrastructure	infrastructure	NOUN
easat-4382	348	7	in	in	ADP
easat-4382	348	8	the	the	DET
easat-4382	348	9	context	context	NOUN
easat-4382	348	10	of	of	ADP
easat-4382	348	11	containers	container	NOUN
easat-4382	348	12	refers	refer	VERB
easat-4382	348	13	to	to	ADP
easat-4382	348	14	treating	treat	VERB
easat-4382	348	15	application	application	NOUN
easat-4382	348	16	environments	environment	NOUN
easat-4382	348	17	as	as	ADP
easat-4382	348	18	disposable	disposable	ADJ
easat-4382	348	19	,	,	PUNCT
easat-4382	348	20	pre	pre	ADJ
easat-4382	348	21	-	-	ADJ
easat-4382	348	22	built	build	VERB
easat-4382	348	23	artifacts	artifact	NOUN
easat-4382	348	24	rather	rather	ADV
easat-4382	348	25	than	than	ADP
easat-4382	348	26	mutable	mutable	ADJ
easat-4382	348	27	systems	system	NOUN
easat-4382	348	28	that	that	PRON
easat-4382	348	29	are	be	AUX
easat-4382	348	30	updated	update	VERB
easat-4382	348	31	in	in	ADP
easat-4382	348	32	place	place	NOUN
easat-4382	348	33	.	.	PUNCT
easat-4382	349	1	instead	instead	ADV
easat-4382	349	2	of	of	ADP
easat-4382	349	3	logging	log	VERB
easat-4382	349	4	into	into	ADP
easat-4382	349	5	a	a	DET
easat-4382	349	6	server	server	NOUN
easat-4382	349	7	to	to	PART
easat-4382	349	8	apply	apply	VERB
easat-4382	349	9	patches	patch	NOUN
easat-4382	349	10	or	or	CCONJ
easat-4382	349	11	modify	modify	VERB
easat-4382	349	12	application	application	NOUN
easat-4382	349	13	configurations	configuration	NOUN
easat-4382	349	14	,	,	PUNCT
easat-4382	349	15	the	the	DET
easat-4382	349	16	entire	entire	ADJ
easat-4382	349	17	container	container	NOUN
easat-4382	349	18	image	image	NOUN
easat-4382	349	19	is	be	AUX
easat-4382	349	20	rebuilt	rebuild	VERB
easat-4382	349	21	with	with	ADP
easat-4382	349	22	the	the	DET
easat-4382	349	23	necessary	necessary	ADJ
easat-4382	349	24	changes	change	NOUN
easat-4382	349	25	and	and	CCONJ
easat-4382	349	26	redeployed	redeploy	VERB
easat-4382	349	27	.	.	PUNCT
easat-4382	350	1	this	this	DET
easat-4382	350	2	practice	practice	NOUN
easat-4382	350	3	eliminates	eliminate	VERB
easat-4382	350	4	“	"	PUNCT
easat-4382	350	5	configuration	configuration	NOUN
easat-4382	350	6	drift	drift	NOUN
easat-4382	350	7	”	"	PUNCT
easat-4382	350	8	issues	issue	NOUN
easat-4382	350	9	,	,	PUNCT
easat-4382	350	10	where	where	SCONJ
easat-4382	350	11	small	small	ADJ
easat-4382	350	12	,	,	PUNCT
easat-4382	350	13	manual	manual	ADJ
easat-4382	350	14	changes	change	NOUN
easat-4382	350	15	lead	lead	VERB
easat-4382	350	16	to	to	ADP
easat-4382	350	17	an	an	DET
easat-4382	350	18	inconsistent	inconsistent	ADJ
easat-4382	350	19	state	state	NOUN
easat-4382	350	20	over	over	ADP
easat-4382	350	21	time	time	NOUN
easat-4382	350	22	.	.	PUNCT
easat-4382	351	1	for	for	ADP
easat-4382	351	2	example	example	NOUN
easat-4382	351	3	,	,	PUNCT
easat-4382	351	4	suppose	suppose	VERB
easat-4382	351	5	you	you	PRON
easat-4382	351	6	discover	discover	VERB
easat-4382	351	7	a	a	DET
easat-4382	351	8	vulnerability	vulnerability	NOUN
easat-4382	351	9	in	in	ADP
easat-4382	351	10	a	a	DET
easat-4382	351	11	container	container	NOUN
easat-4382	351	12	image	image	NOUN
easat-4382	351	13	rather	rather	ADV
easat-4382	351	14	than	than	ADP
easat-4382	351	15	patching	patch	VERB
easat-4382	351	16	it	it	PRON
easat-4382	351	17	in	in	ADP
easat-4382	351	18	place	place	NOUN
easat-4382	351	19	on	on	ADP
easat-4382	351	20	a	a	DET
easat-4382	351	21	running	run	VERB
easat-4382	351	22	container	container	NOUN
easat-4382	351	23	.	.	PUNCT
easat-4382	352	1	in	in	ADP
easat-4382	352	2	that	that	DET
easat-4382	352	3	case	case	NOUN
easat-4382	352	4	,	,	PUNCT
easat-4382	352	5	you	you	PRON
easat-4382	352	6	rebuild	rebuild	VERB
easat-4382	352	7	the	the	DET
easat-4382	352	8	image	image	NOUN
easat-4382	352	9	(	(	PUNCT
easat-4382	352	10	applying	apply	VERB
easat-4382	352	11	the	the	DET
easat-4382	352	12	patch	patch	NOUN
easat-4382	352	13	)	)	PUNCT
easat-4382	352	14	,	,	PUNCT
easat-4382	352	15	push	push	VERB
easat-4382	352	16	it	it	PRON
easat-4382	352	17	to	to	ADP
easat-4382	352	18	a	a	DET
easat-4382	352	19	registry	registry	NOUN
easat-4382	352	20	,	,	PUNCT
easat-4382	352	21	and	and	CCONJ
easat-4382	352	22	redeploy	redeploy	NOUN
easat-4382	352	23	containers	container	NOUN
easat-4382	352	24	from	from	ADP
easat-4382	352	25	that	that	DET
easat-4382	352	26	new	new	ADJ
easat-4382	352	27	,	,	PUNCT
easat-4382	352	28	updated	update	VERB
easat-4382	352	29	image	image	NOUN
easat-4382	352	30	.	.	PUNCT
easat-4382	353	1	this	this	DET
easat-4382	353	2	approach	approach	NOUN
easat-4382	353	3	ensures	ensure	VERB
easat-4382	353	4	that	that	SCONJ
easat-4382	353	5	every	every	DET
easat-4382	353	6	application	application	NOUN
easat-4382	353	7	instance	instance	NOUN
easat-4382	353	8	runs	run	VERB
easat-4382	353	9	a	a	DET
easat-4382	353	10	known	know	VERB
easat-4382	353	11	,	,	PUNCT
easat-4382	353	12	validated	validated	ADJ
easat-4382	353	13	configuration	configuration	NOUN
easat-4382	353	14	,	,	PUNCT
easat-4382	353	15	reducing	reduce	VERB
easat-4382	353	16	the	the	DET
easat-4382	353	17	chance	chance	NOUN
easat-4382	353	18	of	of	ADP
easat-4382	353	19	unpredictable	unpredictable	ADJ
easat-4382	353	20	behavior	behavior	NOUN
easat-4382	353	21	and	and	CCONJ
easat-4382	353	22	simplifying	simplify	VERB
easat-4382	353	23	troubleshooting	troubleshooting	NOUN
easat-4382	353	24	and	and	CCONJ
easat-4382	353	25	auditing	auditing	NOUN
easat-4382	353	26	.	.	PUNCT
easat-4382	354	1	from	from	ADP
easat-4382	354	2	an	an	DET
easat-4382	354	3	operational	operational	ADJ
easat-4382	354	4	standpoint	standpoint	NOUN
easat-4382	354	5	,	,	PUNCT
easat-4382	354	6	immutable	immutable	ADJ
easat-4382	354	7	deployments	deployment	NOUN
easat-4382	354	8	align	align	VERB
easat-4382	354	9	well	well	ADV
easat-4382	354	10	with	with	ADP
easat-4382	354	11	devops	devop	NOUN
easat-4382	354	12	and	and	CCONJ
easat-4382	354	13	microservices	microservice	NOUN
easat-4382	354	14	practices	practice	NOUN
easat-4382	354	15	.	.	PUNCT
easat-4382	355	1	tools	tool	NOUN
easat-4382	355	2	like	like	ADP
easat-4382	355	3	kubernetes	kubernete	NOUN
easat-4382	355	4	make	make	VERB
easat-4382	355	5	rolling	rolling	ADJ
easat-4382	355	6	updates	update	NOUN
easat-4382	355	7	straightforward	straightforward	ADJ
easat-4382	355	8	:	:	PUNCT
easat-4382	355	9	when	when	SCONJ
easat-4382	355	10	a	a	DET
easat-4382	355	11	new	new	ADJ
easat-4382	355	12	container	container	NOUN
easat-4382	355	13	image	image	NOUN
easat-4382	355	14	version	version	NOUN
easat-4382	355	15	is	be	AUX
easat-4382	355	16	available	available	ADJ
easat-4382	355	17	,	,	PUNCT
easat-4382	355	18	the	the	DET
easat-4382	355	19	orchestrator	orchestrator	NOUN
easat-4382	355	20	gradually	gradually	ADV
easat-4382	355	21	replaces	replace	VERB
easat-4382	355	22	old	old	ADJ
easat-4382	355	23	pods	pod	NOUN
easat-4382	355	24	with	with	ADP
easat-4382	355	25	new	new	ADJ
easat-4382	355	26	ones	one	NOUN
easat-4382	355	27	,	,	PUNCT
easat-4382	355	28	verifying	verify	VERB
easat-4382	355	29	health	health	NOUN
easat-4382	355	30	checks	check	NOUN
easat-4382	355	31	along	along	ADP
easat-4382	355	32	the	the	DET
easat-4382	355	33	way	way	NOUN
easat-4382	355	34	.	.	PUNCT
easat-4382	356	1	this	this	DET
easat-4382	356	2	approach	approach	NOUN
easat-4382	356	3	keeps	keep	VERB
easat-4382	356	4	environments	environment	NOUN
easat-4382	356	5	consistent	consistent	ADJ
easat-4382	356	6	and	and	CCONJ
easat-4382	356	7	simplifies	simplifie	NOUN
easat-4382	356	8	rollback	rollback	VERB
easat-4382	356	9	if	if	SCONJ
easat-4382	356	10	something	something	PRON
easat-4382	356	11	goes	go	VERB
easat-4382	356	12	wrong	wrong	ADJ
easat-4382	356	13	—	—	PUNCT
easat-4382	356	14	revert	revert	ADJ
easat-4382	356	15	to	to	ADP
easat-4382	356	16	a	a	DET
easat-4382	356	17	previous	previous	ADJ
easat-4382	356	18	container	container	NOUN
easat-4382	356	19	image	image	NOUN
easat-4382	356	20	version	version	NOUN
easat-4382	356	21	.	.	PUNCT
easat-4382	357	1	for	for	ADP
easat-4382	357	2	developers	developer	NOUN
easat-4382	357	3	,	,	PUNCT
easat-4382	357	4	it	it	PRON
easat-4382	357	5	promotes	promote	VERB
easat-4382	357	6	reproducibility	reproducibility	NOUN
easat-4382	357	7	and	and	CCONJ
easat-4382	357	8	accelerates	accelerate	VERB
easat-4382	357	9	testing	test	VERB
easat-4382	357	10	cycles	cycle	NOUN
easat-4382	357	11	because	because	SCONJ
easat-4382	357	12	the	the	DET
easat-4382	357	13	same	same	ADJ
easat-4382	357	14	container	container	NOUN
easat-4382	357	15	image	image	NOUN
easat-4382	357	16	is	be	AUX
easat-4382	357	17	used	use	VERB
easat-4382	357	18	in	in	ADP
easat-4382	357	19	development	development	NOUN
easat-4382	357	20	,	,	PUNCT
easat-4382	357	21	and	and	CCONJ
easat-4382	357	22	qa	qa	PROPN
easat-4382	357	23	is	be	AUX
easat-4382	357	24	the	the	DET
easat-4382	357	25	one	one	NOUN
easat-4382	357	26	that	that	PRON
easat-4382	357	27	runs	run	VERB
easat-4382	357	28	in	in	ADP
easat-4382	357	29	production	production	NOUN
easat-4382	357	30	.	.	PUNCT
easat-4382	358	1	by	by	ADP
easat-4382	358	2	combining	combine	VERB
easat-4382	358	3	infrastructure	infrastructure	NOUN
easat-4382	358	4	automation	automation	NOUN
easat-4382	358	5	with	with	ADP
easat-4382	358	6	immutable	immutable	ADJ
easat-4382	358	7	container	container	NOUN
easat-4382	358	8	images	image	NOUN
easat-4382	358	9	,	,	PUNCT
easat-4382	358	10	teams	team	NOUN
easat-4382	358	11	can	can	AUX
easat-4382	358	12	maintain	maintain	VERB
easat-4382	358	13	a	a	DET
easat-4382	358	14	predictable	predictable	ADJ
easat-4382	358	15	,	,	PUNCT
easat-4382	358	16	resilient	resilient	ADJ
easat-4382	358	17	deployment	deployment	NOUN
easat-4382	358	18	pipeline	pipeline	NOUN
easat-4382	358	19	where	where	SCONJ
easat-4382	358	20	new	new	ADJ
easat-4382	358	21	features	feature	NOUN
easat-4382	358	22	or	or	CCONJ
easat-4382	358	23	security	security	NOUN
easat-4382	358	24	patches	patch	NOUN
easat-4382	358	25	are	be	AUX
easat-4382	358	26	confidently	confidently	ADV
easat-4382	358	27	rolled	roll	VERB
easat-4382	358	28	out	out	ADP
easat-4382	358	29	without	without	ADP
easat-4382	358	30	the	the	DET
easat-4382	358	31	risk	risk	NOUN
easat-4382	358	32	of	of	ADP
easat-4382	358	33	unpredictable	unpredictable	ADJ
easat-4382	358	34	,	,	PUNCT
easat-4382	358	35	manual	manual	ADJ
easat-4382	358	36	configuration	configuration	NOUN
easat-4382	358	37	changes	change	NOUN
easat-4382	358	38	.	.	PUNCT
easat-4382	359	1	9	9	X
easat-4382	359	2	.	.	X
easat-4382	359	3	compliance	compliance	NOUN
easat-4382	359	4	and	and	CCONJ
easat-4382	359	5	regulations	regulation	NOUN
easat-4382	359	6	industries	industry	NOUN
easat-4382	359	7	such	such	ADJ
easat-4382	359	8	as	as	ADP
easat-4382	359	9	finance	finance	NOUN
easat-4382	359	10	and	and	CCONJ
easat-4382	359	11	healthcare	healthcare	NOUN
easat-4382	359	12	operate	operate	VERB
easat-4382	359	13	under	under	ADP
easat-4382	359	14	strict	strict	ADJ
easat-4382	359	15	regulatory	regulatory	ADJ
easat-4382	359	16	requirements	requirement	NOUN
easat-4382	359	17	(	(	PUNCT
easat-4382	359	18	e.g.	e.g.	ADV
easat-4382	359	19	,	,	PUNCT
easat-4382	359	20	pci	pci	ADJ
easat-4382	359	21	dss	dss	NOUN
easat-4382	359	22	for	for	ADP
easat-4382	359	23	payment	payment	NOUN
easat-4382	359	24	processing	processing	NOUN
easat-4382	359	25	,	,	PUNCT
easat-4382	359	26	hipaa	hipaa	NOUN
easat-4382	359	27	for	for	ADP
easat-4382	359	28	healthcare	healthcare	PROPN
easat-4382	359	29	data	data	PROPN
easat-4382	359	30	)	)	PUNCT
easat-4382	359	31	that	that	PRON
easat-4382	359	32	dictate	dictate	VERB
easat-4382	359	33	rigorous	rigorous	ADJ
easat-4382	359	34	security	security	NOUN
easat-4382	359	35	and	and	CCONJ
easat-4382	359	36	auditing	auditing	NOUN
easat-4382	359	37	requirements	requirement	NOUN
easat-4382	359	38	that	that	PRON
easat-4382	359	39	apply	apply	VERB
easat-4382	359	40	similarly	similarly	ADV
easat-4382	359	41	to	to	ADP
easat-4382	359	42	containerized	containerized	ADJ
easat-4382	359	43	environments	environment	NOUN
easat-4382	359	44	.	.	PUNCT
easat-4382	360	1	in	in	ADP
easat-4382	360	2	container	container	NOUN
easat-4382	360	3	deployments	deployment	NOUN
easat-4382	360	4	,	,	PUNCT
easat-4382	360	5	compliance	compliance	NOUN
easat-4382	360	6	often	often	ADV
easat-4382	360	7	starts	start	VERB
easat-4382	360	8	with	with	ADP
easat-4382	360	9	standard	standard	ADJ
easat-4382	360	10	hardening	harden	VERB
easat-4382	360	11	practices	practice	NOUN
easat-4382	360	12	and	and	CCONJ
easat-4382	360	13	documented	document	VERB
easat-4382	360	14	security	security	NOUN
easat-4382	360	15	baselines	baseline	NOUN
easat-4382	360	16	(	(	PUNCT
easat-4382	360	17	for	for	ADP
easat-4382	360	18	example	example	NOUN
easat-4382	360	19	,	,	PUNCT
easat-4382	360	20	cis	cis	NOUN
easat-4382	360	21	benchmarks	benchmark	NOUN
easat-4382	360	22	for	for	ADP
easat-4382	360	23	docker	docker	PROPN
easat-4382	361	1	[	[	X
easat-4382	361	2	40	40	NUM
easat-4382	361	3	]	]	PUNCT
easat-4382	361	4	or	or	CCONJ
easat-4382	361	5	kubernetes	kubernete	NOUN
easat-4382	361	6	[	[	X
easat-4382	361	7	41	41	NUM
easat-4382	361	8	]	]	PUNCT
easat-4382	361	9	)	)	PUNCT
easat-4382	361	10	.	.	PUNCT
easat-4382	362	1	organizations	organization	NOUN
easat-4382	362	2	can	can	AUX
easat-4382	362	3	enforce	enforce	VERB
easat-4382	362	4	these	these	DET
easat-4382	362	5	standards	standard	NOUN
easat-4382	362	6	using	use	VERB
easat-4382	362	7	built	build	VERB
easat-4382	362	8	-	-	PUNCT
easat-4382	362	9	in	in	ADP
easat-4382	362	10	kubernetes	kubernete	NOUN
easat-4382	362	11	admission	admission	NOUN
easat-4382	362	12	controllers	controller	NOUN
easat-4382	362	13	,	,	PUNCT
easat-4382	362	14	pod	pod	ADJ
easat-4382	362	15	security	security	NOUN
easat-4382	362	16	admission	admission	NOUN
easat-4382	362	17	levels	level	NOUN
easat-4382	362	18	,	,	PUNCT
easat-4382	362	19	or	or	CCONJ
easat-4382	362	20	third	third	ADJ
easat-4382	362	21	-	-	PUNCT
easat-4382	362	22	party	party	NOUN
easat-4382	362	23	policy	policy	NOUN
easat-4382	362	24	engines	engine	NOUN
easat-4382	362	25	(	(	PUNCT
easat-4382	362	26	like	like	INTJ
easat-4382	362	27	opa	opa	NOUN
easat-4382	362	28	/	/	SYM
easat-4382	362	29	gatekeeper	gatekeeper	NOUN
easat-4382	362	30	[	[	X
easat-4382	362	31	42	42	NUM
easat-4382	362	32	]	]	PUNCT
easat-4382	362	33	)	)	PUNCT
easat-4382	362	34	,	,	PUNCT
easat-4382	362	35	which	which	PRON
easat-4382	362	36	ensures	ensure	VERB
easat-4382	362	37	that	that	SCONJ
easat-4382	362	38	only	only	ADV
easat-4382	362	39	compliant	compliant	ADJ
easat-4382	362	40	and	and	CCONJ
easat-4382	362	41	securely	securely	ADV
easat-4382	362	42	configured	configure	VERB
easat-4382	362	43	containers	container	NOUN
easat-4382	362	44	can	can	AUX
easat-4382	362	45	run	run	VERB
easat-4382	362	46	.	.	PUNCT
easat-4382	363	1	additionally	additionally	ADV
easat-4382	363	2	,	,	PUNCT
easat-4382	363	3	encrypting	encrypt	VERB
easat-4382	363	4	data	datum	NOUN
easat-4382	363	5	in	in	ADP
easat-4382	363	6	transit	transit	NOUN
easat-4382	363	7	(	(	PUNCT
easat-4382	363	8	via	via	ADP
easat-4382	363	9	mutual	mutual	ADJ
easat-4382	363	10	tls	tls	PROPN
easat-4382	363	11	)	)	PUNCT
easat-4382	363	12	and	and	CCONJ
easat-4382	363	13	at	at	ADP
easat-4382	363	14	rest	rest	NOUN
easat-4382	363	15	,	,	PUNCT
easat-4382	363	16	employing	employ	VERB
easat-4382	363	17	strict	strict	ADJ
easat-4382	363	18	network	network	NOUN
easat-4382	363	19	segmentation	segmentation	NOUN
easat-4382	363	20	,	,	PUNCT
easat-4382	363	21	and	and	CCONJ
easat-4382	363	22	regularly	regularly	ADV
easat-4382	363	23	scanning	scan	VERB
easat-4382	363	24	container	container	NOUN
easat-4382	363	25	images	image	NOUN
easat-4382	363	26	can	can	AUX
easat-4382	363	27	help	help	VERB
easat-4382	363	28	organizations	organization	NOUN
easat-4382	363	29	maintain	maintain	VERB
easat-4382	363	30	compliance	compliance	NOUN
easat-4382	363	31	.	.	PUNCT
easat-4382	364	1	tools	tool	NOUN
easat-4382	364	2	like	like	ADP
easat-4382	364	3	falco	falco	NOUN
easat-4382	364	4	or	or	CCONJ
easat-4382	364	5	kubescape	kubescape	NOUN
easat-4382	365	1	[	[	X
easat-4382	365	2	43	43	NUM
