43 citations · 45 across the 4 of their papers we have counts for
4 papers · 1 filter
Forward Pass: On the Security Implications of Email Forwarding Mechanism and Policy
Enze Liu, Gautam Akiwate, Mattijs Jonker +4
The critical role played by email has led to a range of extension protocols (e.g., SPF, DKIM, DMARC) designed to protect against the spoofing of email sender domains. These protoco…
Hopper: Modeling and Detecting Lateral Movement (Extended Report)
Grant Ho, Mayank Dhiman, Devdatta Akhawe +4
In successful enterprise attacks, adversaries often need to gain access to additional machines beyond their initial point of compromise, a set of internal movements known as latera…
A Large-Scale Analysis of Attacker Activity in Compromised Enterprise Accounts
Neil Shah, Grant Ho, Marco Schweighauser +3
We present a large-scale characterization of attacker activity across 111 real-world enterprise organizations. We develop a novel forensic technique for distinguishing between atta…
Detecting and Characterizing Lateral Phishing at Scale
Grant Ho, Asaf Cidon, Lior Gavish +5
We present the first large-scale characterization of lateral phishing attacks, based on a dataset of 113 million employee-sent emails from 92 enterprise organizations. In a lateral…