Week 6 Scientific Paper Proposal

contributions/scientific-paper/week6/adammeh-birgerk/README.md

@@ -0,0 +1,28 @@
+# Assignment Proposal
+
+## Title
+
+  - Control and Data Flow in Security Smell Detection for Infrastructure as Code: Is It Worth the Effort?
+
+## Names and KTH ID
+
+  - Adam Mehdi ([email protected])
+  - Birger Karlsson ([email protected])
+
+## Deadline
+
+  - Week 6
+
+## Category
+
+  - Scientific Paper
+
+## Description
+
+We intend to present the paper "Control and Data Flow in Security Smell Detection for Infrastructure as Code: Is It Worth the Effort?" published in "2023 IEEE/ACM". This paper investigates the detection of security smells—bad practices that may lead to vulnerabilities—in IaC scripts. The authors propose GASEL, a detector based on Program Dependence Graphs (PDGs). Security smells are identified using graph queries over these PDGs. Additionally, the paper conducts an evaluation on a curated oracle of 243 real-world smells and a dataset of 15,000+ Ansible scripts.
+
+Paper link: https://ieeexplore.ieee.org/abstract/document/10174011
+
+**Relevance**
+
+This paper is relevant to DevSecOps as it ensures security by addressing "security smells" in IaC, being common patterns for security flaws. This is relevant and important to avoid writing insecure code that follows such risky patterns while writing IaC scripts.