easat-4382	365	3	]	]	PUNCT
easat-4382	365	4	can	can	AUX
easat-4382	365	5	provide	provide	VERB
easat-4382	365	6	real	real	ADJ
easat-4382	365	7	-	-	PUNCT
easat-4382	365	8	time	time	NOUN
easat-4382	365	9	threat	threat	NOUN
easat-4382	365	10	detection	detection	NOUN
easat-4382	365	11	in	in	ADP
easat-4382	365	12	line	line	NOUN
easat-4382	365	13	with	with	ADP
easat-4382	365	14	governance	governance	NOUN
easat-4382	365	15	rules	rule	NOUN
easat-4382	365	16	,	,	PUNCT
easat-4382	365	17	generating	generating	NOUN
easat-4382	365	18	alerts	alert	NOUN
easat-4382	365	19	whenever	whenever	SCONJ
easat-4382	365	20	suspicious	suspicious	ADJ
easat-4382	365	21	activity	activity	NOUN
easat-4382	365	22	is	be	AUX
easat-4382	365	23	detected	detect	VERB
easat-4382	365	24	.	.	PUNCT
easat-4382	366	1	by	by	ADP
easat-4382	366	2	integrating	integrate	VERB
easat-4382	366	3	these	these	DET
easat-4382	366	4	measures	measure	NOUN
easat-4382	366	5	into	into	ADP
easat-4382	366	6	a	a	DET
easat-4382	366	7	ci	ci	NOUN
easat-4382	366	8	/	/	SYM
easat-4382	366	9	cd	cd	PROPN
easat-4382	366	10	1258	1258	NUM
easat-4382	366	11	edelweiss	edelweiss	PROPN
easat-4382	366	12	applied	apply	VERB
easat-4382	366	13	science	science	NOUN
easat-4382	366	14	and	and	CCONJ
easat-4382	366	15	technology	technology	NOUN
easat-4382	366	16	issn	issn	PROPN
easat-4382	366	17	:	:	PUNCT
easat-4382	366	18	2576	2576	NUM
easat-4382	366	19	-	-	SYM
easat-4382	366	20	8484	8484	NUM
easat-4382	366	21	vol	vol	NOUN
easat-4382	366	22	.	.	PROPN
easat-4382	367	1	9	9	NUM
easat-4382	367	2	,	,	PUNCT
easat-4382	367	3	no	no	INTJ
easat-4382	367	4	.	.	NOUN
easat-4382	367	5	1	1	NUM
easat-4382	367	6	:	:	PUNCT
easat-4382	367	7	1243	1243	NUM
easat-4382	367	8	-	-	SYM
easat-4382	367	9	1261	1261	NUM
easat-4382	367	10	,	,	PUNCT
easat-4382	367	11	2025	2025	NUM
easat-4382	367	12	doi	doi	NOUN
easat-4382	367	13	:	:	PUNCT
easat-4382	367	14	10.55214/25768484.v9i1.4382	10.55214/25768484.v9i1.4382	NUM
easat-4382	367	15	©	©	PROPN
easat-4382	367	16	2025	2025	NUM
easat-4382	367	17	by	by	ADP
easat-4382	367	18	the	the	DET
easat-4382	367	19	authors	author	NOUN
easat-4382	367	20	;	;	PUNCT
easat-4382	367	21	licensee	licensee	PROPN
easat-4382	367	22	learning	learning	PROPN
easat-4382	367	23	gate	gate	PROPN
easat-4382	367	24	pipeline	pipeline	PROPN
easat-4382	367	25	,	,	PUNCT
easat-4382	367	26	companies	company	NOUN
easat-4382	367	27	ensure	ensure	VERB
easat-4382	367	28	that	that	SCONJ
easat-4382	367	29	every	every	DET
easat-4382	367	30	container	container	NOUN
easat-4382	367	31	entering	enter	VERB
easat-4382	367	32	production	production	NOUN
easat-4382	367	33	meets	meet	VERB
easat-4382	367	34	the	the	DET
easat-4382	367	35	regulatory	regulatory	ADJ
easat-4382	367	36	guidelines	guideline	NOUN
easat-4382	367	37	,	,	PUNCT
easat-4382	367	38	reducing	reduce	VERB
easat-4382	367	39	the	the	DET
easat-4382	367	40	risk	risk	NOUN
easat-4382	367	41	of	of	ADP
easat-4382	367	42	costly	costly	ADJ
easat-4382	367	43	violations	violation	NOUN
easat-4382	367	44	and	and	CCONJ
easat-4382	367	45	data	datum	NOUN
easat-4382	367	46	breaches	breach	NOUN
easat-4382	367	47	.	.	PUNCT
easat-4382	368	1	logging	log	VERB
easat-4382	368	2	,	,	PUNCT
easat-4382	368	3	auditing	auditing	NOUN
easat-4382	368	4	,	,	PUNCT
easat-4382	368	5	and	and	CCONJ
easat-4382	368	6	monitoring	monitor	VERB
easat-4382	368	7	for	for	ADP
easat-4382	368	8	containerized	containerized	ADJ
easat-4382	368	9	applications	application	NOUN
easat-4382	368	10	differ	differ	VERB
easat-4382	368	11	partly	partly	ADV
easat-4382	368	12	due	due	ADJ
easat-4382	368	13	to	to	ADP
easat-4382	368	14	containers	container	NOUN
easat-4382	368	15	'	'	PART
easat-4382	368	16	ephemeral	ephemeral	ADJ
easat-4382	368	17	nature	nature	NOUN
easat-4382	368	18	and	and	CCONJ
easat-4382	368	19	microservices	microservice	NOUN
easat-4382	368	20	'	'	PART
easat-4382	368	21	distributed	distribute	VERB
easat-4382	368	22	nature	nature	NOUN
easat-4382	368	23	.	.	PUNCT
easat-4382	369	1	traditional	traditional	ADJ
easat-4382	369	2	logging	logging	NOUN
easat-4382	369	3	might	might	AUX
easat-4382	369	4	store	store	VERB
easat-4382	369	5	data	datum	NOUN
easat-4382	369	6	on	on	ADP
easat-4382	369	7	the	the	DET
easat-4382	369	8	same	same	ADJ
easat-4382	369	9	host	host	NOUN
easat-4382	369	10	as	as	ADP
easat-4382	369	11	the	the	DET
easat-4382	369	12	application	application	NOUN
easat-4382	369	13	.	.	PUNCT
easat-4382	370	1	still	still	ADV
easat-4382	370	2	,	,	PUNCT
easat-4382	370	3	since	since	SCONJ
easat-4382	370	4	containers	container	NOUN
easat-4382	370	5	can	can	AUX
easat-4382	370	6	be	be	AUX
easat-4382	370	7	spun	spin	VERB
easat-4382	370	8	up	up	ADP
easat-4382	370	9	or	or	CCONJ
easat-4382	370	10	down	down	ADV
easat-4382	370	11	quickly	quickly	ADV
easat-4382	370	12	,	,	PUNCT
easat-4382	370	13	they	they	PRON
easat-4382	370	14	can	can	AUX
easat-4382	370	15	potentially	potentially	ADV
easat-4382	370	16	lose	lose	VERB
easat-4382	370	17	local	local	ADJ
easat-4382	370	18	logs	log	NOUN
easat-4382	370	19	unless	unless	SCONJ
easat-4382	370	20	shipped	ship	VERB
easat-4382	370	21	to	to	ADP
easat-4382	370	22	a	a	DET
easat-4382	370	23	centralized	centralized	ADJ
easat-4382	370	24	logging	log	VERB
easat-4382	370	25	system	system	NOUN
easat-4382	370	26	(	(	PUNCT
easat-4382	370	27	e.g.	e.g.	ADV
easat-4382	370	28	,	,	PUNCT
easat-4382	370	29	elasticsearch	elasticsearch	NOUN
easat-4382	370	30	,	,	PUNCT
easat-4382	370	31	splunk	splunk	NOUN
easat-4382	370	32	,	,	PUNCT
easat-4382	370	33	or	or	CCONJ
easat-4382	370	34	a	a	DET
easat-4382	370	35	cloudbased	cloudbase	VERB
easat-4382	370	36	logging	log	VERB
easat-4382	370	37	service	service	NOUN
easat-4382	370	38	)	)	PUNCT
easat-4382	370	39	.	.	PUNCT
easat-4382	371	1	furthermore	furthermore	ADV
easat-4382	371	2	,	,	PUNCT
easat-4382	371	3	logs	log	NOUN
easat-4382	371	4	and	and	CCONJ
easat-4382	371	5	monitoring	monitor	VERB
easat-4382	371	6	data	datum	NOUN
easat-4382	371	7	may	may	AUX
easat-4382	371	8	need	need	VERB
easat-4382	371	9	to	to	PART
easat-4382	371	10	be	be	AUX
easat-4382	371	11	aggregated	aggregate	VERB
easat-4382	371	12	in	in	ADP
easat-4382	371	13	a	a	DET
easat-4382	371	14	container	container	NOUN
easat-4382	371	15	ecosystem	ecosystem	NOUN
easat-4382	371	16	from	from	ADP
easat-4382	371	17	multiple	multiple	ADJ
easat-4382	371	18	pods	pod	NOUN
easat-4382	371	19	,	,	PUNCT
easat-4382	371	20	nodes	node	NOUN
easat-4382	371	21	,	,	PUNCT
easat-4382	371	22	and	and	CCONJ
easat-4382	371	23	services	service	NOUN
easat-4382	371	24	,	,	PUNCT
easat-4382	371	25	necessitating	necessitate	VERB
easat-4382	371	26	a	a	DET
easat-4382	371	27	robust	robust	ADJ
easat-4382	371	28	observability	observability	NOUN
easat-4382	371	29	stack	stack	NOUN
easat-4382	371	30	(	(	PUNCT
easat-4382	371	31	e.g.	e.g.	ADV
easat-4382	371	32	,	,	PUNCT
easat-4382	371	33	prometheus	prometheus	NOUN
easat-4382	371	34	,	,	PUNCT
easat-4382	371	35	grafana	grafana	NOUN
easat-4382	371	36	,	,	PUNCT
easat-4382	371	37	or	or	CCONJ
easat-4382	371	38	datadog	datadog	NOUN
easat-4382	371	39	)	)	PUNCT
easat-4382	371	40	.	.	PUNCT
easat-4382	372	1	this	this	DET
easat-4382	372	2	data	data	NOUN
easat-4382	372	3	becomes	become	VERB
easat-4382	372	4	essential	essential	ADJ
easat-4382	372	5	for	for	ADP
easat-4382	372	6	incident	incident	NOUN
easat-4382	372	7	response	response	NOUN
easat-4382	372	8	,	,	PUNCT
easat-4382	372	9	as	as	SCONJ
easat-4382	372	10	security	security	NOUN
easat-4382	372	11	teams	team	NOUN
easat-4382	372	12	must	must	AUX
easat-4382	372	13	be	be	AUX
easat-4382	372	14	able	able	ADJ
easat-4382	372	15	to	to	PART
easat-4382	372	16	quickly	quickly	ADV
easat-4382	372	17	reconstruct	reconstruct	VERB
easat-4382	372	18	the	the	DET
easat-4382	372	19	timeline	timeline	NOUN
easat-4382	372	20	of	of	ADP
easat-4382	372	21	events	event	NOUN
easat-4382	372	22	,	,	PUNCT
easat-4382	372	23	track	track	VERB
easat-4382	372	24	suspicious	suspicious	ADJ
easat-4382	372	25	activity	activity	NOUN
easat-4382	372	26	across	across	ADP
easat-4382	372	27	services	service	NOUN
easat-4382	372	28	,	,	PUNCT
easat-4382	372	29	and	and	CCONJ
easat-4382	372	30	contain	contain	VERB
easat-4382	372	31	the	the	DET
easat-4382	372	32	threat	threat	NOUN
easat-4382	372	33	before	before	SCONJ
easat-4382	372	34	it	it	PRON
easat-4382	372	35	spreads	spread	VERB
easat-4382	372	36	laterally	laterally	ADV
easat-4382	372	37	through	through	ADP
easat-4382	372	38	the	the	DET
easat-4382	372	39	cluster	cluster	NOUN
easat-4382	372	40	.	.	PUNCT
easat-4382	373	1	incident	incident	NOUN
easat-4382	373	2	response	response	NOUN
easat-4382	373	3	for	for	ADP
easat-4382	373	4	containers	container	NOUN
easat-4382	373	5	should	should	AUX
easat-4382	373	6	include	include	VERB
easat-4382	373	7	predefined	predefine	VERB
easat-4382	373	8	playbooks	playbook	NOUN
easat-4382	373	9	that	that	PRON
easat-4382	373	10	detail	detail	VERB
easat-4382	373	11	how	how	SCONJ
easat-4382	373	12	to	to	PART
easat-4382	373	13	isolate	isolate	VERB
easat-4382	373	14	compromised	compromise	VERB
easat-4382	373	15	pods	pod	NOUN
easat-4382	373	16	(	(	PUNCT
easat-4382	373	17	e.g.	e.g.	ADV
easat-4382	373	18	,	,	PUNCT
easat-4382	373	19	through	through	ADP
easat-4382	373	20	kubernetes	kubernete	NOUN
easat-4382	373	21	network	network	NOUN
easat-4382	373	22	policies	policy	NOUN
easat-4382	373	23	or	or	CCONJ
easat-4382	373	24	by	by	ADP
easat-4382	373	25	cordoning	cordone	VERB
easat-4382	373	26	off	off	ADP
easat-4382	373	27	nodes	node	NOUN
easat-4382	373	28	)	)	PUNCT
easat-4382	373	29	,	,	PUNCT
easat-4382	373	30	rotate	rotate	VERB
easat-4382	373	31	credentials	credential	NOUN
easat-4382	373	32	(	(	PUNCT
easat-4382	373	33	like	like	ADP
easat-4382	373	34	kubernetes	kubernete	NOUN
easat-4382	373	35	secrets	secret	NOUN
easat-4382	373	36	)	)	PUNCT
easat-4382	373	37	,	,	PUNCT
easat-4382	373	38	and	and	CCONJ
easat-4382	373	39	redeploy	redeploy	VERB
easat-4382	373	40	with	with	ADP
easat-4382	373	41	patched	patch	VERB
easat-4382	373	42	or	or	CCONJ
easat-4382	373	43	known	know	VERB
easat-4382	373	44	-	-	PUNCT
easat-4382	373	45	good	good	ADJ
easat-4382	373	46	images	image	NOUN
easat-4382	373	47	.	.	PUNCT
easat-4382	374	1	wellorchestrated	wellorchestrate	VERB
easat-4382	374	2	responses	response	NOUN
easat-4382	374	3	are	be	AUX
easat-4382	374	4	essential	essential	ADJ
easat-4382	374	5	for	for	ADP
easat-4382	374	6	meeting	meet	VERB
easat-4382	374	7	regulatory	regulatory	ADJ
easat-4382	374	8	demands	demand	NOUN
easat-4382	374	9	in	in	ADP
easat-4382	374	10	containerized	containerized	ADJ
easat-4382	374	11	environments	environment	NOUN
easat-4382	374	12	.	.	PUNCT
easat-4382	375	1	10	10	NUM
easat-4382	375	2	.	.	PUNCT
easat-4382	376	1	future	future	ADJ
easat-4382	376	2	trends	trend	NOUN
easat-4382	376	3	in	in	ADP
easat-4382	376	4	container	container	NOUN
easat-4382	376	5	security	security	NOUN
easat-4382	376	6	zero	zero	NUM
easat-4382	376	7	-	-	PUNCT
easat-4382	376	8	trust	trust	NOUN
easat-4382	376	9	architecture	architecture	NOUN
easat-4382	376	10	in	in	ADP
easat-4382	376	11	containerized	containerized	ADJ
easat-4382	376	12	environments	environment	NOUN
easat-4382	376	13	extends	extend	VERB
easat-4382	376	14	the	the	DET
easat-4382	376	15	principle	principle	NOUN
easat-4382	376	16	that	that	SCONJ
easat-4382	376	17	no	no	DET
easat-4382	376	18	network	network	NOUN
easat-4382	376	19	component	component	NOUN
easat-4382	376	20	or	or	CCONJ
easat-4382	376	21	request	request	NOUN
easat-4382	376	22	—	—	PUNCT
easat-4382	376	23	internal	internal	ADJ
easat-4382	376	24	or	or	CCONJ
easat-4382	376	25	external	external	ADJ
easat-4382	376	26	—	—	PUNCT
easat-4382	376	27	should	should	AUX
easat-4382	376	28	be	be	AUX
easat-4382	376	29	automatically	automatically	ADV
easat-4382	376	30	trusted	trust	VERB
easat-4382	376	31	.	.	PUNCT
easat-4382	377	1	traditionally	traditionally	ADV
easat-4382	377	2	,	,	PUNCT
easat-4382	377	3	once	once	ADV
easat-4382	377	4	inside	inside	ADP
easat-4382	377	5	a	a	DET
easat-4382	377	6	trusted	trust	VERB
easat-4382	377	7	network	network	NOUN
easat-4382	377	8	perimeter	perimeter	NOUN
easat-4382	377	9	,	,	PUNCT
easat-4382	377	10	systems	system	NOUN
easat-4382	377	11	might	might	AUX
easat-4382	377	12	communicate	communicate	VERB
easat-4382	377	13	with	with	ADP
easat-4382	377	14	minimal	minimal	ADJ
easat-4382	377	15	authentication	authentication	NOUN
easat-4382	377	16	or	or	CCONJ
easat-4382	377	17	encryption	encryption	NOUN
easat-4382	377	18	.	.	PUNCT
easat-4382	378	1	in	in	ADP
easat-4382	378	2	contrast	contrast	NOUN
easat-4382	378	3	,	,	PUNCT
easat-4382	378	4	a	a	DET
easat-4382	378	5	zero	zero	NUM
easat-4382	378	6	-	-	PUNCT
easat-4382	378	7	trust	trust	NOUN
easat-4382	378	8	network	network	NOUN
easat-4382	378	9	requires	require	VERB
easat-4382	378	10	continuous	continuous	ADJ
easat-4382	378	11	authentication	authentication	NOUN
easat-4382	378	12	,	,	PUNCT
easat-4382	378	13	authorization	authorization	NOUN
easat-4382	378	14	,	,	PUNCT
easat-4382	378	15	and	and	CCONJ
easat-4382	378	16	encryption	encryption	NOUN
easat-4382	378	17	for	for	ADP
easat-4382	378	18	every	every	DET
easat-4382	378	19	interaction	interaction	NOUN
easat-4382	378	20	.	.	PUNCT
easat-4382	379	1	in	in	ADP
easat-4382	379	2	container	container	NOUN
easat-4382	379	3	ecosystems	ecosystem	NOUN
easat-4382	379	4	,	,	PUNCT
easat-4382	379	5	all	all	DET
easat-4382	379	6	traffic	traffic	NOUN
easat-4382	379	7	between	between	ADP
easat-4382	379	8	containers	container	NOUN
easat-4382	379	9	,	,	PUNCT
easat-4382	379	10	microservices	microservice	NOUN
easat-4382	379	11	,	,	PUNCT
easat-4382	379	12	and	and	CCONJ
easat-4382	379	13	external	external	ADJ
easat-4382	379	14	endpoints	endpoint	NOUN
easat-4382	379	15	should	should	AUX
easat-4382	379	16	be	be	AUX
easat-4382	379	17	treated	treat	VERB
easat-4382	379	18	skeptically	skeptically	ADV
easat-4382	379	19	and	and	CCONJ
easat-4382	379	20	only	only	ADV
easat-4382	379	21	permitted	permit	VERB
easat-4382	379	22	if	if	SCONJ
easat-4382	379	23	it	it	PRON
easat-4382	379	24	passes	pass	VERB
easat-4382	379	25	strict	strict	ADJ
easat-4382	379	26	validation	validation	NOUN
easat-4382	379	27	policies	policy	NOUN
easat-4382	379	28	.	.	PUNCT
easat-4382	380	1	for	for	ADP
easat-4382	380	2	example	example	NOUN
easat-4382	380	3	,	,	PUNCT
easat-4382	380	4	two	two	NUM
easat-4382	380	5	services	service	NOUN
easat-4382	380	6	might	might	AUX
easat-4382	380	7	communicate	communicate	VERB
easat-4382	380	8	via	via	ADP
easat-4382	380	9	mutual	mutual	ADJ
easat-4382	380	10	tls	tls	PROPN
easat-4382	380	11	to	to	PART
easat-4382	380	12	verify	verify	VERB
easat-4382	380	13	the	the	DET
easat-4382	380	14	other	other	ADJ
easat-4382	380	15	’s	’s	PART
easat-4382	380	16	identity	identity	NOUN
easat-4382	380	17	before	before	ADP
easat-4382	380	18	exchanging	exchange	VERB
easat-4382	380	19	data	datum	NOUN
easat-4382	380	20	.	.	PUNCT
easat-4382	381	1	strong	strong	ADJ
easat-4382	381	2	role	role	NOUN
easat-4382	381	3	-	-	PUNCT
easat-4382	381	4	based	base	VERB
easat-4382	381	5	access	access	NOUN
easat-4382	381	6	controls	control	NOUN
easat-4382	381	7	are	be	AUX
easat-4382	381	8	also	also	ADV
easat-4382	381	9	applied	apply	VERB
easat-4382	381	10	to	to	PART
easat-4382	381	11	ensure	ensure	VERB
easat-4382	381	12	that	that	SCONJ
easat-4382	381	13	only	only	ADV
easat-4382	381	14	the	the	DET
easat-4382	381	15	correct	correct	ADJ
easat-4382	381	16	containers	container	NOUN
easat-4382	381	17	or	or	CCONJ
easat-4382	381	18	service	service	NOUN
easat-4382	381	19	accounts	account	NOUN
easat-4382	381	20	can	can	AUX
easat-4382	381	21	initiate	initiate	VERB
easat-4382	381	22	communication	communication	NOUN
easat-4382	381	23	,	,	PUNCT
easat-4382	381	24	aligning	align	VERB
easat-4382	381	25	with	with	ADP
easat-4382	381	26	the	the	DET
easat-4382	381	27	least	least	ADJ
easat-4382	381	28	privilege	privilege	NOUN
easat-4382	381	29	principle	principle	NOUN
easat-4382	381	30	.	.	PUNCT
easat-4382	382	1	zero	zero	NUM
easat-4382	382	2	-	-	PUNCT
