Wen-Bo Zhang

Security smell detection in Dockerfiles

An LLM-assisted IaC security framework that integrates a fine-tuned multi-label risk detector trained on 4,000 manually annotated Dockerfiles across ten high-impact categories, and a retrieval-augmented interpretation-and-repair module that outputs both human-readable rationales and corrected code.