~/abhishek-reddy

[ publications ]

Selected work

Papers, conference talks, CVEs, and coordinated disclosures.

2025

  • Talk

    Workload Identity at Scale: Lessons from Running SPIRE in Production

    Abhishek Reddy

    SecurityConf 2025

    A field report on operating a SPIFFE/SPIRE deployment across thousands of workloads — issuance, rotation, and the failure modes that only show up at scale.

    [slides] [video]

2024

  • Disclosure high

    CVE-2024-00000 — Privilege escalation via unvalidated SPIFFE ID in a service mesh sidecar

    Abhishek Reddy

    Coordinated disclosure

    Placeholder entry. A sidecar accepted an identity document without fully validating its trust domain, allowing a workload to impersonate a peer. Replace with your real disclosure or delete.

    [link]

2023

  • Paper

    Toward Zero-Downtime Credential Rotation in Mutual-TLS Meshes

    Abhishek Reddy, Co-Author Name

    Workshop on Applied Cryptography and Systems Security

    Placeholder entry. A design for overlapping credential validity windows that decouples rotation cadence from availability. Replace with your real publication or delete.

    [pdf]