easat-4382	382	3	trust	trust	NOUN
easat-4382	382	4	architecture	architecture	NOUN
easat-4382	382	5	in	in	ADP
easat-4382	382	6	azure	azure	NOUN
easat-4382	382	7	is	be	AUX
easat-4382	382	8	a	a	DET
easat-4382	382	9	perfect	perfect	ADJ
easat-4382	382	10	example	example	NOUN
easat-4382	382	11	of	of	ADP
easat-4382	382	12	this	this	DET
easat-4382	382	13	approach	approach	NOUN
easat-4382	382	14	[	[	X
easat-4382	382	15	44	44	NUM
easat-4382	382	16	]	]	PUNCT
easat-4382	382	17	as	as	SCONJ
easat-4382	382	18	it	it	PRON
easat-4382	382	19	offers	offer	VERB
easat-4382	382	20	a	a	DET
easat-4382	382	21	comprehensive	comprehensive	ADJ
easat-4382	382	22	framework	framework	NOUN
easat-4382	382	23	for	for	ADP
easat-4382	382	24	implementing	implement	VERB
easat-4382	382	25	the	the	DET
easat-4382	382	26	least	least	ADJ
easat-4382	382	27	-	-	PUNCT
easat-4382	382	28	privilege	privilege	NOUN
easat-4382	382	29	tenets	tenet	NOUN
easat-4382	382	30	and	and	CCONJ
easat-4382	382	31	automated	automate	VERB
easat-4382	382	32	responses	response	NOUN
easat-4382	382	33	to	to	ADP
easat-4382	382	34	incoming	incoming	ADJ
easat-4382	382	35	threats	threat	NOUN
easat-4382	382	36	.	.	PUNCT
easat-4382	383	1	this	this	DET
easat-4382	383	2	concept	concept	NOUN
easat-4382	383	3	is	be	AUX
easat-4382	383	4	particularly	particularly	ADV
easat-4382	383	5	relevant	relevant	ADJ
easat-4382	383	6	in	in	ADP
easat-4382	383	7	container	container	NOUN
easat-4382	383	8	and	and	CCONJ
easat-4382	383	9	microservices	microservice	NOUN
easat-4382	383	10	architectures	architecture	NOUN
easat-4382	383	11	,	,	PUNCT
easat-4382	383	12	where	where	SCONJ
easat-4382	383	13	multiple	multiple	ADJ
easat-4382	383	14	lightweight	lightweight	ADJ
easat-4382	383	15	services	service	NOUN
easat-4382	383	16	communicate	communicate	VERB
easat-4382	383	17	frequently	frequently	ADV
easat-4382	383	18	over	over	ADP
easat-4382	383	19	dynamic	dynamic	ADJ
easat-4382	383	20	,	,	PUNCT
easat-4382	383	21	ephemeral	ephemeral	ADJ
easat-4382	383	22	networks	network	NOUN
easat-4382	383	23	.	.	PUNCT
easat-4382	384	1	by	by	ADP
easat-4382	384	2	implementing	implement	VERB
easat-4382	384	3	zero	zero	NUM
easat-4382	384	4	-	-	PUNCT
easat-4382	384	5	trust	trust	NOUN
easat-4382	384	6	,	,	PUNCT
easat-4382	384	7	organizations	organization	NOUN
easat-4382	384	8	can	can	AUX
easat-4382	384	9	create	create	VERB
easat-4382	384	10	robust	robust	ADJ
easat-4382	384	11	micro	micro	NOUN
easat-4382	384	12	-	-	NOUN
easat-4382	384	13	segmentation	segmentation	NOUN
easat-4382	384	14	:	:	PUNCT
easat-4382	384	15	each	each	DET
easat-4382	384	16	service	service	NOUN
easat-4382	384	17	or	or	CCONJ
easat-4382	384	18	container	container	NOUN
easat-4382	384	19	runs	run	NOUN
easat-4382	384	20	in	in	ADP
easat-4382	384	21	an	an	DET
easat-4382	384	22	isolated	isolated	ADJ
easat-4382	384	23	environment	environment	NOUN
easat-4382	384	24	and	and	CCONJ
easat-4382	384	25	only	only	ADV
easat-4382	384	26	accepts	accept	VERB
easat-4382	384	27	traffic	traffic	NOUN
easat-4382	384	28	from	from	ADP
easat-4382	384	29	authorized	authorized	ADJ
easat-4382	384	30	sources	source	NOUN
easat-4382	384	31	.	.	PUNCT
easat-4382	385	1	kubernetes	kubernete	NOUN
easat-4382	385	2	network	network	NOUN
easat-4382	385	3	policies	policy	NOUN
easat-4382	385	4	or	or	CCONJ
easat-4382	385	5	service	service	NOUN
easat-4382	385	6	mesh	mesh	NOUN
easat-4382	385	7	solutions	solution	NOUN
easat-4382	385	8	(	(	PUNCT
easat-4382	385	9	e.g.	e.g.	ADV
easat-4382	385	10	,	,	PUNCT
easat-4382	385	11	istio	istio	ADJ
easat-4382	385	12	,	,	PUNCT
easat-4382	385	13	linkerd	linkerd	NOUN
easat-4382	385	14	)	)	PUNCT
easat-4382	385	15	can	can	AUX
easat-4382	385	16	enforce	enforce	VERB
easat-4382	385	17	these	these	DET
easat-4382	385	18	rules	rule	NOUN
easat-4382	385	19	,	,	PUNCT
easat-4382	385	20	denying	deny	VERB
easat-4382	385	21	all	all	DET
easat-4382	385	22	other	other	ADJ
easat-4382	385	23	traffic	traffic	NOUN
easat-4382	385	24	by	by	ADP
easat-4382	385	25	default	default	NOUN
easat-4382	385	26	.	.	PUNCT
easat-4382	386	1	for	for	ADP
easat-4382	386	2	instance	instance	NOUN
easat-4382	386	3	,	,	PUNCT
easat-4382	386	4	a	a	DET
easat-4382	386	5	frontend	frontend	NOUN
easat-4382	386	6	service	service	NOUN
easat-4382	386	7	might	might	AUX
easat-4382	386	8	only	only	ADV
easat-4382	386	9	be	be	AUX
easat-4382	386	10	permitted	permit	VERB
easat-4382	386	11	to	to	PART
easat-4382	386	12	speak	speak	VERB
easat-4382	386	13	to	to	ADP
easat-4382	386	14	a	a	DET
easat-4382	386	15	backend	backend	NOUN
easat-4382	386	16	service	service	NOUN
easat-4382	386	17	on	on	ADP
easat-4382	386	18	a	a	DET
easat-4382	386	19	specific	specific	ADJ
easat-4382	386	20	port	port	NOUN
easat-4382	386	21	,	,	PUNCT
easat-4382	386	22	and	and	CCONJ
easat-4382	386	23	all	all	DET
easat-4382	386	24	traffic	traffic	NOUN
easat-4382	386	25	is	be	AUX
easat-4382	386	26	encrypted	encrypt	VERB
easat-4382	386	27	and	and	CCONJ
easat-4382	386	28	authenticated	authenticate	VERB
easat-4382	386	29	at	at	ADP
easat-4382	386	30	the	the	DET
easat-4382	386	31	proxy	proxy	ADJ
easat-4382	386	32	layer	layer	NOUN
easat-4382	386	33	.	.	PUNCT
easat-4382	387	1	this	this	DET
easat-4382	387	2	level	level	NOUN
easat-4382	387	3	of	of	ADP
easat-4382	387	4	control	control	NOUN
easat-4382	387	5	both	both	PRON
easat-4382	387	6	limits	limit	VERB
easat-4382	387	7	the	the	DET
easat-4382	387	8	blast	blast	NOUN
easat-4382	387	9	radius	radius	NOUN
easat-4382	387	10	of	of	ADP
easat-4382	387	11	a	a	DET
easat-4382	387	12	potential	potential	ADJ
easat-4382	387	13	breach	breach	NOUN
easat-4382	387	14	and	and	CCONJ
easat-4382	387	15	ensures	ensure	VERB
easat-4382	387	16	regulatory	regulatory	ADJ
easat-4382	387	17	compliance	compliance	NOUN
easat-4382	387	18	—	—	PUNCT
easat-4382	387	19	every	every	DET
easat-4382	387	20	request	request	NOUN
easat-4382	387	21	or	or	CCONJ
easat-4382	387	22	connection	connection	NOUN
easat-4382	387	23	attempt	attempt	NOUN
easat-4382	387	24	is	be	AUX
easat-4382	387	25	logged	log	VERB
easat-4382	387	26	,	,	PUNCT
easat-4382	387	27	monitored	monitor	VERB
easat-4382	387	28	,	,	PUNCT
easat-4382	387	29	and	and	CCONJ
easat-4382	387	30	verified	verify	VERB
easat-4382	387	31	.	.	PUNCT
easat-4382	388	1	serverless	serverless	NOUN
easat-4382	388	2	computing	compute	VERB
easat-4382	388	3	abstracts	abstract	NOUN
easat-4382	388	4	away	away	ADV
easat-4382	388	5	the	the	DET
easat-4382	388	6	notion	notion	NOUN
easat-4382	388	7	of	of	ADP
easat-4382	388	8	managing	manage	VERB
easat-4382	388	9	servers	server	NOUN
easat-4382	388	10	,	,	PUNCT
easat-4382	388	11	focusing	focus	VERB
easat-4382	388	12	instead	instead	ADV
easat-4382	388	13	on	on	ADP
easat-4382	388	14	running	run	VERB
easat-4382	388	15	code	code	NOUN
easat-4382	388	16	in	in	ADP
easat-4382	388	17	response	response	NOUN
easat-4382	388	18	to	to	ADP
easat-4382	388	19	events	event	NOUN
easat-4382	388	20	or	or	CCONJ
easat-4382	388	21	http	http	ADJ
easat-4382	388	22	requests	request	NOUN
easat-4382	388	23	.	.	PUNCT
easat-4382	389	1	while	while	SCONJ
easat-4382	389	2	some	some	DET
easat-4382	389	3	implementations	implementation	NOUN
easat-4382	389	4	of	of	ADP
easat-4382	389	5	serverless	serverless	NOUN
easat-4382	389	6	(	(	PUNCT
easat-4382	389	7	like	like	ADP
easat-4382	389	8	aws	aw	NOUN
easat-4382	389	9	lambda	lambda	NOUN
easat-4382	389	10	[	[	X
easat-4382	389	11	45	45	NUM
easat-4382	389	12	]	]	PUNCT
easat-4382	389	13	or	or	CCONJ
easat-4382	389	14	azure	azure	NOUN
easat-4382	389	15	functions	function	NOUN
easat-4382	389	16	[	[	X
easat-4382	389	17	46	46	NUM
easat-4382	389	18	]	]	PUNCT
easat-4382	389	19	)	)	PUNCT
easat-4382	389	20	appear	appear	VERB
easat-4382	389	21	not	not	PART
easat-4382	389	22	to	to	PART
easat-4382	389	23	involve	involve	VERB
easat-4382	389	24	containers	container	NOUN
easat-4382	389	25	to	to	ADP
easat-4382	389	26	the	the	DET
easat-4382	389	27	end	end	NOUN
easat-4382	389	28	user	user	NOUN
easat-4382	389	29	,	,	PUNCT
easat-4382	389	30	most	most	ADJ
easat-4382	389	31	platforms	platform	NOUN
easat-4382	389	32	under	under	ADP
easat-4382	389	33	the	the	DET
easat-4382	389	34	hood	hood	NOUN
easat-4382	389	35	use	use	VERB
easat-4382	389	36	container	container	NOUN
easat-4382	389	37	-	-	PUNCT
easat-4382	389	38	like	like	ADJ
easat-4382	389	39	environments	environment	NOUN
easat-4382	389	40	or	or	CCONJ
easat-4382	389	41	sandboxed	sandboxe	VERB
easat-4382	389	42	runtimes	runtime	NOUN
easat-4382	389	43	to	to	PART
easat-4382	389	44	isolate	isolate	VERB
easat-4382	389	45	individual	individual	ADJ
easat-4382	389	46	functions	function	NOUN
easat-4382	389	47	.	.	PUNCT
easat-4382	390	1	this	this	DET
easat-4382	390	2	approach	approach	NOUN
easat-4382	390	3	eliminates	eliminate	VERB
easat-4382	390	4	much	much	ADJ
easat-4382	390	5	of	of	ADP
easat-4382	390	6	the	the	DET
easat-4382	390	7	infrastructure	infrastructure	NOUN
easat-4382	390	8	provisioning	provisioning	NOUN
easat-4382	390	9	and	and	CCONJ
easat-4382	390	10	patch	patch	NOUN
easat-4382	390	11	management	management	NOUN
easat-4382	390	12	responsibilities	responsibility	NOUN
easat-4382	390	13	from	from	ADP
easat-4382	390	14	developers	developer	NOUN
easat-4382	390	15	;	;	PUNCT
easat-4382	390	16	however	however	ADV
easat-4382	390	17	,	,	PUNCT
easat-4382	390	18	it	it	PRON
easat-4382	390	19	also	also	ADV
easat-4382	390	20	centralizes	centralize	VERB
easat-4382	390	21	these	these	DET
easat-4382	390	22	tasks	task	NOUN
easat-4382	390	23	within	within	ADP
easat-4382	390	24	the	the	DET
easat-4382	390	25	service	service	NOUN
easat-4382	390	26	provider	provider	NOUN
easat-4382	390	27	’s	’s	PART
easat-4382	390	28	platform	platform	NOUN
easat-4382	390	29	.	.	PUNCT
easat-4382	391	1	from	from	ADP
easat-4382	391	2	a	a	DET
easat-4382	391	3	security	security	NOUN
easat-4382	391	4	standpoint	standpoint	NOUN
easat-4382	391	5	,	,	PUNCT
easat-4382	391	6	organizations	organization	NOUN
easat-4382	391	7	must	must	AUX
easat-4382	391	8	carefully	carefully	ADV
easat-4382	391	9	understand	understand	VERB
easat-4382	391	10	how	how	SCONJ
easat-4382	391	11	the	the	DET
easat-4382	391	12	serverless	serverless	NOUN
easat-4382	391	13	provider	provider	NOUN
easat-4382	391	14	handles	handle	VERB
easat-4382	391	15	runtime	runtime	NOUN
easat-4382	391	16	isolation	isolation	NOUN
easat-4382	391	17	,	,	PUNCT
easat-4382	391	18	updating	updating	NOUN
easat-4382	391	19	of	of	ADP
easat-4382	391	20	underlying	underlie	VERB
easat-4382	391	21	container	container	NOUN
easat-4382	391	22	images	image	NOUN
easat-4382	391	23	or	or	CCONJ
easat-4382	391	24	runtimes	runtime	NOUN
easat-4382	391	25	,	,	PUNCT
easat-4382	391	26	and	and	CCONJ
easat-4382	391	27	the	the	DET
easat-4382	391	28	data	data	NOUN
easat-4382	391	29	flow	flow	NOUN
easat-4382	391	30	between	between	ADP
easat-4382	391	31	serverless	serverless	NOUN
easat-4382	391	32	functions	function	NOUN
easat-4382	391	33	and	and	CCONJ
easat-4382	391	34	other	other	ADJ
easat-4382	391	35	resources	resource	NOUN
easat-4382	391	36	.	.	PUNCT
easat-4382	392	1	for	for	ADP
easat-4382	392	2	example	example	NOUN
easat-4382	392	3	,	,	PUNCT
easat-4382	392	4	a	a	DET
easat-4382	392	5	function	function	NOUN
easat-4382	392	6	with	with	ADP
easat-4382	392	7	misconfigured	misconfigured	ADJ
easat-4382	392	8	permissions	permission	NOUN
easat-4382	392	9	in	in	ADP
easat-4382	392	10	aws	aws	NOUN
easat-4382	392	11	lambda	lambda	NOUN
easat-4382	392	12	could	could	AUX
easat-4382	392	13	inadvertently	inadvertently	ADV
easat-4382	392	14	grant	grant	VERB
easat-4382	392	15	attackers	attacker	NOUN
easat-4382	392	16	access	access	NOUN
easat-4382	392	17	to	to	ADP
easat-4382	392	18	a	a	DET
easat-4382	392	19	broader	broad	ADJ
easat-4382	392	20	set	set	NOUN
easat-4382	392	21	of	of	ADP
easat-4382	392	22	resources	resource	NOUN
easat-4382	392	23	if	if	SCONJ
easat-4382	392	24	its	its	PRON
easat-4382	392	25	aws	aws	NOUN
easat-4382	392	26	identity	identity	NOUN
easat-4382	392	27	and	and	CCONJ
easat-4382	392	28	access	access	NOUN
easat-4382	392	29	management	management	NOUN
easat-4382	392	30	(	(	PUNCT
easat-4382	392	31	iam	iam	PROPN
easat-4382	392	32	)	)	PUNCT
easat-4382	392	33	roles	role	NOUN
easat-4382	392	34	are	be	AUX
easat-4382	392	35	overly	overly	ADV
easat-4382	392	36	permissive	permissive	ADJ
easat-4382	392	37	.	.	PUNCT
easat-4382	393	1	1259	1259	NUM
easat-4382	393	2	edelweiss	edelweiss	PROPN
easat-4382	393	3	applied	apply	VERB
easat-4382	393	4	science	science	NOUN
easat-4382	393	5	and	and	CCONJ
easat-4382	393	6	technology	technology	NOUN
easat-4382	393	7	issn	issn	PROPN
easat-4382	393	8	:	:	PUNCT
easat-4382	393	9	2576	2576	NUM
easat-4382	393	10	-	-	SYM
easat-4382	393	11	8484	8484	NUM
easat-4382	393	12	vol	vol	NOUN
easat-4382	393	13	.	.	PROPN
easat-4382	394	1	9	9	NUM
easat-4382	394	2	,	,	PUNCT
easat-4382	394	3	no	no	INTJ
easat-4382	394	4	.	.	NOUN
easat-4382	394	5	1	1	NUM
easat-4382	394	6	:	:	PUNCT
easat-4382	394	7	1243	1243	NUM
easat-4382	394	8	-	-	SYM
easat-4382	394	9	1261	1261	NUM
easat-4382	394	10	,	,	PUNCT
easat-4382	394	11	2025	2025	NUM
easat-4382	394	12	doi	doi	NOUN
easat-4382	394	13	:	:	PUNCT
easat-4382	394	14	10.55214/25768484.v9i1.4382	10.55214/25768484.v9i1.4382	NUM
easat-4382	394	15	©	©	PROPN
easat-4382	394	16	2025	2025	NUM
easat-4382	394	17	by	by	ADP
easat-4382	394	18	the	the	DET
easat-4382	394	19	authors	author	NOUN
easat-4382	394	20	;	;	PUNCT
easat-4382	394	21	licensee	licensee	PROPN
easat-4382	394	22	learning	learn	VERB
easat-4382	394	23	gate	gate	NOUN
easat-4382	394	24	despite	despite	SCONJ
easat-4382	394	25	the	the	DET
easat-4382	394	26	convenience	convenience	NOUN
easat-4382	394	27	of	of	ADP
easat-4382	394	28	being	be	AUX
easat-4382	394	29	serverless	serverless	NOUN
easat-4382	394	30	,	,	PUNCT
easat-4382	394	31	there	there	PRON
easat-4382	394	32	are	be	VERB
easat-4382	394	33	many	many	ADJ
easat-4382	394	34	security	security	NOUN
easat-4382	394	35	challenges	challenge	NOUN
easat-4382	394	36	.	.	PUNCT
easat-4382	395	1	functions	function	NOUN
easat-4382	395	2	are	be	AUX
easat-4382	395	3	often	often	ADV
easat-4382	395	4	event	event	NOUN
easat-4382	395	5	-	-	PUNCT
easat-4382	395	6	driven	drive	VERB
easat-4382	395	7	and	and	CCONJ
easat-4382	395	8	short	short	ADV
easat-4382	395	9	-	-	PUNCT
easat-4382	395	10	lived	live	VERB
easat-4382	395	11	,	,	PUNCT
easat-4382	395	12	complicating	complicate	VERB
easat-4382	395	13	logging	logging	NOUN
easat-4382	395	14	and	and	CCONJ
easat-4382	395	15	incident	incident	NOUN
easat-4382	395	16	response	response	NOUN
easat-4382	395	17	,	,	PUNCT
easat-4382	395	18	as	as	SCONJ
easat-4382	395	19	forensics	forensic	NOUN
easat-4382	395	20	data	datum	NOUN
easat-4382	395	21	might	might	AUX
easat-4382	395	22	vanish	vanish	VERB
easat-4382	395	23	quickly	quickly	ADV
easat-4382	395	24	.	.	PUNCT
easat-4382	396	1	when	when	SCONJ
easat-4382	396	2	functions	function	NOUN
easat-4382	396	3	run	run	VERB
easat-4382	396	4	in	in	ADP
easat-4382	396	5	containers	container	NOUN
easat-4382	396	6	(	(	PUNCT
easat-4382	396	7	as	as	ADP
easat-4382	396	8	in	in	ADP
easat-4382	396	9	specific	specific	ADJ
easat-4382	396	10	“	"	PUNCT
easat-4382	396	11	serverless	serverless	NOUN
easat-4382	396	12	containers	container	NOUN
easat-4382	396	13	”	"	PUNCT
easat-4382	396	14	offerings	offering	NOUN
easat-4382	396	15	like	like	ADP
easat-4382	396	16	aws	aw	NOUN
easat-4382	396	17	fargate	fargate	VERB
easat-4382	396	18	[	[	X
easat-4382	396	19	47	47	NUM
easat-4382	396	20	]	]	PUNCT
easat-4382	396	21	or	or	CCONJ
easat-4382	396	22	google	google	PROPN
easat-4382	396	23	cloud	cloud	NOUN
easat-4382	396	24	run	run	NOUN
easat-4382	397	1	[	[	X
easat-4382	397	2	48	48	NUM
easat-4382	397	3	]	]	SYM
easat-4382	397	4	)	)	PUNCT
easat-4382	397	5	,	,	PUNCT
easat-4382	397	6	organizations	organization	NOUN
easat-4382	397	7	inherit	inherit	VERB
easat-4382	397	8	many	many	ADJ
easat-4382	397	9	of	of	ADP
easat-4382	397	10	the	the	DET
easat-4382	397	11	same	same	ADJ
easat-4382	397	12	concerns	concern	NOUN
easat-4382	397	13	as	as	ADP
