This work presents ProvP4, a provenance-based cross-plane observer designed to observe and analyze stateful data plane attacks in programmable networks, and demonstrates that ProvP4 imposes minimal overhead in terms of storage and performance, while significantly enhancing security analysis capabilities.
Provenance aims to capture the origins, transformations, and interactions of system objects for security and forensic applications. Existing provenance capture approaches still face major challenges and are not yet ready for production environments. In this paper, we first analyze the main kernel telemetry capture appr...
Paul R. B. Houssel, Olivier Levillain, Sylvie Laniepce et al.· 0 citations
This paper presents an architecture for verifiable container image distribution that addresses key-management challenges and enables policy-enforced admission-time verification, and implements a proof-of-concept integrated with GitHub Actions and GitLab Runners that mitigates common supply-chain attacks under a realist...
N. Fotiou, Lefteris Georgiadis, Ignacio Lacalle et al.· 0 citations
This work introduces the Privacy Exposure Index (PEI), a dynamic risk metric that links the detection of sensitive entities directly with their operational context and establishes a foundation for a proactive DevPrivOps lifecycle, demonstrating that semantic-aware observability can replace manual privacy checks and act...
Catarina Silva, Bernardo Falé, Paulo Barraca et al.· International Conference on...· 0 citations
The framework makes distributed data-security response auditable and quantitatively evaluable and the main improvement direction is stronger planning verification for complex multi-step incidents.
Jie Zhang, Hai-Zhuang Liu, Le Ren et al.· ICST Transactions on Scalabl...· 0 citations
This paper introduces a novel secure lineage verification system based on Directed Acyclic Graphs (DAGs) and homomorphic hash functions, VERDICT, which incorporates bucket indexing and Merkle tree verification to provide cryptographic guarantees of data and event existence.
Bilel Zaghdoudi, M. Potop-Butucaru· IACR Cryptology ePrint Archi...· 0 citations
The use of high-throughput data ingestion pipelines that can constantly amass and process data collected by heterogeneous sources into a centralized or distributed data storage system is increasingly becoming the cornerstone of modern enterprise data ecosystems. Since these pipelines handle delicate personally identifi...
Shreyansh Sharma· International journal of com...· 0 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.
