Announcement_ase_2026_paper

Patrick Stoeckle and I presented our paper “Closing the Gap: Automated Discovery of Secure Dockerfile Reference Standards via Semantic Clustering in Enterprise Inner Source” at ASE 2026 in Munich. Jessica Hösl, our thesis student, was the main author of the paper.

The paper presents an automated pipeline that analyzed 11,470 Dockerfiles from inner source repositories at Siemens AG. It shows that adopting existing internal reference implementations could improve security posture by 60.4%.