easat-4382	397	14	traditional	traditional	ADJ
easat-4382	397	15	container	container	NOUN
easat-4382	397	16	security	security	NOUN
easat-4382	397	17	,	,	PUNCT
easat-4382	397	18	such	such	ADJ
easat-4382	397	19	as	as	ADP
easat-4382	397	20	image	image	NOUN
easat-4382	397	21	vulnerabilities	vulnerability	NOUN
easat-4382	397	22	,	,	PUNCT
easat-4382	397	23	runtime	runtime	NOUN
easat-4382	397	24	isolation	isolation	NOUN
easat-4382	397	25	,	,	PUNCT
easat-4382	397	26	and	and	CCONJ
easat-4382	397	27	network	network	NOUN
easat-4382	397	28	segmentation	segmentation	NOUN
easat-4382	397	29	—	—	PUNCT
easat-4382	397	30	albeit	albeit	SCONJ
easat-4382	397	31	managed	manage	VERB
easat-4382	397	32	or	or	CCONJ
easat-4382	397	33	partially	partially	ADV
easat-4382	397	34	managed	manage	VERB
easat-4382	397	35	by	by	ADP
easat-4382	397	36	the	the	DET
easat-4382	397	37	cloud	cloud	NOUN
easat-4382	397	38	provider	provider	NOUN
easat-4382	397	39	.	.	PUNCT
easat-4382	398	1	implementing	implement	VERB
easat-4382	398	2	strict	strict	ADJ
easat-4382	398	3	access	access	NOUN
easat-4382	398	4	policies	policy	NOUN
easat-4382	398	5	(	(	PUNCT
easat-4382	398	6	e.g.	e.g.	ADV
easat-4382	398	7	,	,	PUNCT
easat-4382	398	8	the	the	DET
easat-4382	398	9	principle	principle	NOUN
easat-4382	398	10	of	of	ADP
easat-4382	398	11	least	least	ADJ
easat-4382	398	12	privilege	privilege	NOUN
easat-4382	398	13	)	)	PUNCT
easat-4382	398	14	,	,	PUNCT
easat-4382	398	15	scanning	scan	VERB
easat-4382	398	16	container	container	NOUN
easat-4382	398	17	images	image	NOUN
easat-4382	398	18	for	for	ADP
easat-4382	398	19	serverless	serverless	NOUN
easat-4382	398	20	deployments	deployment	NOUN
easat-4382	398	21	,	,	PUNCT
easat-4382	398	22	and	and	CCONJ
easat-4382	398	23	adopting	adopt	VERB
easat-4382	398	24	strong	strong	ADJ
easat-4382	398	25	observability	observability	NOUN
easat-4382	398	26	practices	practice	NOUN
easat-4382	398	27	with	with	ADP
easat-4382	398	28	centralized	centralized	ADJ
easat-4382	398	29	logging	logging	NOUN
easat-4382	398	30	and	and	CCONJ
easat-4382	398	31	real	real	ADJ
easat-4382	398	32	-	-	PUNCT
easat-4382	398	33	time	time	NOUN
easat-4382	398	34	alerting	alerting	NOUN
easat-4382	398	35	can	can	AUX
easat-4382	398	36	help	help	VERB
easat-4382	398	37	mitigate	mitigate	VERB
easat-4382	398	38	these	these	DET
easat-4382	398	39	new	new	ADJ
easat-4382	398	40	risks	risk	NOUN
easat-4382	398	41	.	.	PUNCT
easat-4382	399	1	ai	ai	VERB
easat-4382	399	2	and	and	CCONJ
easat-4382	399	3	machine	machine	NOUN
easat-4382	399	4	learning	learning	NOUN
easat-4382	399	5	(	(	PUNCT
easat-4382	399	6	ai	ai	VERB
easat-4382	399	7	/	/	SYM
easat-4382	399	8	ml	ml	VERB
easat-4382	399	9	)	)	PUNCT
easat-4382	399	10	are	be	AUX
easat-4382	399	11	increasingly	increasingly	ADV
easat-4382	399	12	playing	play	VERB
easat-4382	399	13	a	a	DET
easat-4382	399	14	transformative	transformative	ADJ
easat-4382	399	15	role	role	NOUN
easat-4382	399	16	in	in	ADP
easat-4382	399	17	container	container	NOUN
easat-4382	399	18	security	security	NOUN
easat-4382	399	19	,	,	PUNCT
easat-4382	399	20	allowing	allow	VERB
easat-4382	399	21	organizations	organization	NOUN
easat-4382	399	22	to	to	PART
easat-4382	399	23	detect	detect	VERB
easat-4382	399	24	and	and	CCONJ
easat-4382	399	25	prevent	prevent	VERB
easat-4382	399	26	breaches	breach	NOUN
easat-4382	399	27	by	by	ADP
easat-4382	399	28	analyzing	analyze	VERB
easat-4382	399	29	large	large	ADJ
easat-4382	399	30	datasets	dataset	NOUN
easat-4382	399	31	and	and	CCONJ
easat-4382	399	32	identifying	identify	VERB
easat-4382	399	33	patterns	pattern	NOUN
easat-4382	399	34	indicative	indicative	ADJ
easat-4382	399	35	of	of	ADP
easat-4382	399	36	malicious	malicious	ADJ
easat-4382	399	37	behavior	behavior	NOUN
easat-4382	399	38	.	.	PUNCT
easat-4382	400	1	traditional	traditional	ADJ
easat-4382	400	2	security	security	NOUN
easat-4382	400	3	solutions	solution	NOUN
easat-4382	400	4	rely	rely	VERB
easat-4382	400	5	heavily	heavily	ADV
easat-4382	400	6	on	on	ADP
easat-4382	400	7	signature	signature	NOUN
easat-4382	400	8	-	-	PUNCT
easat-4382	400	9	based	base	VERB
easat-4382	400	10	detection	detection	NOUN
easat-4382	400	11	and	and	CCONJ
easat-4382	400	12	known	know	VERB
easat-4382	400	13	threat	threat	NOUN
easat-4382	400	14	intelligence	intelligence	NOUN
easat-4382	400	15	,	,	PUNCT
easat-4382	400	16	which	which	PRON
easat-4382	400	17	can	can	AUX
easat-4382	400	18	adapt	adapt	VERB
easat-4382	400	19	slowly	slowly	ADV
easat-4382	400	20	to	to	ADP
easat-4382	400	21	zero	zero	NUM
easat-4382	400	22	-	-	PUNCT
easat-4382	400	23	day	day	NOUN
easat-4382	400	24	exploits	exploit	NOUN
easat-4382	400	25	or	or	CCONJ
easat-4382	400	26	new	new	ADJ
easat-4382	400	27	attack	attack	NOUN
easat-4382	400	28	vectors	vector	NOUN
easat-4382	400	29	.	.	PUNCT
easat-4382	401	1	ai	ai	VERB
easat-4382	401	2	/	/	SYM
easat-4382	401	3	ml	ml	NOUN
easat-4382	401	4	-	-	PUNCT
easat-4382	401	5	driven	drive	VERB
easat-4382	401	6	solutions	solution	NOUN
easat-4382	401	7	,	,	PUNCT
easat-4382	401	8	on	on	ADP
easat-4382	401	9	the	the	DET
easat-4382	401	10	other	other	ADJ
easat-4382	401	11	hand	hand	NOUN
easat-4382	401	12	,	,	PUNCT
easat-4382	401	13	use	use	VERB
easat-4382	401	14	anomaly	anomaly	NOUN
easat-4382	401	15	detection	detection	NOUN
easat-4382	401	16	algorithms	algorithm	NOUN
easat-4382	401	17	or	or	CCONJ
easat-4382	401	18	behavior	behavior	NOUN
easat-4382	401	19	-	-	PUNCT
easat-4382	401	20	based	base	VERB
easat-4382	401	21	models	model	NOUN
easat-4382	401	22	to	to	PART
easat-4382	401	23	learn	learn	VERB
easat-4382	401	24	what	what	PRON
easat-4382	401	25	“	"	PUNCT
easat-4382	401	26	normal	normal	ADJ
easat-4382	401	27	”	"	PUNCT
easat-4382	401	28	looks	look	VERB
easat-4382	401	29	like	like	ADP
easat-4382	401	30	for	for	ADP
easat-4382	401	31	containerized	containerized	ADJ
easat-4382	401	32	applications	application	NOUN
easat-4382	401	33	—	—	PUNCT
easat-4382	401	34	such	such	ADJ
easat-4382	401	35	as	as	ADP
easat-4382	401	36	expected	expect	VERB
easat-4382	401	37	process	process	NOUN
easat-4382	401	38	trees	tree	NOUN
easat-4382	401	39	,	,	PUNCT
easat-4382	401	40	network	network	NOUN
easat-4382	401	41	flows	flow	NOUN
easat-4382	401	42	,	,	PUNCT
easat-4382	401	43	and	and	CCONJ
easat-4382	401	44	resource	resource	NOUN
easat-4382	401	45	usage	usage	NOUN
easat-4382	401	46	.	.	PUNCT
easat-4382	402	1	when	when	SCONJ
easat-4382	402	2	deviations	deviation	NOUN
easat-4382	402	3	from	from	ADP
easat-4382	402	4	these	these	DET
easat-4382	402	5	learned	learn	VERB
easat-4382	402	6	baselines	baseline	NOUN
easat-4382	402	7	occur	occur	VERB
easat-4382	402	8	,	,	PUNCT
easat-4382	402	9	the	the	DET
easat-4382	402	10	system	system	NOUN
easat-4382	402	11	can	can	AUX
easat-4382	402	12	issue	issue	VERB
easat-4382	402	13	alerts	alert	NOUN
easat-4382	402	14	,	,	PUNCT
easat-4382	402	15	trigger	trigger	NOUN
easat-4382	402	16	automated	automate	VERB
easat-4382	402	17	responses	response	NOUN
easat-4382	402	18	,	,	PUNCT
easat-4382	402	19	or	or	CCONJ
easat-4382	402	20	quarantine	quarantine	VERB
easat-4382	402	21	suspicious	suspicious	ADJ
easat-4382	402	22	containers	container	NOUN
easat-4382	402	23	.	.	PUNCT
easat-4382	403	1	tools	tool	NOUN
easat-4382	403	2	like	like	ADP
easat-4382	403	3	aqua	aqua	NOUN
easat-4382	403	4	security	security	NOUN
easat-4382	403	5	[	[	X
easat-4382	403	6	49	49	NUM
easat-4382	403	7	]	]	PUNCT
easat-4382	403	8	and	and	CCONJ
easat-4382	403	9	palo	palo	PROPN
easat-4382	403	10	alto	alto	PROPN
easat-4382	403	11	networks	networks	PROPN
easat-4382	403	12	prisma	prisma	PROPN
easat-4382	403	13	cloud	cloud	NOUN
easat-4382	404	1	[	[	X
easat-4382	404	2	50	50	NUM
easat-4382	404	3	]	]	PUNCT
easat-4382	404	4	increasingly	increasingly	ADV
easat-4382	404	5	integrate	integrate	VERB
easat-4382	404	6	ai	ai	ADJ
easat-4382	404	7	-	-	PUNCT
easat-4382	404	8	powered	powered	ADJ
easat-4382	404	9	functionality	functionality	NOUN
easat-4382	404	10	,	,	PUNCT
easat-4382	404	11	scanning	scan	VERB
easat-4382	404	12	container	container	NOUN
easat-4382	404	13	images	image	NOUN
easat-4382	404	14	more	more	ADV
easat-4382	404	15	efficiently	efficiently	ADV
easat-4382	404	16	for	for	ADP
easat-4382	404	17	hidden	hide	VERB
easat-4382	404	18	malware	malware	NOUN
easat-4382	404	19	and	and	CCONJ
easat-4382	404	20	tracking	tracking	NOUN
easat-4382	404	21	behavior	behavior	NOUN
easat-4382	404	22	in	in	ADP
easat-4382	404	23	real	real	ADJ
easat-4382	404	24	-	-	PUNCT
easat-4382	404	25	time	time	NOUN
easat-4382	404	26	to	to	PART
easat-4382	404	27	spot	spot	VERB
easat-4382	404	28	irregularities	irregularity	NOUN
easat-4382	404	29	that	that	SCONJ
easat-4382	404	30	signature	signature	NOUN
easat-4382	404	31	-	-	PUNCT
easat-4382	404	32	based	base	VERB
easat-4382	404	33	methods	method	NOUN
easat-4382	404	34	may	may	AUX
easat-4382	404	35	miss	miss	VERB
easat-4382	404	36	.	.	PUNCT
easat-4382	405	1	depending	depend	VERB
easat-4382	405	2	on	on	ADP
easat-4382	405	3	the	the	DET
easat-4382	405	4	environment	environment	NOUN
easat-4382	405	5	,	,	PUNCT
easat-4382	405	6	tools	tool	NOUN
easat-4382	405	7	like	like	ADP
easat-4382	405	8	microsoft	microsoft	PROPN
easat-4382	405	9	sentinel	sentinel	PROPN
easat-4382	405	10	and	and	CCONJ
easat-4382	405	11	logic	logic	NOUN
easat-4382	405	12	apps	app	NOUN
easat-4382	405	13	might	might	AUX
easat-4382	405	14	be	be	AUX
easat-4382	405	15	used	use	VERB
easat-4382	405	16	to	to	PART
easat-4382	405	17	improve	improve	VERB
easat-4382	405	18	container	container	NOUN
easat-4382	405	19	security	security	NOUN
easat-4382	405	20	[	[	X
easat-4382	405	21	50	50	NUM
easat-4382	405	22	]	]	PUNCT
easat-4382	405	23	if	if	SCONJ
easat-4382	405	24	containers	container	NOUN
easat-4382	405	25	are	be	AUX
easat-4382	405	26	running	run	VERB
easat-4382	405	27	in	in	ADP
easat-4382	405	28	microsoft	microsoft	PROPN
easat-4382	405	29	azure	azure	NOUN
easat-4382	405	30	.	.	PUNCT
easat-4382	406	1	another	another	DET
easat-4382	406	2	use	use	NOUN
easat-4382	406	3	case	case	NOUN
easat-4382	406	4	of	of	ADP
easat-4382	406	5	ai	ai	NOUN
easat-4382	406	6	/	/	SYM
easat-4382	406	7	ml	ml	NOUN
easat-4382	406	8	in	in	ADP
easat-4382	406	9	container	container	NOUN
easat-4382	406	10	security	security	NOUN
easat-4382	406	11	is	be	AUX
easat-4382	406	12	predictive	predictive	ADJ
easat-4382	406	13	analytics	analytic	NOUN
easat-4382	406	14	that	that	PRON
easat-4382	406	15	can	can	AUX
easat-4382	406	16	prioritize	prioritize	VERB
easat-4382	406	17	and	and	CCONJ
easat-4382	406	18	remediate	remediate	VERB
easat-4382	406	19	vulnerabilities	vulnerability	NOUN
easat-4382	406	20	.	.	PUNCT
easat-4382	407	1	for	for	ADP
easat-4382	407	2	example	example	NOUN
easat-4382	407	3	,	,	PUNCT
easat-4382	407	4	when	when	SCONJ
easat-4382	407	5	vulnerability	vulnerability	NOUN
easat-4382	407	6	scanners	scanner	NOUN
easat-4382	407	7	feed	feed	VERB
easat-4382	407	8	data	datum	NOUN
easat-4382	407	9	into	into	ADP
easat-4382	407	10	an	an	DET
easat-4382	407	11	ai	ai	NOUN
easat-4382	407	12	model	model	NOUN
easat-4382	407	13	,	,	PUNCT
easat-4382	407	14	the	the	DET
easat-4382	407	15	system	system	NOUN
easat-4382	407	16	can	can	AUX
easat-4382	407	17	cross	cross	VERB
easat-4382	407	18	-	-	NOUN
easat-4382	407	19	reference	reference	ADJ
easat-4382	407	20	findings	finding	NOUN
easat-4382	407	21	with	with	ADP
easat-4382	407	22	exploit	exploit	NOUN
easat-4382	407	23	databases	database	NOUN
easat-4382	407	24	,	,	PUNCT
easat-4382	407	25	code	code	NOUN
easat-4382	407	26	version	version	NOUN
easat-4382	407	27	histories	history	NOUN
easat-4382	407	28	,	,	PUNCT
easat-4382	407	29	and	and	CCONJ
easat-4382	407	30	system	system	NOUN
easat-4382	407	31	metadata	metadata	VERB
easat-4382	407	32	to	to	PART
easat-4382	407	33	assess	assess	VERB
easat-4382	407	34	the	the	DET
easat-4382	407	35	likelihood	likelihood	NOUN
easat-4382	407	36	of	of	ADP
easat-4382	407	37	exploiting	exploit	VERB
easat-4382	407	38	vulnerability	vulnerability	NOUN
easat-4382	407	39	.	.	PUNCT
easat-4382	408	1	this	this	PRON
easat-4382	408	2	helps	help	VERB
easat-4382	408	3	security	security	NOUN
easat-4382	408	4	and	and	CCONJ
easat-4382	408	5	devops	devop	NOUN
easat-4382	408	6	teams	team	NOUN
easat-4382	408	7	focus	focus	VERB
easat-4382	408	8	on	on	ADP
easat-4382	408	9	the	the	DET
easat-4382	408	10	most	most	ADV
easat-4382	408	11	critical	critical	ADJ
easat-4382	408	12	issues	issue	NOUN
easat-4382	408	13	,	,	PUNCT
easat-4382	408	14	improving	improve	VERB
easat-4382	408	15	response	response	NOUN
easat-4382	408	16	times	time	NOUN
easat-4382	408	17	and	and	CCONJ
easat-4382	408	18	resource	resource	NOUN
easat-4382	408	19	allocation	allocation	NOUN
easat-4382	408	20	.	.	PUNCT
easat-4382	409	1	moreover	moreover	ADV
easat-4382	409	2	,	,	PUNCT
easat-4382	409	3	ai	ai	AUX
easat-4382	409	4	can	can	AUX
easat-4382	409	5	help	help	AUX
easat-4382	409	6	correlate	correlate	VERB
easat-4382	409	7	multiple	multiple	ADJ
easat-4382	409	8	low	low	ADJ
easat-4382	409	9	-	-	PUNCT
easat-4382	409	10	level	level	NOUN
easat-4382	409	11	indicators	indicator	NOUN
easat-4382	409	12	—	—	PUNCT
easat-4382	409	13	such	such	ADJ
easat-4382	409	14	as	as	ADP
easat-4382	409	15	elevated	elevated	ADJ
easat-4382	409	16	memory	memory	NOUN
easat-4382	409	17	usage	usage	NOUN
easat-4382	409	18	in	in	ADP
easat-4382	409	19	one	one	NUM
easat-4382	409	20	container	container	NOUN
easat-4382	409	21	,	,	PUNCT
easat-4382	409	22	unexpected	unexpected	ADJ
easat-4382	409	23	network	network	NOUN
easat-4382	409	24	connections	connection	NOUN
easat-4382	409	25	in	in	ADP
easat-4382	409	26	another	another	PRON
easat-4382	409	27	,	,	PUNCT
easat-4382	409	28	and	and	CCONJ
easat-4382	409	29	sudden	sudden	ADJ
easat-4382	409	30	spikes	spike	NOUN
easat-4382	409	31	in	in	ADP
easat-4382	409	32	cpu	cpu	NOUN
easat-4382	409	33	across	across	ADP
easat-4382	409	34	a	a	DET
easat-4382	409	35	third	third	NOUN
easat-4382	409	36	—	—	PUNCT
easat-4382	409	37	to	to	PART
easat-4382	409	38	detect	detect	VERB
easat-4382	409	39	a	a	DET
easat-4382	409	40	coordinated	coordinate	VERB
easat-4382	409	41	attack	attack	NOUN
easat-4382	409	42	campaign	campaign	NOUN
easat-4382	409	43	.	.	PUNCT
easat-4382	410	1	by	by	ADP
easat-4382	410	2	continuously	continuously	ADV
easat-4382	410	3	learning	learn	VERB
easat-4382	410	4	from	from	ADP
easat-4382	410	5	real	real	ADJ
easat-4382	410	6	-	-	PUNCT
easat-4382	410	7	world	world	NOUN
easat-4382	410	8	container	container	NOUN
easat-4382	410	9	usage	usage	NOUN
easat-4382	410	10	and	and	CCONJ
easat-4382	410	11	threat	threat	NOUN
easat-4382	410	12	data	datum	NOUN
easat-4382	410	13	,	,	PUNCT
easat-4382	410	14	ai	ai	NOUN
easat-4382	410	15	-	-	PUNCT
easat-4382	410	16	powered	power	VERB
easat-4382	410	17	solutions	solution	NOUN
easat-4382	410	18	become	become	VERB
easat-4382	410	19	increasingly	increasingly	ADV
easat-4382	410	20	“	"	PUNCT
easat-4382	410	21	smarter	smart	ADJ
easat-4382	410	22	”	"	PUNCT
easat-4382	410	23	at	at	ADP
easat-4382	410	24	spotting	spot	VERB
easat-4382	410	25	known	know	VERB
easat-4382	410	26	and	and	CCONJ
easat-4382	410	27	unknown	unknown	ADJ
easat-4382	410	28	threats	threat	NOUN
easat-4382	410	29	while	while	SCONJ
easat-4382	410	30	strengthening	strengthen	VERB
easat-4382	410	31	an	an	DET
easat-4382	410	32	organization	organization	NOUN
easat-4382	410	33	’s	’s	PART
easat-4382	410	34	resilience	resilience	NOUN
easat-4382	410	35	against	against	ADP
easat-4382	410	36	security	security	NOUN
easat-4382	410	37	breaches	breach	NOUN
easat-4382	410	38	.	.	PUNCT
easat-4382	411	1	11	11	NUM
easat-4382	411	2	.	.	PUNCT
easat-4382	412	1	conclusions	conclusion	NOUN
easat-4382	412	2	container	container	NOUN
easat-4382	412	3	security	security	NOUN
easat-4382	412	4	is	be	AUX
easat-4382	412	5	essential	essential	ADJ
easat-4382	412	6	to	to	ADP
easat-4382	412	7	modern	modern	ADJ
easat-4382	412	8	application	application	NOUN
easat-4382	412	9	development	development	NOUN
easat-4382	412	10	,	,	PUNCT
easat-4382	412	11	especially	especially	ADV
easat-4382	412	12	given	give	VERB
