Metadata Assisted Supply-Chain Attack Detection for Ansible
Peer-Reviewed Research PaperAbstract
This study examines metadata-assisted detection of supply chain attacks in Infrastructure as Code (IaC), focusing on metadata's role in identifying security smells. Metadata, including dependency relationships and author records, provides insights into IaC script integrity and trustworthiness. The research explores how this contextual information can be leveraged to detect potential supply chain vulnerabilities in Ansible deployments.
Key Focus Areas
- Supply chain attack detection in IaC
- Metadata analysis for security
- Ansible security smells identification
- Dependency relationship analysis