Research¶
Indian Hill Labs research explores practical software assurance, secure container engineering, artifact transparency, vulnerability applicability, and methods for producing verifiable technical evidence.
Publication approach¶
Research published here should:
- state the question, method, assumptions, and limitations;
- distinguish measured results from interpretation;
- identify relevant artifacts, data, and tool versions when disclosure is safe;
- avoid exposing credentials, private infrastructure, or active uncoordinated vulnerabilities; and
- record corrections or material revisions.
Published technical notes¶
- ASP.NET 10 secure-container baseline — a point-in-time baseline assessment with pinned image identity, tool versions, vulnerability data context, limitations, and reproducible commands.
- Repeatable Container Compliance — an implementation note for converting configuration expectations into repeatable controls and per-digest evidence.
- Container and Ubuntu STIG Evidence — scope, applicability, and evidence-boundary analysis for the published baseline.
Measured results are snapshots, not timeless claims. Readers should use the observation date and exact digest recorded in each note and should expect results to change when an artifact, scanner, vulnerability database, or source benchmark changes.
Related foundational material is available in IHL-SCS-001, Artifact Assurance, and the Reference Library.