Open Access. Powered by Scholars. Published by Universities.®
Articles 1 - 1 of 1
Full-Text Articles in Entire DC Network
Canary: An Automated Approach To Security Scanning And Remediation, David Wiles
Canary: An Automated Approach To Security Scanning And Remediation, David Wiles
Masters Theses & Specialist Projects
Modern software has a smaller attack surface today than in the past. Memory-safe languages, container runtimes, virtual machines, and a mature web stack all contribute to the relative safety of the web and software in general compared to years ago. Despite this, we still see high-profile bugs, hacks, and outages which affect major companies and widely-used technologies. The extensive work that has gone into hardening virtualization, containerization, and commonly used applications such as Nginx still depends on the end-user to configure correctly to prevent a compromised machine.
In this paper, I introduce a tool, which I call Canary, which can …