C8s is a confidential computing architecture for Kubernetes that uses hardware Trusted Execution Environments (TEEs) to provide cryptographically provable confidentiality, integrity, and verifiability…

SPARK introduces a predictive, traffic-aware autoscaling toolchain for Kubernetes that uses eBPF to enhance security and significantly reduce timeout errors during sudden traffic spikes.

dstack-capsule is a Kubernetes platform that enables fine-grained, Pod-level remote attestation on Intel TDX, allowing multiple confidential workloads to share a single VM without sacrificing security…

The paper introduces an open-source security framework that significantly improves cloud infrastructure security assessment by unifying identity and resource data, reducing false positives, and automa…

The paper introduces the Agent Name Service (ANS), a DNS-inspired trust layer implemented in Kubernetes, to provide secure discovery, identity, and governance for autonomous AI agents.

SOCI (Seekable OCI) is a lazy-loading architecture that reduces container image pulling time in Kubernetes environments by building an index over standard OCI images and serving file accesses via HTTP…

This paper introduces SequenceFI, a non-intrusive framework for temporal fault injection in microservice systems, which observes message-level events, synthesizes temporal guards from traces, and achi…

The paper proposes a novel semi-automated method to perform continuous threat modeling by inferring the actual system architecture from combined static configuration and dynamic network flow data, sig…

CLOUDBURST introduces a novel framework and taxonomy for passive cloud-native beacons, demonstrating that IAM Canary Roles are the most effective vector for real-time threat attribution in modern clou…

The paper introduces Kumo, a novel security-focused simulator that enables controlled analysis of resource sharing and scheduling risks in serverless cloud environments, demonstrating that scheduler c…

NetSecBed is a container-native, scenario-oriented testbed designed to generate reproducible and auditable network traffic evidence and execution artifacts for complex cybersecurity research.

The paper introduces EBCC, an OCI-compatible runtime architecture that manages composite confidential-computing workloads by integrating TEE-backed execution into the standard container lifecycle.

This paper proposes using adversarial training to proactively harden the k-means clustering classifier, thereby mitigating evasion attacks that threaten resource provisioning stability in fog computin…

The paper introduces Spandana, an architecture that decouples SLO enforcement from cost optimization in cloud-based online services, achieving high utilization, strict SLO adherence, and cost savings.

This paper proposes a dependency-aware autoscaling framework for serverless computing, integrating graph-based bottleneck identification, short-term workload forecasting, multi-model consensus, and co…

This paper introduces and evaluates a scalable, reproducible 'CTF as a Service' (CaaS) platform designed to simplify the infrastructure management required for cybersecurity training.

This paper introduces Ichnos+, a system to estimate the environmental footprint of Nextflow scientific workflows using post-hoc analysis and node-specific power models.

The paper identifies and quantifies 'zombie linkages' in various DNS integrations, demonstrating that persistent, outdated mappings pose significant security risks across different naming ecosystems.

This paper presents a software ecosystem enabling consistent development environments for running workflows across diverse hardware platforms.

This paper proposes cross-IP request coalescing to reduce latency in virtualized cloud data centers by submitting multi-device I/O as a single compound request.