17 papers
Vulnerabilities, Secrets and Misconfiguration in the Highest-Exposure Docker Hub Images
Cristhian Kapelinski, Beatriz Machado, Diego Kreutz
Docker Hub is the registry underneath most container deployments, and a flaw in a widely reused base image is inherited by every image built on it. Prior ecosystem-scale measuremen…
IoT-Zoo: A Container-Based Framework for Heterogeneous IoT Device Profiles and Reproducible Traffic Capture
Vagner E. Quincozes, Diego Kreutz, Silvio E. Quincozes
The validation of networking and security solutions for the Internet of Things (IoT) requires realistic and reproducible experimental data. However, existing platforms often achiev…
A Reproducible Semantic Benchmark for Multivendor DSM-to-CLI Translation
Jerônimo Menezes, Leonardo Bitzki, Diego Kreutz +3
Translating high-level network intents into correct multivendor configurations remains a central challenge in network automation, as syntactically valid outputs may still violate t…
AnonShield: Scalable On-Premise Pseudonymization for CSIRT Vulnerability Data
Cristhian Kapelinski, Douglas Lautert, Beatriz Machado +2
We present AnonShield, a high-throughput, on-premise pseudonymization system that combines GPU-accelerated NER, streaming processing, caching, and schema-aware configuration. Evalu…
NetSecBed: A Container-Native Testbed for Reproducible Cybersecurity Experimentation
Leonardo Bitzki, Diego Kreutz, Tiago Heinrich +4
Cybersecurity research increasingly depends on reproducible evidence, such as traffic traces, logs, and labeled datasets, yet most public datasets remain static and offer limited s…
IoTEdu: Access Control, Detection, and Automatic Incident Response in Academic IoT Networks
Joner Assolin, Diego Kreutz, Leandro Bertholdo
The growing presence of IoT devices in academic environments has increased operational complexity and exposed security weaknesses, especially in academic institutions without unifi…