Work

Closing the Gap: Automated Discovery of Secure Dockerfile Reference Standards via Semantic Clustering in Enterprise Inner Source

Year: 2026

Type: conference-paper

Abstract: Containerization dominates enterprise software delivery, yet Dockerfiles that assemble container images frequently harbor security misconfigurations and structural technical debt. This problem is poorly understood in corporate inner-source environments, where proprietary context and isolated governance prevent direct application of open-source findings.

Source: IEEE/ACM International Conference on Automated Software Engineering (ASE)

DOI: 10.1145/3832783.3834500

Authors: Jessica Hösl, Benedikt Hofmann, Patrick Stöckle

Institutions: Technical University of Munich, Siemens (Germany)

Language: English

Topic: Software Engineering Research

Subfield: Information Systems

Field: Computer Science

Domain: Physical Sciences

Open Access status: hybrid

OpenAlex ID: W7204482393

FWCI:

Cites: 19

Cited by:

Related to: 10