easat-4382	412	13	the	the	DET
easat-4382	412	14	increasing	increase	VERB
easat-4382	412	15	adoption	adoption	NOUN
easat-4382	412	16	of	of	ADP
easat-4382	412	17	microservices	microservice	NOUN
easat-4382	412	18	architectures	architecture	NOUN
easat-4382	412	19	and	and	CCONJ
easat-4382	412	20	devops	devop	NOUN
easat-4382	412	21	practices	practice	NOUN
easat-4382	412	22	.	.	PUNCT
easat-4382	413	1	this	this	DET
easat-4382	413	2	paper	paper	NOUN
easat-4382	413	3	highlights	highlight	NOUN
easat-4382	413	4	that	that	PRON
easat-4382	413	5	containers	container	NOUN
easat-4382	413	6	provide	provide	VERB
easat-4382	413	7	unparalleled	unparalleled	ADJ
easat-4382	413	8	portability	portability	NOUN
easat-4382	413	9	,	,	PUNCT
easat-4382	413	10	efficiency	efficiency	NOUN
easat-4382	413	11	,	,	PUNCT
easat-4382	413	12	and	and	CCONJ
easat-4382	413	13	scalability	scalability	NOUN
easat-4382	413	14	,	,	PUNCT
easat-4382	413	15	enabling	enable	VERB
easat-4382	413	16	rapid	rapid	ADJ
easat-4382	413	17	deployment	deployment	NOUN
easat-4382	413	18	and	and	CCONJ
easat-4382	413	19	seamless	seamless	ADJ
easat-4382	413	20	operation	operation	NOUN
easat-4382	413	21	across	across	ADP
easat-4382	413	22	varied	varied	ADJ
easat-4382	413	23	environments	environment	NOUN
easat-4382	413	24	.	.	PUNCT
easat-4382	414	1	however	however	ADV
easat-4382	414	2	,	,	PUNCT
easat-4382	414	3	these	these	DET
easat-4382	414	4	advantages	advantage	NOUN
easat-4382	414	5	come	come	VERB
easat-4382	414	6	with	with	ADP
easat-4382	414	7	unique	unique	ADJ
easat-4382	414	8	challenges	challenge	NOUN
easat-4382	414	9	,	,	PUNCT
easat-4382	414	10	including	include	VERB
easat-4382	414	11	vulnerabilities	vulnerability	NOUN
easat-4382	414	12	associated	associate	VERB
easat-4382	414	13	with	with	ADP
easat-4382	414	14	shared	shared	ADJ
easat-4382	414	15	kernel	kernel	PROPN
easat-4382	414	16	architectures	architecture	NOUN
easat-4382	414	17	,	,	PUNCT
easat-4382	414	18	runtime	runtime	NOUN
easat-4382	414	19	risks	risk	NOUN
easat-4382	414	20	,	,	PUNCT
easat-4382	414	21	and	and	CCONJ
easat-4382	414	22	the	the	DET
easat-4382	414	23	orchestration	orchestration	NOUN
easat-4382	414	24	layer	layer	NOUN
easat-4382	414	25	complexities	complexity	NOUN
easat-4382	414	26	.	.	PUNCT
easat-4382	415	1	addressing	address	VERB
easat-4382	415	2	these	these	DET
easat-4382	415	3	risks	risk	NOUN
easat-4382	415	4	requires	require	VERB
easat-4382	415	5	a	a	DET
easat-4382	415	6	comprehensive	comprehensive	ADJ
easat-4382	415	7	strategy	strategy	NOUN
easat-4382	415	8	incorporating	incorporate	VERB
easat-4382	415	9	robust	robust	ADJ
easat-4382	415	10	security	security	NOUN
easat-4382	415	11	practices	practice	NOUN
easat-4382	415	12	,	,	PUNCT
easat-4382	415	13	such	such	ADJ
easat-4382	415	14	as	as	ADP
easat-4382	415	15	regular	regular	ADJ
easat-4382	415	16	vulnerability	vulnerability	NOUN
easat-4382	415	17	scanning	scanning	NOUN
easat-4382	415	18	,	,	PUNCT
easat-4382	415	19	secure	secure	ADJ
easat-4382	415	20	configuration	configuration	NOUN
easat-4382	415	21	,	,	PUNCT
easat-4382	415	22	runtime	runtime	NOUN
easat-4382	415	23	monitoring	monitoring	NOUN
easat-4382	415	24	,	,	PUNCT
easat-4382	415	25	and	and	CCONJ
easat-4382	415	26	implementing	implement	VERB
easat-4382	415	27	access	access	NOUN
easat-4382	415	28	controls	control	NOUN
easat-4382	415	29	like	like	ADP
easat-4382	415	30	rbac	rbac	NOUN
easat-4382	415	31	.	.	PUNCT
easat-4382	416	1	adequate	adequate	ADJ
easat-4382	416	2	container	container	NOUN
easat-4382	416	3	security	security	NOUN
easat-4382	416	4	ensures	ensure	VERB
easat-4382	416	5	the	the	DET
easat-4382	416	6	integrity	integrity	NOUN
easat-4382	416	7	and	and	CCONJ
easat-4382	416	8	reliability	reliability	NOUN
easat-4382	416	9	of	of	ADP
easat-4382	416	10	applications	application	NOUN
easat-4382	416	11	and	and	CCONJ
easat-4382	416	12	enhances	enhance	VERB
easat-4382	416	13	trust	trust	NOUN
easat-4382	416	14	in	in	ADP
easat-4382	416	15	sensitive	sensitive	ADJ
easat-4382	416	16	data	datum	NOUN
easat-4382	416	17	management	management	NOUN
easat-4382	416	18	and	and	CCONJ
easat-4382	416	19	operational	operational	ADJ
easat-4382	416	20	consistency	consistency	NOUN
easat-4382	416	21	.	.	PUNCT
easat-4382	417	1	looking	look	VERB
easat-4382	417	2	ahead	ahead	ADV
easat-4382	417	3	,	,	PUNCT
easat-4382	417	4	the	the	DET
easat-4382	417	5	evolution	evolution	NOUN
easat-4382	417	6	of	of	ADP
easat-4382	417	7	container	container	NOUN
easat-4382	417	8	security	security	NOUN
easat-4382	417	9	will	will	AUX
easat-4382	417	10	likely	likely	ADV
easat-4382	417	11	be	be	AUX
easat-4382	417	12	shaped	shape	VERB
easat-4382	417	13	by	by	ADP
easat-4382	417	14	advancements	advancement	NOUN
easat-4382	417	15	in	in	ADP
easat-4382	417	16	automation	automation	NOUN
easat-4382	417	17	,	,	PUNCT
easat-4382	417	18	ai	ai	ADJ
easat-4382	417	19	-	-	PUNCT
easat-4382	417	20	driven	drive	VERB
easat-4382	417	21	threat	threat	NOUN
easat-4382	417	22	detection	detection	NOUN
easat-4382	417	23	,	,	PUNCT
easat-4382	417	24	and	and	CCONJ
easat-4382	417	25	a	a	DET
easat-4382	417	26	shift	shift	NOUN
easat-4382	417	27	toward	toward	ADP
easat-4382	417	28	zero	zero	NUM
easat-4382	417	29	-	-	PUNCT
easat-4382	417	30	trust	trust	NOUN
easat-4382	417	31	architectures	architecture	NOUN
easat-4382	417	32	.	.	PUNCT
easat-4382	418	1	these	these	DET
easat-4382	418	2	trends	trend	NOUN
easat-4382	418	3	aim	aim	VERB
easat-4382	418	4	to	to	PART
easat-4382	418	5	proactively	proactively	ADV
easat-4382	418	6	address	address	VERB
easat-4382	418	7	vulnerabilities	vulnerability	NOUN
easat-4382	418	8	while	while	SCONJ
easat-4382	418	9	streamlining	streamline	VERB
easat-4382	418	10	the	the	DET
easat-4382	418	11	integration	integration	NOUN
easat-4382	418	12	of	of	ADP
easat-4382	418	13	security	security	NOUN
easat-4382	418	14	measures	measure	NOUN
easat-4382	418	15	throughout	throughout	ADP
easat-4382	418	16	the	the	DET
easat-4382	418	17	development	development	NOUN
easat-4382	418	18	lifecycle	lifecycle	NOUN
easat-4382	418	19	.	.	PUNCT
easat-4382	419	1	furthermore	furthermore	ADV
easat-4382	419	2	,	,	PUNCT
easat-4382	419	3	the	the	DET
easat-4382	419	4	emphasis	emphasis	NOUN
easat-4382	419	5	on	on	ADP
easat-4382	419	6	compliance	compliance	NOUN
easat-4382	419	7	,	,	PUNCT
easat-4382	419	8	immutability	immutability	NOUN
easat-4382	419	9	,	,	PUNCT
easat-4382	419	10	and	and	CCONJ
easat-4382	419	11	innovative	innovative	ADJ
easat-4382	419	12	technologies	technology	NOUN
easat-4382	419	13	like	like	ADP
easat-4382	419	14	service	service	NOUN
easat-4382	419	15	meshes	mesh	NOUN
easat-4382	419	16	underscores	underscore	VERB
easat-4382	419	17	the	the	DET
easat-4382	419	18	need	need	NOUN
easat-4382	419	19	for	for	SCONJ
easat-4382	419	20	organizations	organization	NOUN
easat-4382	419	21	to	to	PART
easat-4382	419	22	remain	remain	VERB
easat-4382	419	23	ever	ever	ADV
easat-4382	419	24	-	-	PUNCT
easat-4382	419	25	vigilant	vigilant	ADJ
easat-4382	419	26	.	.	PUNCT
easat-4382	420	1	by	by	ADP
easat-4382	420	2	1260	1260	NUM
easat-4382	420	3	edelweiss	edelweiss	PROPN
easat-4382	420	4	applied	apply	VERB
easat-4382	420	5	science	science	NOUN
easat-4382	420	6	and	and	CCONJ
easat-4382	420	7	technology	technology	NOUN
easat-4382	420	8	issn	issn	PROPN
easat-4382	420	9	:	:	PUNCT
easat-4382	420	10	2576	2576	NUM
easat-4382	420	11	-	-	SYM
easat-4382	420	12	8484	8484	NUM
easat-4382	420	13	vol	vol	NOUN
easat-4382	420	14	.	.	PROPN
easat-4382	420	15	9	9	NUM
easat-4382	420	16	,	,	PUNCT
easat-4382	420	17	no	no	INTJ
easat-4382	420	18	.	.	NOUN
easat-4382	420	19	1	1	NUM
easat-4382	420	20	:	:	PUNCT
easat-4382	420	21	1243	1243	NUM
easat-4382	420	22	-	-	SYM
easat-4382	420	23	1261	1261	NUM
easat-4382	420	24	,	,	PUNCT
easat-4382	420	25	2025	2025	NUM
easat-4382	420	26	doi	doi	NOUN
easat-4382	420	27	:	:	PUNCT
easat-4382	420	28	10.55214/25768484.v9i1.4382	10.55214/25768484.v9i1.4382	NUM
easat-4382	420	29	©	©	PROPN
easat-4382	420	30	2025	2025	NUM
easat-4382	420	31	by	by	ADP
easat-4382	420	32	the	the	DET
easat-4382	420	33	authors	author	NOUN
easat-4382	420	34	;	;	PUNCT
easat-4382	420	35	licensee	licensee	PROPN
easat-4382	420	36	learning	learn	VERB
easat-4382	420	37	gate	gate	NOUN
easat-4382	420	38	prioritizing	prioritize	VERB
easat-4382	420	39	security	security	NOUN
easat-4382	420	40	as	as	ADP
easat-4382	420	41	a	a	DET
easat-4382	420	42	core	core	NOUN
easat-4382	420	43	element	element	NOUN
easat-4382	420	44	of	of	ADP
easat-4382	420	45	container	container	NOUN
easat-4382	420	46	adoption	adoption	NOUN
easat-4382	420	47	,	,	PUNCT
easat-4382	420	48	businesses	business	NOUN
easat-4382	420	49	can	can	AUX
easat-4382	420	50	harness	harness	VERB
easat-4382	420	51	the	the	DET
easat-4382	420	52	full	full	ADJ
easat-4382	420	53	potential	potential	NOUN
easat-4382	420	54	of	of	ADP
easat-4382	420	55	containerization	containerization	NOUN
easat-4382	420	56	while	while	SCONJ
easat-4382	420	57	minimizing	minimize	VERB
easat-4382	420	58	risks	risk	NOUN
easat-4382	420	59	,	,	PUNCT
easat-4382	420	60	ensuring	ensure	VERB
easat-4382	420	61	their	their	PRON
easat-4382	420	62	applications	application	NOUN
easat-4382	420	63	are	be	AUX
easat-4382	420	64	resilient	resilient	ADJ
easat-4382	420	65	,	,	PUNCT
easat-4382	420	66	secure	secure	ADJ
easat-4382	420	67	,	,	PUNCT
easat-4382	420	68	and	and	CCONJ
easat-4382	420	69	futureready	futureready	ADJ
easat-4382	420	70	in	in	ADP
easat-4382	420	71	a	a	DET
easat-4382	420	72	rapidly	rapidly	ADV
easat-4382	420	73	evolving	evolve	VERB
easat-4382	420	74	technological	technological	ADJ
easat-4382	420	75	landscape	landscape	NOUN
easat-4382	420	76	.	.	PUNCT
easat-4382	421	1	transparency	transparency	NOUN
easat-4382	421	2	:	:	PUNCT
easat-4382	421	3	the	the	DET
easat-4382	421	4	authors	author	NOUN
easat-4382	421	5	confirm	confirm	VERB
easat-4382	421	6	that	that	SCONJ
easat-4382	421	7	the	the	DET
easat-4382	421	8	manuscript	manuscript	NOUN
easat-4382	421	9	is	be	AUX
easat-4382	421	10	an	an	DET
easat-4382	421	11	honest	honest	ADJ
easat-4382	421	12	,	,	PUNCT
easat-4382	421	13	accurate	accurate	ADJ
easat-4382	421	14	,	,	PUNCT
easat-4382	421	15	and	and	CCONJ
easat-4382	421	16	transparent	transparent	ADJ
easat-4382	421	17	account	account	NOUN
easat-4382	421	18	of	of	ADP
easat-4382	421	19	the	the	DET
easat-4382	421	20	study	study	NOUN
easat-4382	421	21	;	;	PUNCT
easat-4382	421	22	that	that	SCONJ
easat-4382	421	23	no	no	DET
easat-4382	421	24	vital	vital	ADJ
easat-4382	421	25	features	feature	NOUN
easat-4382	421	26	of	of	ADP
easat-4382	421	27	the	the	DET
easat-4382	421	28	study	study	NOUN
easat-4382	421	29	have	have	AUX
easat-4382	421	30	been	be	AUX
easat-4382	421	31	omitted	omit	VERB
easat-4382	421	32	;	;	PUNCT
easat-4382	421	33	and	and	CCONJ
easat-4382	421	34	that	that	SCONJ
easat-4382	421	35	any	any	DET
easat-4382	421	36	discrepancies	discrepancy	NOUN
easat-4382	421	37	from	from	ADP
easat-4382	421	38	the	the	DET
easat-4382	421	39	study	study	NOUN
easat-4382	421	40	as	as	SCONJ
easat-4382	421	41	planned	plan	VERB
easat-4382	421	42	have	have	AUX
easat-4382	421	43	been	be	AUX
easat-4382	421	44	explained	explain	VERB
easat-4382	421	45	.	.	PUNCT
easat-4382	422	1	this	this	DET
easat-4382	422	2	study	study	NOUN
easat-4382	422	3	followed	follow	VERB
easat-4382	422	4	all	all	DET
easat-4382	422	5	ethical	ethical	ADJ
easat-4382	422	6	practices	practice	NOUN
easat-4382	422	7	during	during	ADP
easat-4382	422	8	writing	writing	NOUN
easat-4382	422	9	.	.	PUNCT
easat-4382	423	1	copyright	copyright	NOUN
easat-4382	423	2	:	:	PUNCT
easat-4382	423	3	©	©	PROPN
easat-4382	423	4	2025	2025	NUM
easat-4382	423	5	by	by	ADP
easat-4382	423	6	the	the	DET
easat-4382	423	7	authors	author	NOUN
easat-4382	423	8	.	.	PUNCT
easat-4382	424	1	this	this	DET
easat-4382	424	2	open	open	ADJ
easat-4382	424	3	-	-	PUNCT
easat-4382	424	4	access	access	NOUN
easat-4382	424	5	article	article	NOUN
easat-4382	424	6	is	be	AUX
easat-4382	424	7	distributed	distribute	VERB
easat-4382	424	8	under	under	ADP
easat-4382	424	9	the	the	DET
easat-4382	424	10	terms	term	NOUN
easat-4382	424	11	and	and	CCONJ
easat-4382	424	12	conditions	condition	NOUN
easat-4382	424	13	of	of	ADP
easat-4382	424	14	the	the	DET
easat-4382	424	15	creative	creative	ADJ
easat-4382	424	16	commons	common	NOUN
easat-4382	424	17	attribution	attribution	NOUN
easat-4382	424	18	(	(	PUNCT
easat-4382	424	19	cc	cc	NOUN
easat-4382	424	20	by	by	ADP
easat-4382	424	21	)	)	PUNCT
easat-4382	424	22	license	license	NOUN
easat-4382	424	23	(	(	PUNCT
easat-4382	424	24	https://creativecommons.org/licenses/by/4.0/	https://creativecommons.org/licenses/by/4.0/	PROPN
easat-4382	424	25	)	)	PUNCT
easat-4382	424	26	.	.	PUNCT
easat-4382	425	1	references	reference	NOUN
easat-4382	425	2	[	[	X
easat-4382	425	3	1	1	X
easat-4382	425	4	]	]	PUNCT
easat-4382	425	5	s.	s.	PROPN
easat-4382	425	6	susnjara	susnjara	PROPN
easat-4382	425	7	and	and	CCONJ
easat-4382	425	8	i.	i.	PROPN
easat-4382	425	9	smalley	smalley	PROPN
easat-4382	425	10	,	,	PUNCT
easat-4382	425	11	"	"	PUNCT
easat-4382	425	12	what	what	PRON
easat-4382	425	13	is	be	AUX
easat-4382	425	14	containerization	containerization	NOUN
easat-4382	425	15	?	?	PUNCT
easat-4382	425	16	,	,	PUNCT
easat-4382	425	17	"	"	PUNCT
easat-4382	425	18	retrieved	retrieve	VERB
easat-4382	425	19	:	:	PUNCT
easat-4382	425	20	https://www.ibm.com/think/topics/containerization	https://www.ibm.com/think/topics/containerization	NOUN
easat-4382	425	21	.	.	PUNCT
easat-4382	426	1	[	[	X
easat-4382	426	2	accessed	access	VERB
easat-4382	426	3	20	20	NUM
easat-4382	426	4	may	may	NOUN
easat-4382	426	5	2024	2024	NUM
easat-4382	426	6	]	]	PUNCT
easat-4382	426	7	,	,	PUNCT
easat-4382	426	8	2024	2024	NUM
easat-4382	426	9	.	.	PUNCT
easat-4382	427	1	[	[	X
easat-4382	427	2	2	2	X
easat-4382	427	3	]	]	PUNCT
easat-4382	427	4	ibm	ibm	PROPN
easat-4382	427	5	cloud	cloud	NOUN
easat-4382	427	6	team	team	NOUN
easat-4382	427	7	,	,	PUNCT
easat-4382	427	8	"	"	PUNCT
easat-4382	427	9	containers	container	NOUN
easat-4382	427	10	versus	versus	ADP
easat-4382	427	11	virtual	virtual	ADJ
easat-4382	427	12	machines	machine	NOUN
easat-4382	427	13	(	(	PUNCT
easat-4382	427	14	vms	vms	PROPN
easat-4382	427	15	):	):	PUNCT
easat-4382	427	16	what	what	PRON
easat-4382	427	17	’s	’	VERB
easat-4382	427	18	the	the	DET
easat-4382	427	19	difference	difference	NOUN
easat-4382	427	20	?	?	PUNCT
easat-4382	427	21	,	,	PUNCT
easat-4382	427	22	ibm	ibm	PROPN
easat-4382	427	23	,	,	PUNCT
easat-4382	427	24	"	"	PUNCT
easat-4382	427	25	retrieved	retrieve	VERB
easat-4382	427	26	:	:	PUNCT
easat-4382	427	27	https://www.ibm.com/think/topics/containers-vs-vms	https://www.ibm.com/think/topics/containers-vs-vms	PROPN
easat-4382	427	28	.	.	PUNCT
easat-4382	428	1	[	[	X
easat-4382	428	2	accessed	access	VERB
easat-4382	428	3	2021	2021	NUM
easat-4382	428	4	.	.	PUNCT
easat-4382	429	1	[	[	X
easat-4382	429	2	3	3	X
easat-4382	429	3	]	]	X
easat-4382	429	4	docker	docker	PROPN
easat-4382	429	5	inc	inc	PROPN
easat-4382	429	6	,	,	PUNCT
easat-4382	429	7	what	what	PRON
easat-4382	429	8	is	be	AUX
easat-4382	429	9	docker	docker	PROPN
easat-4382	429	10	?	?	PUNCT
easat-4382	430	1	docker	docker	PROPN
easat-4382	430	2	inc	inc	PROPN
easat-4382	430	3	.	.	PROPN
easat-4382	431	1	https://docs.docker.com/get-started/docker-overview/	https://docs.docker.com/get-started/docker-overview/	PROPN
easat-4382	431	2	,	,	PUNCT
easat-4382	431	3	n.d	n.d	PROPN
easat-4382	431	4	.	.	PUNCT
easat-4382	432	1	[	[	X
easat-4382	432	2	4	4	X
easat-4382	432	3	]	]	PUNCT
easat-4382	432	4	the	the	DET
easat-4382	432	5	kubernetes	kubernetes	PROPN
easat-4382	432	6	authors	author	NOUN
easat-4382	432	7	,	,	PUNCT
easat-4382	432	8	"	"	PUNCT
easat-4382	432	9	overview	overview	NOUN
easat-4382	432	10	,	,	PUNCT
easat-4382	432	11	"	"	PUNCT
easat-4382	432	12	retrieved	retrieve	VERB
easat-4382	432	13	:	:	PUNCT
easat-4382	432	14	https://kubernetes.io/docs/concepts/overview/.	https://kubernetes.io/docs/concepts/overview/.	PROPN
easat-4382	433	1	[	[	X
