3

LeakGauge: Infrastructure-as-Code–Aware Sensitive Data Flow Analysis in Event-Driven Serverless Applications

LeakGauge is an IaC-aware static analysis framework that traces sensitive data flows across serverless deployments. Using CodeQL-based data- and taint-flow analysis informed by Infrastructure-as-Code configurations, LeakGauge identifies …