CACLE - Automated Mitigation for Misconfiguration Vulnerabilities in Cloud Systems
CACLE - Automated Mitigation for Misconfiguration Vulnerabilities in Cloud Systems
Douglas J. Millward,Martin J. Reed,Nkaepe E. E. Olaniyi
TLDR
The results show that not only is the Configuration and Checking Logic Engine as effective as other solutions that check IaC templates, but it is also an order of magnitude faster than existing approaches.
Abstract
Recent studies have highlighted the increasing risk to Cloud Systems of User Misconfiguration Errors. This paper provides an evolutionary approach to identifying and mitigating such errors, known as the Configuration and Checking Logic Engine. We demonstrate its effectiveness utilizing test files from publicly available GitHub repositories. The results show that not only is it as effective as other solutions that check IaC templates, but it is also an order of magnitude faster than existing approaches.