easat-4382	433	2	accessed	access	VERB
easat-4382	433	3	2024	2024	NUM
easat-4382	433	4	.	.	PUNCT
easat-4382	434	1	[	[	X
easat-4382	434	2	5	5	NUM
easat-4382	434	3	]	]	PUNCT
easat-4382	434	4	m.	m.	NOUN
easat-4382	434	5	michalowski	michalowski	PROPN
easat-4382	434	6	,	,	PUNCT
easat-4382	434	7	"	"	PUNCT
easat-4382	434	8	top	top	ADJ
easat-4382	434	9	47	47	NUM
easat-4382	434	10	devops	devop	NOUN
easat-4382	434	11	statistics	statistic	NOUN
easat-4382	434	12	2025	2025	NUM
easat-4382	434	13	:	:	PUNCT
easat-4382	434	14	growth	growth	NOUN
easat-4382	434	15	,	,	PUNCT
easat-4382	434	16	benefits	benefit	NOUN
easat-4382	434	17	,	,	PUNCT
easat-4382	434	18	and	and	CCONJ
easat-4382	434	19	trends	trend	NOUN
easat-4382	434	20	,	,	PUNCT
easat-4382	434	21	spacelift	spacelift	NOUN
easat-4382	434	22	,	,	PUNCT
easat-4382	434	23	"	"	PUNCT
easat-4382	434	24	retrieved	retrieve	VERB
easat-4382	434	25	:	:	PUNCT
easat-4382	434	26	https://spacelift.io/blog/devops-statistics	https://spacelift.io/blog/devops-statistic	NOUN
easat-4382	434	27	.	.	PUNCT
easat-4382	435	1	[	[	X
easat-4382	435	2	accessed	access	VERB
easat-4382	435	3	2025	2025	NUM
easat-4382	435	4	.	.	PUNCT
easat-4382	436	1	[	[	X
easat-4382	436	2	6	6	NUM
easat-4382	436	3	]	]	X
easat-4382	436	4	red	red	ADJ
easat-4382	436	5	hat	hat	NOUN
easat-4382	436	6	,	,	PUNCT
easat-4382	436	7	"	"	PUNCT
easat-4382	436	8	kubernetes	kubernete	VERB
easat-4382	436	9	adoption	adoption	NOUN
easat-4382	436	10	,	,	PUNCT
easat-4382	436	11	security	security	NOUN
easat-4382	436	12	,	,	PUNCT
easat-4382	436	13	and	and	CCONJ
easat-4382	436	14	market	market	NOUN
easat-4382	436	15	trends	trend	NOUN
easat-4382	436	16	report	report	VERB
easat-4382	436	17	2024	2024	NUM
easat-4382	436	18	,	,	PUNCT
easat-4382	436	19	red	red	ADJ
easat-4382	436	20	hat	hat	NOUN
easat-4382	436	21	,	,	PUNCT
easat-4382	436	22	"	"	PUNCT
easat-4382	436	23	retrieved	retrieve	VERB
easat-4382	436	24	:	:	PUNCT
easat-4382	436	25	https://www.redhat.com/en/resources/kubernetes-adoption-security-market-trends-overview	https://www.redhat.com/en/resources/kubernetes-adoption-security-market-trends-overview	NOUN
easat-4382	436	26	.	.	PUNCT
easat-4382	437	1	[	[	X
easat-4382	437	2	accessed	access	VERB
easat-4382	437	3	2024	2024	NUM
easat-4382	437	4	.	.	PUNCT
easat-4382	438	1	[	[	X
easat-4382	438	2	7	7	X
easat-4382	438	3	]	]	PUNCT
easat-4382	438	4	check	check	NOUN
easat-4382	438	5	point	point	NOUN
easat-4382	438	6	software	software	NOUN
easat-4382	438	7	technologies	technology	NOUN
easat-4382	438	8	,	,	PUNCT
easat-4382	438	9	"	"	PUNCT
easat-4382	438	10	top	top	ADJ
easat-4382	438	11	7	7	NUM
easat-4382	438	12	container	container	NOUN
easat-4382	438	13	security	security	NOUN
easat-4382	438	14	issues	issue	NOUN
easat-4382	438	15	,	,	PUNCT
easat-4382	438	16	"	"	PUNCT
easat-4382	438	17	retrieved	retrieve	VERB
easat-4382	438	18	:	:	PUNCT
easat-4382	438	19	https://www.checkpoint.com/cyber-hub/cloud-security/what-is-container-security/top-7-container-securityissues/.	https://www.checkpoint.com/cyber-hub/cloud-security/what-is-container-security/top-7-container-securityissues/.	X
easat-4382	439	1	[	[	X
easat-4382	439	2	accessed	access	VERB
easat-4382	439	3	n.d	n.d	PROPN
easat-4382	439	4	.	.	PUNCT
easat-4382	440	1	[	[	X
easat-4382	440	2	8	8	NUM
easat-4382	440	3	]	]	X
easat-4382	440	4	red	red	ADJ
easat-4382	440	5	hat	hat	NOUN
easat-4382	440	6	,	,	PUNCT
easat-4382	440	7	"	"	PUNCT
easat-4382	440	8	what	what	PRON
easat-4382	440	9	is	be	AUX
easat-4382	440	10	a	a	DET
easat-4382	440	11	ci	ci	PROPN
easat-4382	440	12	/	/	SYM
easat-4382	440	13	cd	cd	NOUN
easat-4382	440	14	pipeline	pipeline	NOUN
easat-4382	440	15	?	?	PUNCT
easat-4382	440	16	,	,	PUNCT
easat-4382	440	17	red	red	ADJ
easat-4382	440	18	hat	hat	NOUN
easat-4382	440	19	,	,	PUNCT
easat-4382	440	20	"	"	PUNCT
easat-4382	440	21	retrieved	retrieve	VERB
easat-4382	440	22	:	:	PUNCT
easat-4382	440	23	https://www.redhat.com/en/topics/devops/what-cicdpipeline	https://www.redhat.com/en/topics/devops/what-cicdpipeline	X
easat-4382	440	24	.	.	PUNCT
easat-4382	441	1	[	[	X
easat-4382	441	2	accessed	access	VERB
easat-4382	441	3	2022	2022	NUM
easat-4382	441	4	.	.	PUNCT
easat-4382	442	1	[	[	X
easat-4382	442	2	9	9	NUM
easat-4382	442	3	]	]	X
easat-4382	442	4	docker	docker	PROPN
easat-4382	442	5	inc	inc	PROPN
easat-4382	442	6	,	,	PUNCT
easat-4382	442	7	"	"	PUNCT
easat-4382	442	8	dockerfile	dockerfile	NOUN
easat-4382	442	9	reference	reference	NOUN
easat-4382	442	10	,	,	PUNCT
easat-4382	442	11	"	"	PUNCT
easat-4382	442	12	retrieved	retrieve	VERB
easat-4382	442	13	:	:	PUNCT
easat-4382	442	14	https://docs.docker.com/reference/dockerfile/.	https://docs.docker.com/reference/dockerfile/.	PROPN
easat-4382	442	15	[	[	AUX
easat-4382	442	16	accessed	access	VERB
easat-4382	442	17	n.d	n.d	PROPN
easat-4382	442	18	.	.	PUNCT
easat-4382	443	1	[	[	X
easat-4382	443	2	10	10	NUM
easat-4382	443	3	]	]	X
easat-4382	443	4	docker	docker	PROPN
easat-4382	443	5	inc	inc	PROPN
easat-4382	443	6	,	,	PUNCT
easat-4382	443	7	"	"	PUNCT
easat-4382	443	8	docker	docker	PROPN
easat-4382	443	9	hub	hub	NOUN
easat-4382	443	10	,	,	PUNCT
easat-4382	443	11	"	"	PUNCT
easat-4382	443	12	retrieved	retrieve	VERB
easat-4382	443	13	:	:	PUNCT
easat-4382	443	14	https://hub.docker.com	https://hub.docker.com	X
easat-4382	443	15	.	.	PUNCT
easat-4382	444	1	[	[	X
easat-4382	444	2	accessed	access	VERB
easat-4382	444	3	n.d	n.d	PROPN
easat-4382	444	4	.	.	PUNCT
easat-4382	445	1	[	[	X
easat-4382	445	2	11	11	NUM
easat-4382	445	3	]	]	PUNCT
easat-4382	445	4	the	the	DET
easat-4382	445	5	kubernetes	kubernetes	PROPN
easat-4382	445	6	authors	author	NOUN
easat-4382	445	7	,	,	PUNCT
easat-4382	445	8	"	"	PUNCT
easat-4382	445	9	autoscaling	autoscale	VERB
easat-4382	445	10	workloads	workload	NOUN
easat-4382	445	11	,	,	PUNCT
easat-4382	445	12	"	"	PUNCT
easat-4382	445	13	retrieved	retrieve	VERB
easat-4382	445	14	:	:	PUNCT
easat-4382	445	15	https://kubernetes.io/docs/concepts/workloads/autoscaling/.	https://kubernetes.io/docs/concepts/workloads/autoscaling/.	PROPN
easat-4382	446	1	[	[	X
easat-4382	446	2	accessed	access	VERB
easat-4382	446	3	2024	2024	NUM
easat-4382	446	4	.	.	PUNCT
easat-4382	447	1	[	[	X
easat-4382	447	2	12	12	NUM
easat-4382	447	3	]	]	X
easat-4382	447	4	b.	b.	PROPN
easat-4382	447	5	ben	ben	PROPN
easat-4382	447	6	-	-	PROPN
easat-4382	447	7	michael	michael	PROPN
easat-4382	447	8	and	and	CCONJ
easat-4382	447	9	y.	y.	PROPN
easat-4382	447	10	yaakov	yaakov	PROPN
easat-4382	447	11	,	,	PUNCT
easat-4382	447	12	"	"	PUNCT
easat-4382	447	13	container	container	NOUN
easat-4382	447	14	breakouts	breakout	NOUN
easat-4382	447	15	:	:	PUNCT
easat-4382	447	16	escape	escape	VERB
easat-4382	447	17	techniques	technique	NOUN
easat-4382	447	18	in	in	ADP
easat-4382	447	19	cloud	cloud	ADJ
easat-4382	447	20	environments	environment	NOUN
easat-4382	447	21	,	,	PUNCT
easat-4382	447	22	palo	palo	PROPN
easat-4382	447	23	alto	alto	PROPN
easat-4382	447	24	networks	network	NOUN
easat-4382	447	25	,	,	PUNCT
easat-4382	447	26	"	"	PUNCT
easat-4382	447	27	retrieved	retrieve	VERB
easat-4382	447	28	:	:	PUNCT
easat-4382	447	29	https://unit42.paloaltonetworks.com/container-escape-techniques/.	https://unit42.paloaltonetworks.com/container-escape-techniques/.	PROPN
easat-4382	447	30	[	[	X
easat-4382	447	31	accessed	access	VERB
easat-4382	447	32	2024	2024	NUM
easat-4382	447	33	.	.	PUNCT
easat-4382	448	1	[	[	X
easat-4382	448	2	13	13	NUM
easat-4382	448	3	]	]	PUNCT
easat-4382	448	4	the	the	DET
easat-4382	448	5	kubernetes	kubernetes	PROPN
easat-4382	448	6	authors	author	NOUN
easat-4382	448	7	,	,	PUNCT
easat-4382	448	8	"	"	PUNCT
easat-4382	448	9	secrets	secret	NOUN
easat-4382	448	10	,	,	PUNCT
easat-4382	448	11	"	"	PUNCT
easat-4382	448	12	retrieved	retrieve	VERB
easat-4382	448	13	:	:	PUNCT
easat-4382	448	14	https://kubernetes.io/docs/concepts/configuration/secret/.	https://kubernetes.io/docs/concepts/configuration/secret/.	X
easat-4382	449	1	[	[	X
easat-4382	449	2	accessed	access	VERB
easat-4382	449	3	2024	2024	NUM
easat-4382	449	4	.	.	PUNCT
easat-4382	450	1	[	[	X
easat-4382	450	2	14	14	NUM
easat-4382	450	3	]	]	PUNCT
easat-4382	450	4	a.	a.	NOUN
easat-4382	450	5	wallace	wallace	PROPN
easat-4382	450	6	and	and	CCONJ
easat-4382	450	7	c.	c.	PROPN
easat-4382	450	8	baer	baer	PROPN
easat-4382	450	9	,	,	PUNCT
easat-4382	450	10	"	"	PUNCT
easat-4382	450	11	exploring	explore	VERB
easat-4382	450	12	container	container	NOUN
easat-4382	450	13	security	security	NOUN
easat-4382	450	14	:	:	PUNCT
easat-4382	450	15	performing	perform	VERB
easat-4382	450	16	forensics	forensic	NOUN
easat-4382	450	17	on	on	ADP
easat-4382	450	18	your	your	PRON
easat-4382	450	19	gke	gke	NOUN
easat-4382	450	20	environment	environment	NOUN
easat-4382	450	21	,	,	PUNCT
easat-4382	450	22	google	google	PROPN
easat-4382	450	23	,	,	PUNCT
easat-4382	450	24	"	"	PUNCT
easat-4382	450	25	retrieved	retrieve	VERB
easat-4382	450	26	:	:	PUNCT
easat-4382	450	27	https://cloud.google.com/blog/products/containers-kubernetes/best-practices-for-performing-forensicson-containers	https://cloud.google.com/blog/products/containers-kubernetes/best-practices-for-performing-forensicson-container	NOUN
easat-4382	450	28	.	.	PUNCT
easat-4382	451	1	[	[	X
easat-4382	451	2	accessed	access	VERB
easat-4382	451	3	2019	2019	NUM
easat-4382	451	4	.	.	PUNCT
easat-4382	452	1	[	[	X
easat-4382	452	2	15	15	NUM
easat-4382	452	3	]	]	X
easat-4382	452	4	red	red	ADJ
easat-4382	452	5	hat	hat	NOUN
easat-4382	452	6	,	,	PUNCT
easat-4382	452	7	"	"	PUNCT
easat-4382	452	8	docker	docker	PROPN
easat-4382	452	9	selinux	selinux	PROPN
easat-4382	452	10	security	security	NOUN
easat-4382	452	11	policy	policy	NOUN
easat-4382	452	12	,	,	PUNCT
easat-4382	452	13	"	"	PUNCT
easat-4382	452	14	retrieved	retrieve	VERB
easat-4382	452	15	:	:	PUNCT
easat-4382	452	16	https://docs.redhat.com/en/documentation/red_hat_enterprise_linux_atomic_host/7/html/container_security_gui	https://docs.redhat.com/en/documentation/red_hat_enterprise_linux_atomic_host/7/html/container_security_gui	VERB
easat-4382	452	17	de	de	X
easat-4382	452	18	/	/	SYM
easat-4382	452	19	docker_selinux_security_policy	docker_selinux_security_policy	NOUN
easat-4382	452	20	.	.	PUNCT
easat-4382	453	1	[	[	X
easat-4382	453	2	accessed	access	VERB
easat-4382	453	3	n.d	n.d	PROPN
easat-4382	453	4	.	.	PUNCT
easat-4382	454	1	[	[	X
easat-4382	454	2	16	16	NUM
easat-4382	454	3	]	]	X
easat-4382	454	4	apparmor	apparmor	NOUN
easat-4382	454	5	,	,	PUNCT
easat-4382	454	6	"	"	PUNCT
easat-4382	454	7	apparmor	apparmor	NOUN
easat-4382	454	8	wiki	wiki	NOUN
easat-4382	454	9	,	,	PUNCT
easat-4382	454	10	"	"	PUNCT
easat-4382	454	11	retrieved	retrieve	VERB
easat-4382	454	12	:	:	PUNCT
easat-4382	454	13	https://gitlab.com/apparmor/apparmor/-/wikis/home	https://gitlab.com/apparmor/apparmor/-/wikis/home	ADJ
easat-4382	454	14	.	.	PUNCT
easat-4382	455	1	[	[	X
easat-4382	455	2	accessed	access	VERB
easat-4382	455	3	n.d	n.d	PROPN
easat-4382	455	4	.	.	PUNCT
easat-4382	456	1	[	[	X
easat-4382	456	2	17	17	NUM
easat-4382	456	3	]	]	X
easat-4382	456	4	microsoft	microsoft	PROPN
easat-4382	456	5	,	,	PUNCT
easat-4382	456	6	"	"	PUNCT
easat-4382	456	7	what	what	PRON
easat-4382	456	8	is	be	AUX
easat-4382	456	9	devsecops	devsecop	NOUN
easat-4382	456	10	?	?	PUNCT
easat-4382	456	11	,	,	PUNCT
easat-4382	456	12	"	"	PUNCT
easat-4382	456	13	retrieved	retrieve	VERB
easat-4382	456	14	:	:	PUNCT
easat-4382	456	15	https://www.microsoft.com/en-us/security/business/security101/what-is-devsecops	https://www.microsoft.com/en-us/security/business/security101/what-is-devsecop	NOUN
easat-4382	456	16	.	.	PUNCT
easat-4382	457	1	[	[	X
easat-4382	457	2	accessed	access	VERB
easat-4382	457	3	n.d	n.d	PROPN
easat-4382	457	4	.	.	PUNCT
easat-4382	458	1	[	[	X
easat-4382	458	2	18	18	NUM
easat-4382	458	3	]	]	X
easat-4382	458	4	docker	docker	PROPN
easat-4382	458	5	inc	inc	PROPN
easat-4382	458	6	,	,	PUNCT
easat-4382	458	7	"	"	PUNCT
easat-4382	458	8	seccomp	seccomp	NOUN
easat-4382	458	9	security	security	NOUN
easat-4382	458	10	profiles	profile	NOUN
easat-4382	458	11	for	for	ADP
easat-4382	458	12	docker	docker	NOUN
easat-4382	458	13	,	,	PUNCT
easat-4382	458	14	"	"	PUNCT
easat-4382	458	15	retrieved	retrieve	VERB
easat-4382	458	16	:	:	PUNCT
easat-4382	458	17	https://docs.docker.com/engine/security/seccomp/.	https://docs.docker.com/engine/security/seccomp/.	X
easat-4382	459	1	[	[	X
easat-4382	459	2	accessed	access	VERB
easat-4382	459	3	n.d	n.d	PROPN
easat-4382	459	4	.	.	PUNCT
easat-4382	460	1	[	[	X
easat-4382	460	2	19	19	NUM
easat-4382	460	3	]	]	X
easat-4382	460	4	d.	d.	PROPN
easat-4382	460	5	warburton	warburton	PROPN
easat-4382	460	6	,	,	PUNCT
easat-4382	460	7	"	"	PUNCT
easat-4382	460	8	what	what	PRON
easat-4382	460	9	is	be	AUX
easat-4382	460	10	mtls	mtls	ADJ
easat-4382	460	11	?	?	PUNCT
easat-4382	461	1	f5	f5	NOUN
easat-4382	461	2	,	,	PUNCT
easat-4382	461	3	"	"	PUNCT
easat-4382	461	4	retrieved	retrieve	VERB
easat-4382	461	5	:	:	PUNCT
easat-4382	461	6	https://www.f5.com/labs/learning-center/what-is-mtls	https://www.f5.com/labs/learning-center/what-is-mtls	X
easat-4382	461	7	.	.	PUNCT
easat-4382	462	1	[	[	X
easat-4382	462	2	accessed	access	VERB
easat-4382	462	3	2021	2021	NUM
easat-4382	462	4	.	.	PUNCT
easat-4382	463	1	[	[	X
easat-4382	463	2	20	20	NUM
easat-4382	463	3	]	]	X
easat-4382	463	4	snyk	snyk	ADV
easat-4382	463	5	,	,	PUNCT
easat-4382	463	6	"	"	PUNCT
easat-4382	463	7	snyk	snyk	CCONJ
easat-4382	463	8	container	container	NOUN
easat-4382	463	9	,	,	PUNCT
easat-4382	463	10	"	"	PUNCT
easat-4382	463	11	retrieved	retrieve	VERB
easat-4382	463	12	:	:	PUNCT
easat-4382	463	13	https://snyk.io/product/container-vulnerability-management/.	https://snyk.io/product/container-vulnerability-management/.	PROPN
easat-4382	464	1	[	[	X
easat-4382	464	2	accessed	access	VERB
easat-4382	464	3	n.d	n.d	PROPN
easat-4382	464	4	.	.	PUNCT
easat-4382	465	1	[	[	X
easat-4382	465	2	21	21	NUM
easat-4382	465	3	]	]	X
easat-4382	465	4	clair	clair	PROPN
easat-4382	465	5	,	,	PUNCT
easat-4382	465	6	"	"	PUNCT
easat-4382	465	7	clair	clair	PROPN
easat-4382	465	8	is	be	AUX
easat-4382	465	9	an	an	DET
easat-4382	465	10	open	open	ADJ
easat-4382	465	11	source	source	NOUN
easat-4382	465	12	project	project	NOUN
easat-4382	465	13	for	for	ADP
easat-4382	465	14	the	the	DET
easat-4382	465	15	static	static	ADJ
easat-4382	465	16	analysis	analysis	NOUN
easat-4382	465	17	of	of	ADP
easat-4382	465	18	vulnerabilities	vulnerability	NOUN
easat-4382	465	19	,	,	PUNCT
easat-4382	465	20	"	"	PUNCT
easat-4382	465	21	retrieved	retrieve	VERB
easat-4382	465	22	:	:	PUNCT
easat-4382	465	23	https://github.com/quay/clair	https://github.com/quay/clair	NOUN
easat-4382	465	24	.	.	PUNCT
easat-4382	466	1	[	[	X
easat-4382	466	2	accessed	access	VERB
easat-4382	466	3	n.d	n.d	PROPN
easat-4382	466	4	.	.	PUNCT
easat-4382	467	1	[	[	X
easat-4382	467	2	22	22	NUM
easat-4382	467	3	]	]	X
easat-4382	467	4	podman	podman	NOUN
easat-4382	467	5	,	,	PUNCT
easat-4382	467	6	retrieved	retrieve	VERB
easat-4382	467	7	:	:	PUNCT
easat-4382	467	8	https://podman.io	https://podman.io	X
easat-4382	467	9	.	.	PUNCT
easat-4382	468	1	[	[	X
easat-4382	468	2	accessed	access	VERB
easat-4382	468	3	n.d	n.d	PROPN
easat-4382	468	4	.	.	PUNCT
easat-4382	469	1	[	[	X
easat-4382	469	2	23	23	NUM
easat-4382	469	3	]	]	X
easat-4382	469	4	cri	cri	PROPN
easat-4382	469	5	-	-	NOUN
easat-4382	469	6	o	o	NOUN
easat-4382	469	7	,	,	PUNCT
easat-4382	469	8	"	"	PUNCT
easat-4382	469	9	lightweight	lightweight	ADJ
easat-4382	469	10	container	container	NOUN
easat-4382	469	11	runtime	runtime	NOUN
easat-4382	469	12	for	for	ADP
easat-4382	469	13	kubernetes	kubernete	NOUN
easat-4382	469	14	,	,	PUNCT
easat-4382	469	15	"	"	PUNCT
easat-4382	469	16	retrieved	retrieve	VERB
easat-4382	469	17	:	:	PUNCT
easat-4382	469	18	https://cri-o.io	https://cri-o.io	X
easat-4382	469	19	.	.	PUNCT
easat-4382	470	1	[	[	AUX
easat-4382	470	2	accessed	access	VERB
easat-4382	470	3	n.d	n.d	PROPN
easat-4382	470	4	.	.	PROPN
