Application Security Posture Management (ASPM)
Know what runs where. Fix what matters.
How can AI connect a software release to what is running, who owns it and which security fixes need attention first?
A finding becomes easier to act on when it is connected to the deployed software, its exposure and its owner. We explore how AI can help maintain that release-to-runtime view, prioritise remediation using available evidence and verify that a fix reaches the affected application.
Research areas
Map source changes and release artifacts to the applications and versions running in each environment.
Connect findings with exposure, dependencies and the people responsible for remediation.
Prioritise patches using evidence of reachability, impact and deployment context.
Verify that a proposed fix is released, deployed and effective in the affected environment.
Publications & related resources
Projects, publications and research materials will be added here.
Contribute to this research.
Explore student research, internships and collaboration with the lab.