4 papers
Thou Shall Not Pass: Gatekeeping Outbound TLS Connections
Henrique B. Brum, Matteo Franzil, Riccardo Germenia +3
Despite the widespread use of Transport Layer Security (TLS), its security guarantees are frequently compromised by outdated versions and misconfigurations. To analyze this problem…
Sharpening Kubernetes Audit Logs with Context Awareness
Matteo Franzil, Valentino Armani, Luis Augusto Dias Knob +1
Kubernetes has emerged as the de facto orchestrator of microservices, providing scalability and extensibility to a highly dynamic environment. It builds an intricate and deeply con…
Exploiting Kubernetes' Image Pull Implementation to Deny Node Availability
Luis Augusto Dias Knob, Matteo Franzil, Domenico Siracusa
Kubernetes (K8s) has grown in popularity over the past few years to become the de-facto standard for container orchestration in cloud-native environments. While research is not new…
Introducing Packet-Level Analysis in Programmable Data Planes to Advance Network Intrusion Detection
Roberto Doriguzzi-Corin, Luis Augusto Dias Knob, Luca Mendozzi +2
Programmable data planes offer precise control over the low-level processing steps applied to network packets, serving as a valuable tool for analysing malicious flows in the field…