easat-4382	470	5	https://creativecommons.org/licenses/by/4.0/	https://creativecommons.org/licenses/by/4.0/	PROPN
easat-4382	470	6	https://www.ibm.com/think/topics/containerization	https://www.ibm.com/think/topics/containerization	PROPN
easat-4382	470	7	https://www.ibm.com/think/topics/containers-vs-vms	https://www.ibm.com/think/topics/containers-vs-vms	PROPN
easat-4382	470	8	https://docs.docker.com/get-started/docker-overview/	https://docs.docker.com/get-started/docker-overview/	NOUN
easat-4382	470	9	https://kubernetes.io/docs/concepts/overview/	https://kubernetes.io/docs/concepts/overview/	VERB
easat-4382	470	10	https://spacelift.io/blog/devops-statistics	https://spacelift.io/blog/devops-statistics	PROPN
easat-4382	470	11	https://www.redhat.com/en/resources/kubernetes-adoption-security-market-trends-overview	https://www.redhat.com/en/resources/kubernetes-adoption-security-market-trends-overview	PROPN
easat-4382	470	12	https://www.checkpoint.com/cyber-hub/cloud-security/what-is-container-security/top-7-container-security-issues/	https://www.checkpoint.com/cyber-hub/cloud-security/what-is-container-security/top-7-container-security-issues/	PUNCT
easat-4382	470	13	https://www.checkpoint.com/cyber-hub/cloud-security/what-is-container-security/top-7-container-security-issues/	https://www.checkpoint.com/cyber-hub/cloud-security/what-is-container-security/top-7-container-security-issues/	NOUN
easat-4382	471	1	https://www.redhat.com/en/topics/devops/what-cicd-pipeline	https://www.redhat.com/en/topics/devops/what-cicd-pipeline	PUNCT
easat-4382	471	2	https://www.redhat.com/en/topics/devops/what-cicd-pipeline	https://www.redhat.com/en/topics/devops/what-cicd-pipeline	PRON
easat-4382	471	3	https://docs.docker.com/reference/dockerfile/	https://docs.docker.com/reference/dockerfile/	PROPN
easat-4382	471	4	https://hub.docker.com/	https://hub.docker.com/	NOUN
easat-4382	471	5	https://kubernetes.io/docs/concepts/workloads/autoscaling/	https://kubernetes.io/docs/concepts/workloads/autoscaling/	VERB
easat-4382	471	6	https://unit42.paloaltonetworks.com/container-escape-techniques/	https://unit42.paloaltonetworks.com/container-escape-techniques/	ADJ
easat-4382	471	7	https://kubernetes.io/docs/concepts/configuration/secret/	https://kubernetes.io/docs/concepts/configuration/secret/	PROPN
easat-4382	471	8	https://cloud.google.com/blog/products/containers-kubernetes/best-practices-for-performing-forensics-on-containers	https://cloud.google.com/blog/products/containers-kubernetes/best-practices-for-performing-forensics-on-container	NOUN
easat-4382	471	9	https://cloud.google.com/blog/products/containers-kubernetes/best-practices-for-performing-forensics-on-containers	https://cloud.google.com/blog/products/containers-kubernetes/best-practices-for-performing-forensics-on-container	NOUN
easat-4382	471	10	https://docs.redhat.com/en/documentation/red_hat_enterprise_linux_atomic_host/7/html/container_security_guide/docker_selinux_security_policy	https://docs.redhat.com/en/documentation/red_hat_enterprise_linux_atomic_host/7/html/container_security_guide/docker_selinux_security_policy	PROPN
easat-4382	471	11	https://docs.redhat.com/en/documentation/red_hat_enterprise_linux_atomic_host/7/html/container_security_guide/docker_selinux_security_policy	https://docs.redhat.com/en/documentation/red_hat_enterprise_linux_atomic_host/7/html/container_security_guide/docker_selinux_security_policy	PROPN
easat-4382	471	12	https://gitlab.com/apparmor/apparmor/-/wikis/home	https://gitlab.com/apparmor/apparmor/-/wikis/home	PROPN
easat-4382	471	13	https://www.microsoft.com/en-us/security/business/security-101/what-is-devsecops	https://www.microsoft.com/en-us/security/business/security-101/what-is-devsecop	VERB
easat-4382	471	14	https://www.microsoft.com/en-us/security/business/security-101/what-is-devsecops	https://www.microsoft.com/en-us/security/business/security-101/what-is-devsecop	VERB
easat-4382	471	15	https://docs.docker.com/engine/security/seccomp/	https://docs.docker.com/engine/security/seccomp/	PRON
easat-4382	471	16	https://www.f5.com/labs/learning-center/what-is-mtls	https://www.f5.com/labs/learning-center/what-is-mtls	VERB
easat-4382	471	17	https://snyk.io/product/container-vulnerability-management/	https://snyk.io/product/container-vulnerability-management/	NOUN
easat-4382	471	18	https://github.com/quay/clair	https://github.com/quay/clair	NOUN
easat-4382	471	19	https://podman.io/	https://podman.io/	PROPN
easat-4382	471	20	https://cri-o.io/	https://cri-o.io/	PROPN
easat-4382	471	21	1261	1261	NUM
easat-4382	471	22	edelweiss	edelweiss	PROPN
easat-4382	471	23	applied	apply	VERB
easat-4382	471	24	science	science	NOUN
easat-4382	471	25	and	and	CCONJ
easat-4382	471	26	technology	technology	NOUN
easat-4382	471	27	issn	issn	PROPN
easat-4382	471	28	:	:	PUNCT
easat-4382	471	29	2576	2576	NUM
easat-4382	471	30	-	-	SYM
easat-4382	471	31	8484	8484	NUM
easat-4382	471	32	vol	vol	NOUN
easat-4382	471	33	.	.	PROPN
easat-4382	472	1	9	9	NUM
easat-4382	472	2	,	,	PUNCT
easat-4382	472	3	no	no	INTJ
easat-4382	472	4	.	.	NOUN
easat-4382	472	5	1	1	NUM
easat-4382	472	6	:	:	PUNCT
easat-4382	472	7	1243	1243	NUM
easat-4382	472	8	-	-	SYM
easat-4382	472	9	1261	1261	NUM
easat-4382	472	10	,	,	PUNCT
easat-4382	472	11	2025	2025	NUM
easat-4382	472	12	doi	doi	NOUN
easat-4382	472	13	:	:	PUNCT
easat-4382	472	14	10.55214/25768484.v9i1.4382	10.55214/25768484.v9i1.4382	NUM
easat-4382	472	15	©	©	PROPN
easat-4382	472	16	2025	2025	NUM
easat-4382	472	17	by	by	ADP
easat-4382	472	18	the	the	DET
easat-4382	472	19	authors	author	NOUN
easat-4382	472	20	;	;	PUNCT
easat-4382	472	21	licensee	licensee	PROPN
easat-4382	472	22	learning	learning	NOUN
easat-4382	472	23	gate	gate	NOUN
easat-4382	473	1	[	[	X
easat-4382	473	2	24	24	NUM
easat-4382	473	3	]	]	SYM
easat-4382	473	4	hashicorp	hashicorp	NOUN
easat-4382	473	5	,	,	PUNCT
easat-4382	473	6	"	"	PUNCT
easat-4382	473	7	manage	manage	VERB
easat-4382	473	8	secrets	secret	NOUN
easat-4382	473	9	and	and	CCONJ
easat-4382	473	10	protect	protect	VERB
easat-4382	473	11	sensitive	sensitive	ADJ
easat-4382	473	12	data	datum	NOUN
easat-4382	473	13	with	with	ADP
easat-4382	473	14	vault	vault	NOUN
easat-4382	473	15	,	,	PUNCT
easat-4382	473	16	"	"	PUNCT
easat-4382	473	17	retrieved	retrieve	VERB
easat-4382	473	18	:	:	PUNCT
easat-4382	473	19	https://www.vaultproject.io	https://www.vaultproject.io	NOUN
easat-4382	473	20	.	.	PUNCT
easat-4382	474	1	[	[	X
easat-4382	474	2	accessed	access	VERB
easat-4382	474	3	n.d	n.d	PROPN
easat-4382	474	4	.	.	PUNCT
easat-4382	475	1	[	[	X
easat-4382	475	2	25	25	NUM
easat-4382	475	3	]	]	X
easat-4382	475	4	canonical	canonical	ADJ
easat-4382	475	5	,	,	PUNCT
easat-4382	475	6	"	"	PUNCT
easat-4382	475	7	linux	linux	PROPN
easat-4382	475	8	kernel	kernel	PROPN
easat-4382	475	9	livepatch	livepatch	PROPN
easat-4382	475	10	,	,	PUNCT
easat-4382	475	11	"	"	PUNCT
easat-4382	475	12	retrieved	retrieve	VERB
easat-4382	475	13	:	:	PUNCT
easat-4382	475	14	https://ubuntu.com/security/livepatch/docs	https://ubuntu.com/security/livepatch/doc	NOUN
easat-4382	475	15	.	.	PUNCT
easat-4382	476	1	[	[	X
easat-4382	476	2	accessed	access	VERB
easat-4382	476	3	n.d	n.d	PROPN
easat-4382	476	4	.	.	PUNCT
easat-4382	477	1	[	[	X
easat-4382	477	2	26	26	NUM
easat-4382	477	3	]	]	SYM
easat-4382	477	4	fedora	fedora	PROPN
easat-4382	477	5	,	,	PUNCT
easat-4382	477	6	"	"	PUNCT
easat-4382	477	7	fedora	fedora	PROPN
easat-4382	477	8	coreos	coreos	PROPN
easat-4382	477	9	documentation	documentation	NOUN
easat-4382	477	10	,	,	PUNCT
easat-4382	477	11	"	"	PUNCT
easat-4382	477	12	retrieved	retrieve	VERB
easat-4382	477	13	:	:	PUNCT
easat-4382	477	14	https://docs.fedoraproject.org/en-us/fedora-coreos/.	https://docs.fedoraproject.org/en-us/fedora-coreos/.	PROPN
easat-4382	478	1	[	[	X
easat-4382	478	2	accessed	access	VERB
easat-4382	478	3	n.d	n.d	PROPN
easat-4382	478	4	.	.	PUNCT
easat-4382	479	1	[	[	X
easat-4382	479	2	27	27	NUM
easat-4382	479	3	]	]	PUNCT
easat-4382	479	4	the	the	DET
easat-4382	479	5	kubernetes	kubernetes	PROPN
easat-4382	479	6	authors	author	NOUN
easat-4382	479	7	,	,	PUNCT
easat-4382	479	8	"	"	PUNCT
easat-4382	479	9	using	use	VERB
easat-4382	479	10	rbac	rbac	PROPN
easat-4382	479	11	authorization	authorization	NOUN
easat-4382	479	12	,	,	PUNCT
easat-4382	479	13	"	"	PUNCT
easat-4382	479	14	retrieved	retrieve	VERB
easat-4382	479	15	:	:	PUNCT
easat-4382	479	16	https://kubernetes.io/docs/reference/accessauthn-authz/rbac/.	https://kubernetes.io/docs/reference/accessauthn-authz/rbac/.	PROPN
easat-4382	479	17	[	[	PUNCT
easat-4382	479	18	accessed	access	VERB
easat-4382	479	19	2024	2024	NUM
easat-4382	479	20	.	.	PUNCT
easat-4382	480	1	[	[	X
easat-4382	480	2	28	28	NUM
easat-4382	480	3	]	]	PUNCT
easat-4382	480	4	the	the	DET
easat-4382	480	5	kubernetes	kubernetes	PROPN
easat-4382	480	6	authors	author	NOUN
easat-4382	480	7	,	,	PUNCT
easat-4382	480	8	"	"	PUNCT
easat-4382	480	9	pod	pod	ADJ
easat-4382	480	10	security	security	NOUN
easat-4382	480	11	admission	admission	NOUN
easat-4382	480	12	,	,	PUNCT
easat-4382	480	13	"	"	PUNCT
easat-4382	480	14	n.d	n.d	PROPN
easat-4382	480	15	.	.	PUNCT
easat-4382	481	1	[	[	X
easat-4382	481	2	online	online	X
easat-4382	481	3	]	]	X
easat-4382	481	4	.	.	PUNCT
easat-4382	482	1	available	available	ADJ
easat-4382	482	2	:	:	PUNCT
easat-4382	483	1	https://kubernetes.io/docs/concepts/security/pod-security-admission/	https://kubernetes.io/docs/concepts/security/pod-security-admission/	X
easat-4382	483	2	[	[	X
easat-4382	483	3	29	29	NUM
easat-4382	483	4	]	]	PUNCT
easat-4382	483	5	v.	v.	CCONJ
easat-4382	483	6	dakić	dakić	PROPN
easat-4382	483	7	,	,	PUNCT
easat-4382	483	8	j.	j.	PROPN
easat-4382	483	9	redžepagić	redžepagić	PROPN
easat-4382	483	10	,	,	PUNCT
easat-4382	483	11	m.	m.	NOUN
easat-4382	483	12	bašić	bašić	PROPN
easat-4382	483	13	,	,	PUNCT
easat-4382	483	14	and	and	CCONJ
easat-4382	483	15	l.	l.	PROPN
easat-4382	483	16	žgrablić	žgrablić	PROPN
easat-4382	483	17	,	,	PUNCT
easat-4382	483	18	"	"	PUNCT
easat-4382	483	19	performance	performance	NOUN
easat-4382	483	20	and	and	CCONJ
easat-4382	483	21	latency	latency	NOUN
easat-4382	483	22	efficiency	efficiency	NOUN
easat-4382	483	23	evaluation	evaluation	NOUN
easat-4382	483	24	of	of	ADP
easat-4382	483	25	kubernetes	kubernete	NOUN
easat-4382	483	26	container	container	NOUN
easat-4382	483	27	network	network	NOUN
easat-4382	483	28	interfaces	interface	NOUN
easat-4382	483	29	for	for	ADP
easat-4382	483	30	built	build	VERB
easat-4382	483	31	-	-	PUNCT
easat-4382	483	32	in	in	ADP
easat-4382	483	33	and	and	CCONJ
easat-4382	483	34	custom	custom	NOUN
easat-4382	483	35	tuned	tune	VERB
easat-4382	483	36	profiles	profile	NOUN
easat-4382	483	37	,	,	PUNCT
easat-4382	483	38	"	"	PUNCT
easat-4382	483	39	electronics	electronic	NOUN
easat-4382	483	40	,	,	PUNCT
easat-4382	483	41	vol	vol	NOUN
easat-4382	483	42	.	.	PROPN
easat-4382	483	43	13	13	NUM
easat-4382	483	44	,	,	PUNCT
easat-4382	483	45	no	no	INTJ
easat-4382	483	46	.	.	NOUN
easat-4382	483	47	19	19	NUM
easat-4382	483	48	,	,	PUNCT
easat-4382	483	49	p.	p.	NOUN
easat-4382	483	50	3972	3972	NUM
easat-4382	483	51	,	,	PUNCT
easat-4382	483	52	2024	2024	NUM
easat-4382	483	53	.	.	PUNCT
easat-4382	484	1	https://doi.org/10.3390/electronics13193972	https://doi.org/10.3390/electronics13193972	PROPN
easat-4382	485	1	[	[	X
easat-4382	485	2	30	30	NUM
easat-4382	485	3	]	]	PUNCT
easat-4382	485	4	the	the	DET
easat-4382	485	5	istio	istio	ADJ
easat-4382	485	6	authors	author	NOUN
easat-4382	485	7	,	,	PUNCT
easat-4382	485	8	"	"	PUNCT
easat-4382	485	9	the	the	DET
easat-4382	485	10	istio	istio	PROPN
easat-4382	485	11	service	service	NOUN
easat-4382	485	12	mesh	mesh	NOUN
easat-4382	485	13	,	,	PUNCT
easat-4382	485	14	"	"	PUNCT
easat-4382	485	15	retrieved	retrieve	VERB
easat-4382	485	16	:	:	PUNCT
easat-4382	485	17	https://istio.io/latest/about/service-mesh/.	https://istio.io/latest/about/service-mesh/.	PROPN
easat-4382	486	1	[	[	X
easat-4382	486	2	accessed	access	VERB
easat-4382	486	3	2024	2024	NUM
easat-4382	486	4	.	.	PUNCT
easat-4382	487	1	[	[	X
easat-4382	487	2	31	31	NUM
easat-4382	487	3	]	]	PUNCT
easat-4382	487	4	the	the	DET
easat-4382	487	5	linkerd	linkerd	NOUN
easat-4382	487	6	authors	author	NOUN
easat-4382	487	7	,	,	PUNCT
easat-4382	487	8	"	"	PUNCT
easat-4382	487	9	the	the	DET
easat-4382	487	10	world	world	NOUN
easat-4382	487	11	's	's	PART
easat-4382	487	12	most	most	ADV
easat-4382	487	13	advanced	advanced	ADJ
easat-4382	487	14	service	service	NOUN
easat-4382	487	15	mesh	mesh	NOUN
easat-4382	487	16	,	,	PUNCT
easat-4382	487	17	"	"	PUNCT
easat-4382	487	18	retrieved	retrieve	VERB
easat-4382	487	19	:	:	PUNCT
easat-4382	487	20	https://linkerd.io	https://linkerd.io	X
easat-4382	487	21	.	.	PUNCT
easat-4382	488	1	[	[	X
easat-4382	488	2	accessed	access	VERB
easat-4382	488	3	2025	2025	NUM
easat-4382	488	4	.	.	PUNCT
easat-4382	489	1	[	[	X
easat-4382	489	2	32	32	NUM
easat-4382	489	3	]	]	PUNCT
easat-4382	489	4	m.	m.	NOUN
easat-4382	489	5	nair	nair	NOUN
easat-4382	489	6	,	,	PUNCT
easat-4382	489	7	"	"	PUNCT
easat-4382	489	8	implementing	implement	VERB
easat-4382	489	9	shift	shift	NOUN
easat-4382	489	10	left	leave	VERB
easat-4382	489	11	security	security	NOUN
easat-4382	489	12	effectively	effectively	ADV
easat-4382	489	13	,	,	PUNCT
easat-4382	489	14	snyk	snyk	ADV
easat-4382	489	15	,	,	PUNCT
easat-4382	489	16	"	"	PUNCT
easat-4382	489	17	retrieved	retrieve	VERB
easat-4382	489	18	:	:	PUNCT
easat-4382	489	19	https://snyk.io/articles/shift-left-security/.	https://snyk.io/articles/shift-left-security/.	NOUN
easat-4382	490	1	[	[	X
easat-4382	490	2	accessed	access	VERB
easat-4382	490	3	n.d	n.d	PROPN
easat-4382	490	4	.	.	PUNCT
easat-4382	491	1	[	[	X
easat-4382	491	2	33	33	NUM
easat-4382	491	3	]	]	PUNCT
easat-4382	491	4	aqua	aqua	NOUN
easat-4382	491	5	,	,	PUNCT
easat-4382	491	6	"	"	PUNCT
easat-4382	491	7	the	the	DET
easat-4382	491	8	all	all	ADV
easat-4382	491	9	-	-	PUNCT
easat-4382	491	10	in	in	ADP
easat-4382	491	11	-	-	PUNCT
easat-4382	491	12	one	one	NUM
easat-4382	491	13	open	open	ADJ
easat-4382	491	14	source	source	NOUN
easat-4382	491	15	security	security	NOUN
easat-4382	491	16	scanner	scanner	NOUN
easat-4382	491	17	,	,	PUNCT
easat-4382	491	18	"	"	PUNCT
easat-4382	491	19	retrieved	retrieve	VERB
easat-4382	491	20	:	:	PUNCT
easat-4382	491	21	https://trivy.dev/latest/.	https://trivy.dev/latest/.	NOUN
easat-4382	492	1	[	[	X
easat-4382	492	2	accessed	access	VERB
easat-4382	492	3	n.d	n.d	PROPN
easat-4382	492	4	.	.	PUNCT
easat-4382	493	1	[	[	X
easat-4382	493	2	34	34	NUM
easat-4382	493	3	]	]	X
easat-4382	493	4	jenkins	jenkin	NOUN
easat-4382	493	5	,	,	PUNCT
easat-4382	493	6	"	"	PUNCT
easat-4382	493	7	the	the	DET
easat-4382	493	8	leading	lead	VERB
easat-4382	493	9	open	open	ADJ
easat-4382	493	10	-	-	PUNCT
easat-4382	493	11	source	source	NOUN
easat-4382	493	12	automation	automation	NOUN
easat-4382	493	13	server	server	NOUN
easat-4382	493	14	,	,	PUNCT
easat-4382	493	15	"	"	PUNCT
easat-4382	493	16	retrieved	retrieve	VERB
easat-4382	493	17	:	:	PUNCT
easat-4382	493	18	https://www.jenkins.io	https://www.jenkins.io	ADJ
easat-4382	493	19	.	.	PUNCT
easat-4382	494	1	[	[	X
easat-4382	494	2	accessed	access	VERB
easat-4382	494	3	n.d	n.d	PROPN
easat-4382	494	4	.	.	PUNCT
easat-4382	495	1	[	[	X
easat-4382	495	2	35	35	NUM
easat-4382	495	3	]	]	X
easat-4382	495	4	gitlab	gitlab	NOUN
easat-4382	495	5	,	,	PUNCT
easat-4382	495	6	"	"	PUNCT
easat-4382	495	7	get	get	AUX
easat-4382	495	8	started	start	VERB
easat-4382	495	9	with	with	ADP
easat-4382	495	10	gitlab	gitlab	PROPN
easat-4382	495	11	ci	ci	PROPN
easat-4382	495	12	/	/	SYM
easat-4382	495	13	cd	cd	PROPN
easat-4382	495	14	,	,	PUNCT
easat-4382	495	15	"	"	PUNCT
easat-4382	495	16	retrieved	retrieve	VERB
easat-4382	495	17	:	:	PUNCT
easat-4382	495	18	https://docs.gitlab.com/ee/ci/index.html	https://docs.gitlab.com/ee/ci/index.html	X
easat-4382	495	19	.	.	PUNCT
easat-4382	496	1	[	[	X
easat-4382	496	2	accessed	access	VERB
easat-4382	496	3	n.d	n.d	PROPN
easat-4382	496	4	.	.	PUNCT
