GLITCH: Automated Polyglot Security Smell Detection in Infrastructure as Code

Abstract

Infrastructure as Code (IaC) is the process of managing IT infrastructure via programmable configuration files (also called IaC scripts). Like other software artifacts, IaC scripts may contain security smells, which are coding patterns that can result in security weaknesses. Automated analysis tools to detect security smells in IaC scripts exist, but they focus on specific technologies such as Puppet, Ansible, or Chef. This means that when the detection of a new smell is implemented in one of the tools, it is not immediately available for the technologies supported by the other tools — the only option is to duplicate the effort.

BibTeX

@inproceedings{Saavedra-Ferreira:ASE22,
  author    = {Nuno Saavedra and
               Jo{\~{a}}o F. Ferreira},
  title     = {{GLITCH:} Automated Polyglot Security Smell Detection in Infrastructure as Code},
  booktitle = {ASE},
  pages     = {47:1--47:12},
  publisher = {{ACM}},
  year      = {2022},
}

GLITCH: Automated Polyglot Security Smell Detection in Infrastructure as Code

Abstract

Related papers