Security research, analysis, and findings from our work in threat modeling, vulnerability detection, and DevSecOps.
Published research demonstrating how call graph clustering and heuristic analysis can automate threat modeling for large-scale cloud-native applications, addressing the scalability challenges of manual security assessment. Paper Information
I'm excited to share that my latest research on automating threat modeling will be presented at the 20th International Conference on Risks and Security of Internet and Systems
Published research demonstrating how DevOps pipelines can be exploited through privilege escalation attacks, challenging the assumption that DevSecOps tool adoption alone ensures security. Paper Information Title: Privilege Escalation Attack Scenarios
I'm excited to share that my research on DevOps security will be presented at the International Conference on Software and System Processes (ICSSP) 2022! Conference Details Conference: International