easat-4382	497	1	[	[	X
easat-4382	497	2	36	36	NUM
easat-4382	497	3	]	]	X
easat-4382	497	4	github	github	PROPN
easat-4382	497	5	inc	inc	PROPN
easat-4382	497	6	,	,	PUNCT
easat-4382	497	7	"	"	PUNCT
easat-4382	497	8	automate	automate	VERB
easat-4382	497	9	your	your	PRON
easat-4382	497	10	workflow	workflow	NOUN
easat-4382	497	11	from	from	ADP
easat-4382	497	12	idea	idea	NOUN
easat-4382	497	13	to	to	ADP
easat-4382	497	14	production	production	NOUN
easat-4382	497	15	,	,	PUNCT
easat-4382	497	16	"	"	PUNCT
easat-4382	497	17	retrieved	retrieve	VERB
easat-4382	497	18	:	:	PUNCT
easat-4382	497	19	https://github.com/features/actions	https://github.com/features/action	NOUN
easat-4382	497	20	.	.	PUNCT
easat-4382	498	1	[	[	X
easat-4382	498	2	accessed	access	VERB
easat-4382	498	3	n.d	n.d	PROPN
easat-4382	498	4	.	.	PUNCT
easat-4382	499	1	[	[	X
easat-4382	499	2	37	37	NUM
easat-4382	499	3	]	]	PUNCT
easat-4382	499	4	anchore	anchore	ADV
easat-4382	499	5	,	,	PUNCT
easat-4382	499	6	"	"	PUNCT
easat-4382	499	7	developer	developer	NOUN
easat-4382	499	8	-	-	PUNCT
easat-4382	499	9	friendly	friendly	ADJ
easat-4382	499	10	scanning	scanning	NOUN
easat-4382	499	11	tools	tool	NOUN
easat-4382	499	12	,	,	PUNCT
easat-4382	499	13	"	"	PUNCT
easat-4382	499	14	retrieved	retrieve	VERB
easat-4382	499	15	:	:	PUNCT
easat-4382	499	16	https://anchore.com/opensource/.	https://anchore.com/opensource/.	X
easat-4382	499	17	[	[	X
easat-4382	499	18	accessed	access	VERB
easat-4382	499	19	n.d	n.d	PROPN
easat-4382	499	20	.	.	PUNCT
easat-4382	500	1	[	[	X
easat-4382	500	2	38	38	NUM
easat-4382	500	3	]	]	PUNCT
easat-4382	500	4	sysdig	sysdig	NOUN
easat-4382	500	5	,	,	PUNCT
easat-4382	500	6	"	"	PUNCT
easat-4382	500	7	detect	detect	VERB
easat-4382	500	8	security	security	NOUN
easat-4382	500	9	threats	threat	NOUN
easat-4382	500	10	in	in	ADP
easat-4382	500	11	real	real	ADJ
easat-4382	500	12	time	time	NOUN
easat-4382	500	13	,	,	PUNCT
easat-4382	500	14	"	"	PUNCT
easat-4382	500	15	retrieved	retrieve	VERB
easat-4382	500	16	:	:	PUNCT
easat-4382	500	17	https://falco.org	https://falco.org	X
easat-4382	500	18	.	.	PUNCT
easat-4382	501	1	[	[	X
easat-4382	501	2	accessed	access	VERB
easat-4382	501	3	n.d	n.d	PROPN
easat-4382	501	4	.	.	PUNCT
easat-4382	502	1	[	[	X
easat-4382	502	2	39	39	NUM
easat-4382	502	3	]	]	PUNCT
easat-4382	502	4	sysdig	sysdig	NOUN
easat-4382	502	5	,	,	PUNCT
easat-4382	502	6	"	"	PUNCT
easat-4382	502	7	the	the	DET
easat-4382	502	8	sysdig	sysdig	NOUN
easat-4382	502	9	platform	platform	NOUN
easat-4382	502	10	,	,	PUNCT
easat-4382	502	11	"	"	PUNCT
easat-4382	502	12	retrieved	retrieve	VERB
easat-4382	502	13	:	:	PUNCT
easat-4382	502	14	https://sysdig.com/products/platform/.	https://sysdig.com/products/platform/.	X
easat-4382	503	1	[	[	X
easat-4382	503	2	accessed	access	VERB
easat-4382	503	3	n.d	n.d	PROPN
easat-4382	503	4	.	.	PUNCT
easat-4382	504	1	[	[	X
easat-4382	504	2	40	40	NUM
easat-4382	504	3	]	]	PUNCT
easat-4382	504	4	center	center	NOUN
easat-4382	504	5	for	for	ADP
easat-4382	504	6	internet	internet	NOUN
easat-4382	504	7	security	security	NOUN
easat-4382	504	8	,	,	PUNCT
easat-4382	504	9	"	"	PUNCT
easat-4382	504	10	cis	cis	NOUN
easat-4382	504	11	docker	docker	NOUN
easat-4382	504	12	benchmarks	benchmark	NOUN
easat-4382	504	13	,	,	PUNCT
easat-4382	504	14	"	"	PUNCT
easat-4382	504	15	retrieved	retrieve	VERB
easat-4382	504	16	:	:	PUNCT
easat-4382	504	17	https://www.cisecurity.org/benchmark/docker	https://www.cisecurity.org/benchmark/docker	X
easat-4382	504	18	.	.	PUNCT
easat-4382	505	1	[	[	X
easat-4382	505	2	accessed	access	VERB
easat-4382	505	3	n.d	n.d	PROPN
easat-4382	505	4	.	.	PUNCT
easat-4382	506	1	[	[	X
easat-4382	506	2	41	41	NUM
easat-4382	506	3	]	]	X
easat-4382	506	4	community	community	NOUN
easat-4382	506	5	,	,	PUNCT
easat-4382	506	6	"	"	PUNCT
easat-4382	506	7	a	a	DET
easat-4382	506	8	customizable	customizable	ADJ
easat-4382	506	9	cloud	cloud	ADJ
easat-4382	506	10	-	-	PUNCT
easat-4382	506	11	native	native	ADJ
easat-4382	506	12	policy	policy	NOUN
easat-4382	506	13	controller	controller	NOUN
easat-4382	506	14	,	,	PUNCT
easat-4382	506	15	"	"	PUNCT
easat-4382	506	16	retrieved	retrieve	VERB
easat-4382	506	17	:	:	PUNCT
easat-4382	506	18	https://open-policyagent.github.io/gatekeeper/website/.	https://open-policyagent.github.io/gatekeeper/website/.	PROPN
easat-4382	507	1	[	[	X
easat-4382	507	2	accessed	access	VERB
easat-4382	507	3	n.d	n.d	PROPN
easat-4382	507	4	.	.	PUNCT
easat-4382	508	1	[	[	X
easat-4382	508	2	42	42	NUM
easat-4382	508	3	]	]	PUNCT
easat-4382	508	4	the	the	DET
easat-4382	508	5	kubescape	kubescape	NOUN
easat-4382	508	6	authors	author	NOUN
easat-4382	508	7	,	,	PUNCT
easat-4382	508	8	"	"	PUNCT
easat-4382	508	9	comprehensive	comprehensive	ADJ
easat-4382	508	10	kubernetes	kubernete	NOUN
easat-4382	508	11	security	security	NOUN
easat-4382	508	12	from	from	ADP
easat-4382	508	13	development	development	NOUN
easat-4382	508	14	to	to	ADP
easat-4382	508	15	runtime	runtime	NOUN
easat-4382	508	16	,	,	PUNCT
easat-4382	508	17	"	"	PUNCT
easat-4382	508	18	retrieved	retrieve	VERB
easat-4382	508	19	:	:	PUNCT
easat-4382	508	20	https://kubescape.io	https://kubescape.io	NOUN
easat-4382	508	21	.	.	PUNCT
easat-4382	509	1	[	[	X
easat-4382	509	2	accessed	access	VERB
easat-4382	509	3	2024	2024	NUM
easat-4382	509	4	.	.	PUNCT
easat-4382	510	1	[	[	X
easat-4382	510	2	43	43	NUM
easat-4382	510	3	]	]	X
easat-4382	510	4	d.	d.	PROPN
easat-4382	510	5	vedran	vedran	PROPN
easat-4382	510	6	,	,	PUNCT
easat-4382	510	7	m.	m.	NOUN
easat-4382	510	8	zlatan	zlatan	PROPN
easat-4382	510	9	,	,	PUNCT
easat-4382	510	10	k.	k.	PROPN
easat-4382	510	11	ana	ana	PROPN
easat-4382	510	12	,	,	PUNCT
easat-4382	510	13	and	and	CCONJ
easat-4382	510	14	r.	r.	PROPN
easat-4382	510	15	damir	damir	PROPN
easat-4382	510	16	,	,	PUNCT
easat-4382	510	17	"	"	PUNCT
easat-4382	510	18	analysis	analysis	NOUN
easat-4382	510	19	of	of	ADP
easat-4382	510	20	azure	azure	NOUN
easat-4382	510	21	zero	zero	NUM
easat-4382	510	22	trust	trust	NOUN
easat-4382	510	23	architecture	architecture	NOUN
easat-4382	510	24	implementation	implementation	NOUN
easat-4382	510	25	for	for	ADP
easat-4382	510	26	mid	mid	ADJ
easat-4382	510	27	-	-	NOUN
easat-4382	510	28	size	size	NOUN
easat-4382	510	29	organizations	organization	NOUN
easat-4382	510	30	,	,	PUNCT
easat-4382	510	31	"	"	PUNCT
easat-4382	510	32	journal	journal	NOUN
easat-4382	510	33	of	of	ADP
easat-4382	510	34	cybersecurity	cybersecurity	NOUN
easat-4382	510	35	and	and	CCONJ
easat-4382	510	36	privacy	privacy	NOUN
easat-4382	510	37	,	,	PUNCT
easat-4382	510	38	vol	vol	NOUN
easat-4382	510	39	.	.	PROPN
easat-4382	510	40	5	5	NUM
easat-4382	510	41	,	,	PUNCT
easat-4382	510	42	no	no	INTJ
easat-4382	510	43	.	.	NOUN
easat-4382	510	44	1	1	NUM
easat-4382	510	45	,	,	PUNCT
easat-4382	510	46	p.	p.	NOUN
easat-4382	510	47	2	2	NUM
easat-4382	510	48	,	,	PUNCT
easat-4382	510	49	2025	2025	NUM
easat-4382	510	50	.	.	PUNCT
easat-4382	511	1	https://doi.org/10.3390/jcp5010002	https://doi.org/10.3390/jcp5010002	NOUN
easat-4382	511	2	[	[	X
easat-4382	511	3	44	44	NUM
easat-4382	511	4	]	]	PUNCT
easat-4382	511	5	amazon	amazon	NOUN
easat-4382	511	6	,	,	PUNCT
easat-4382	511	7	"	"	PUNCT
easat-4382	511	8	run	run	VERB
easat-4382	511	9	code	code	NOUN
easat-4382	511	10	without	without	ADP
easat-4382	511	11	thinking	think	VERB
easat-4382	511	12	about	about	ADP
easat-4382	511	13	servers	server	NOUN
easat-4382	511	14	or	or	CCONJ
easat-4382	511	15	clusters	cluster	NOUN
easat-4382	511	16	,	,	PUNCT
easat-4382	511	17	"	"	PUNCT
easat-4382	511	18	retrieved	retrieve	VERB
easat-4382	511	19	:	:	PUNCT
easat-4382	512	1	https://aws.amazon.com/lambda/.	https://aws.amazon.com/lambda/.	PROPN
easat-4382	513	1	[	[	AUX
easat-4382	513	2	accessed	access	VERB
easat-4382	513	3	n.d	n.d	PROPN
easat-4382	513	4	.	.	PUNCT
easat-4382	514	1	[	[	X
easat-4382	514	2	45	45	NUM
easat-4382	514	3	]	]	PUNCT
easat-4382	514	4	microsoft	microsoft	PROPN
easat-4382	514	5	,	,	PUNCT
easat-4382	514	6	"	"	PUNCT
easat-4382	514	7	azure	azure	NOUN
easat-4382	514	8	functions	function	NOUN
easat-4382	514	9	overview	overview	NOUN
easat-4382	514	10	,	,	PUNCT
easat-4382	514	11	"	"	PUNCT
easat-4382	514	12	retrieved	retrieve	VERB
easat-4382	514	13	:	:	PUNCT
easat-4382	514	14	https://learn.microsoft.com/en-us/azure/azurefunctions/functions-overview	https://learn.microsoft.com/en-us/azure/azurefunctions/functions-overview	NOUN
easat-4382	514	15	.	.	PUNCT
easat-4382	515	1	[	[	X
easat-4382	515	2	accessed	access	VERB
easat-4382	515	3	n.d	n.d	PROPN
easat-4382	515	4	.	.	PUNCT
easat-4382	516	1	[	[	X
easat-4382	516	2	46	46	NUM
easat-4382	516	3	]	]	X
easat-4382	516	4	amazon	amazon	NOUN
easat-4382	516	5	,	,	PUNCT
easat-4382	516	6	"	"	PUNCT
easat-4382	516	7	aws	aw	NOUN
easat-4382	516	8	fargate	fargate	VERB
easat-4382	516	9	,	,	PUNCT
easat-4382	516	10	"	"	PUNCT
easat-4382	516	11	retrieved	retrieve	VERB
easat-4382	516	12	:	:	PUNCT
easat-4382	516	13	https://aws.amazon.com/fargate/.	https://aws.amazon.com/fargate/.	PROPN
easat-4382	516	14	[	[	X
easat-4382	516	15	accessed	access	VERB
easat-4382	516	16	n.d	n.d	PROPN
easat-4382	516	17	.	.	PUNCT
easat-4382	517	1	[	[	X
easat-4382	517	2	47	47	NUM
easat-4382	517	3	]	]	X
easat-4382	517	4	google	google	NOUN
easat-4382	517	5	,	,	PUNCT
easat-4382	517	6	"	"	PUNCT
easat-4382	517	7	cloud	cloud	NOUN
easat-4382	517	8	run	run	NOUN
easat-4382	517	9	,	,	PUNCT
easat-4382	517	10	"	"	PUNCT
easat-4382	517	11	retrieved	retrieve	VERB
easat-4382	517	12	:	:	PUNCT
easat-4382	517	13	https://cloud.google.com/run	https://cloud.google.com/run	PROPN
easat-4382	517	14	.	.	PUNCT
easat-4382	518	1	[	[	X
easat-4382	518	2	accessed	access	VERB
easat-4382	518	3	n.d	n.d	PROPN
easat-4382	518	4	.	.	PUNCT
easat-4382	519	1	[	[	X
easat-4382	519	2	48	48	NUM
easat-4382	519	3	]	]	PUNCT
easat-4382	519	4	aqua	aqua	NOUN
easat-4382	519	5	,	,	PUNCT
easat-4382	519	6	"	"	PUNCT
easat-4382	519	7	unified	unified	ADJ
easat-4382	519	8	cloud	cloud	NOUN
easat-4382	519	9	security	security	NOUN
easat-4382	519	10	,	,	PUNCT
easat-4382	519	11	"	"	PUNCT
easat-4382	519	12	retrieved	retrieve	VERB
easat-4382	519	13	:	:	PUNCT
easat-4382	519	14	https://www.aquasec.com	https://www.aquasec.com	X
easat-4382	519	15	.	.	PUNCT
easat-4382	520	1	[	[	X
easat-4382	520	2	accessed	access	VERB
easat-4382	520	3	n.d	n.d	PROPN
easat-4382	520	4	.	.	PUNCT
easat-4382	521	1	[	[	X
easat-4382	521	2	49	49	NUM
easat-4382	521	3	]	]	X
easat-4382	521	4	palo	palo	PROPN
easat-4382	521	5	alto	alto	PROPN
easat-4382	521	6	networks	network	NOUN
easat-4382	521	7	,	,	PUNCT
easat-4382	521	8	"	"	PUNCT
easat-4382	521	9	prisma	prisma	PROPN
easat-4382	521	10	cloud	cloud	NOUN
easat-4382	521	11	,	,	PUNCT
easat-4382	521	12	"	"	PUNCT
easat-4382	521	13	retrieved	retrieve	VERB
easat-4382	521	14	:	:	PUNCT
easat-4382	521	15	https://www.paloaltonetworks.com/prisma/cloud	https://www.paloaltonetworks.com/prisma/cloud	NOUN
easat-4382	521	16	.	.	PUNCT
easat-4382	522	1	[	[	X
easat-4382	522	2	accessed	access	VERB
easat-4382	522	3	n.d	n.d	PROPN
easat-4382	522	4	.	.	PUNCT
easat-4382	523	1	[	[	X
easat-4382	523	2	50	50	NUM
easat-4382	523	3	]	]	PUNCT
easat-4382	523	4	v.	v.	CCONJ
easat-4382	523	5	dakić	dakić	PROPN
easat-4382	523	6	,	,	PUNCT
easat-4382	523	7	z.	z.	PROPN
easat-4382	523	8	morić	morić	PROPN
easat-4382	523	9	,	,	PUNCT
easat-4382	523	10	a.	a.	PROPN
easat-4382	523	11	kapulica	kapulica	PROPN
easat-4382	523	12	,	,	PUNCT
easat-4382	523	13	and	and	CCONJ
easat-4382	523	14	d.	d.	PROPN
easat-4382	523	15	regvart	regvart	PROPN
easat-4382	523	16	,	,	PUNCT
easat-4382	523	17	"	"	PUNCT
easat-4382	523	18	leveraging	leverage	VERB
easat-4382	523	19	microsoft	microsoft	PROPN
easat-4382	523	20	sentinel	sentinel	NOUN
easat-4382	523	21	and	and	CCONJ
easat-4382	523	22	logic	logic	NOUN
easat-4382	523	23	apps	app	NOUN
easat-4382	523	24	for	for	ADP
easat-4382	523	25	automated	automate	VERB
easat-4382	523	26	cyber	cyber	NOUN
easat-4382	523	27	threat	threat	NOUN
easat-4382	523	28	response	response	NOUN
easat-4382	523	29	,	,	PUNCT
easat-4382	523	30	"	"	PUNCT
easat-4382	523	31	edelweiss	edelweiss	PROPN
easat-4382	523	32	applied	apply	VERB
easat-4382	523	33	science	science	NOUN
easat-4382	523	34	and	and	CCONJ
easat-4382	523	35	technology	technology	NOUN
easat-4382	523	36	,	,	PUNCT
easat-4382	523	37	vol	vol	NOUN
easat-4382	523	38	.	.	PROPN
easat-4382	523	39	8	8	NUM
easat-4382	523	40	,	,	PUNCT
easat-4382	523	41	no	no	INTJ
easat-4382	523	42	.	.	NOUN
easat-4382	523	43	6	6	NUM
easat-4382	523	44	,	,	PUNCT
easat-4382	523	45	pp	pp	ADJ
easat-4382	523	46	.	.	PUNCT
easat-4382	524	1	4319–4348	4319–4348	NUM
easat-4382	524	2	,	,	PUNCT
easat-4382	524	3	2024	2024	NUM
easat-4382	524	4	.	.	PUNCT
easat-4382	525	1	https://doi.org/10.55214/25768484.v8i6.2933	https://doi.org/10.55214/25768484.v8i6.2933	PROPN
easat-4382	525	2	https://www.vaultproject.io/	https://www.vaultproject.io/	NUM
easat-4382	525	3	https://ubuntu.com/security/livepatch/docs	https://ubuntu.com/security/livepatch/docs	PROPN
easat-4382	525	4	https://docs.fedoraproject.org/en-us/fedora-coreos/	https://docs.fedoraproject.org/en-us/fedora-coreos/	VERB
easat-4382	525	5	https://kubernetes.io/docs/reference/access-authn-authz/rbac/	https://kubernetes.io/docs/reference/access-authn-authz/rbac/	NOUN
easat-4382	525	6	https://kubernetes.io/docs/reference/access-authn-authz/rbac/	https://kubernetes.io/docs/reference/access-authn-authz/rbac/	X
easat-4382	525	7	https://kubernetes.io/docs/concepts/security/pod-security-admission/	https://kubernetes.io/docs/concepts/security/pod-security-admission/	NOUN
easat-4382	525	8	https://doi.org/10.3390/electronics13193972	https://doi.org/10.3390/electronics13193972	PROPN
easat-4382	525	9	https://istio.io/latest/about/service-mesh/	https://istio.io/latest/about/service-mesh/	PROPN
easat-4382	525	10	https://linkerd.io/	https://linkerd.io/	PROPN
easat-4382	525	11	https://snyk.io/articles/shift-left-security/	https://snyk.io/articles/shift-left-security/	PROPN
easat-4382	525	12	https://trivy.dev/latest/	https://trivy.dev/latest/	VERB
easat-4382	525	13	https://www.jenkins.io/	https://www.jenkins.io/	PROPN
easat-4382	525	14	https://docs.gitlab.com/ee/ci/index.html	https://docs.gitlab.com/ee/ci/index.html	NOUN
easat-4382	525	15	https://github.com/features/actions	https://github.com/features/action	NOUN
easat-4382	525	16	https://anchore.com/opensource/	https://anchore.com/opensource/	VERB
easat-4382	525	17	https://falco.org/	https://falco.org/	PROPN
easat-4382	525	18	https://sysdig.com/products/platform/	https://sysdig.com/products/platform/	PROPN
easat-4382	525	19	https://www.cisecurity.org/benchmark/docker	https://www.cisecurity.org/benchmark/docker	PRON
easat-4382	525	20	https://open-policy-agent.github.io/gatekeeper/website/	https://open-policy-agent.github.io/gatekeeper/website/	ADV
easat-4382	525	21	https://open-policy-agent.github.io/gatekeeper/website/	https://open-policy-agent.github.io/gatekeeper/website/	ADV
easat-4382	525	22	https://kubescape.io/	https://kubescape.io/	ADJ
easat-4382	525	23	https://doi.org/10.3390/jcp5010002	https://doi.org/10.3390/jcp5010002	NOUN
easat-4382	525	24	https://aws.amazon.com/lambda/	https://aws.amazon.com/lambda/	PUNCT
easat-4382	525	25	https://learn.microsoft.com/en-us/azure/azure-functions/functions-overview	https://learn.microsoft.com/en-us/azure/azure-functions/functions-overview	VERB
easat-4382	525	26	https://learn.microsoft.com/en-us/azure/azure-functions/functions-overview	https://learn.microsoft.com/en-us/azure/azure-functions/functions-overview	NOUN
easat-4382	525	27	https://aws.amazon.com/fargate/	https://aws.amazon.com/fargate/	ADV
easat-4382	525	28	https://cloud.google.com/run	https://cloud.google.com/run	PROPN
easat-4382	525	29	https://www.aquasec.com/	https://www.aquasec.com/	NOUN
easat-4382	526	1	https://www.paloaltonetworks.com/prisma/cloud	https://www.paloaltonetworks.com/prisma/cloud	PROPN
easat-4382	526	2	https://doi.org/10.55214/25768484.v8i6.2933	https://doi.org/10.55214/25768484.v8i6.2933	NOUN