Different Kind of Smells: Security Smells in Infrastructure as Code Scripts
Akond Rahman, Laurie Williams
Abstract
In this article, we summarize our recent research findings related to infrastructure as code (IaC) scripts, where we have identified 67,801 occurrences of security smells that include 9,175 hard-coded passwords. We hope our work will facilitate awareness among practitioners who use IaC.
Topics & Concepts
Scripting languageComputer scienceCode smellCode (set theory)PasswordComputer securityWorld Wide WebProgramming languageSoftwareSoftware developmentSoftware qualitySet (abstract data type)Advanced Malware Detection TechniquesSecurity and Verification in ComputingInformation and Cyber Security