MSc dissertation · 2026

Benchmarking cloud misconfiguration detection on Azure

A reproducible comparison of static infrastructure security scanning and runtime detection for fintech workloads on Microsoft Azure.

Research focus

The benchmark examines how different detection approaches identify Azure cloud configuration issues, including detection coverage, false positives and time to detection.

Method

I developed Terraform and Python-based experimental artefacts and compared static scanning with Azure Policy, Defender for Cloud and KQL-based runtime checks.

Research materials

Experimental artefacts are publicly archived.