Research

I had been browsing NASA’s public GitHub repositories out of curiosity when one project immediately stood out: ION-DTN, the reference implementation of Delay/Disruption Tolerant Networking. This is the software stack designed for environments where links are unreliable, latency is extreme, and packets may need to survive long interruptions before they arrive. That alone made it interesting from a security perspective. A protocol built around packets arriving whenever they can, often under hostile conditions, is exactly the kind of place where parser mistakes tend to matter. So I started reading the code that handles data as soon as it arrives from the network. ...

Paper presented at the 9th Jornadas Nacionales de Investigación en Ciberseguridad (JNIC 2024, Seville), written in Spanish: “Desarrollo de Servicios Confiables en Kubernetes Utilizando TEEs”. Cloud services process large amounts of sensitive data, so they need to guarantee its confidentiality and integrity. Confidential computing addresses this with hardware-based Trusted Execution Environments (TEEs) that limit access to unencrypted data, which makes them a good fit for clouds where the infrastructure belongs to third parties that are not always trusted. ...