Diagnosing Programmable Data Plane Attacks with Provenance Observability

A Study of Kernel Telemetry Options for Security-Oriented Provenance

Provenance aims to capture the origins, transformations, and interactions of system objects for security and forensic applications. Existing provenance capture approaches still face major challenges and are not yet ready for production environments. In this paper, we first analyze the main kernel telemetry capture appr...

Improving the Security of Containerized Workloads using Transparency and Traceability Services

This paper presents an architecture for verifiable container image distribution that addresses key-management challenges and enables policy-enforced admission-time verification, and implements a proof-of-concept integrated with GitHub Actions and GitLab Runners that mitigates common supply-chain attacks under a realist...

Automated & Real-Time Privacy Quantification for Microservices Architectures

: The decentralized nature of microservice architectures introduces privacy challenges that exceed the capabilities of traditional static auditing. To address this, we present a real-time privacy quantification framework based on the Privacy-sensitive Data Categorization (PsDC) model. By combining Layer 7 Deep Packet I...

Playbook-Guided Executable SOC Automation for Privacy-Preserving Response in Distributed Networked Systems

INTRODUCTION: Distributed networks require security operations center (SOC) automation that connects data security monitoring, privacy-aware evidence handling, controlled execution, and measurable evidence. Static playbooks cannot fully handle ambiguous cross-domain incident context. OBJECTIVES: This paper presents an...

VERDICT: A Cryptographically Verifiable Framework for Secure Data Lineage in Decentralized DAGs

Security and Privacy Controls in Ingestion Pipelines (PII masking, Encryption, Access Governance)

The use of high-throughput data ingestion pipelines that can constantly amass and process data collected by heterogeneous sources into a centralized or distributed data storage system is increasingly becoming the cornerstone of modern enterprise data ecosystems. Since these pipelines handle delicate personally identifi...