40 citations · 116 across the 10 of their papers we have counts for
4 papers · 1 filter
Using Honeybuckets to Characterize Cloud Storage Scanning in the Wild
Katherine Izhikevich, Geoff Voelker, Stefan Savage +1
In this work, we analyze to what extent actors target poorly-secured cloud storage buckets for attack. We deployed hundreds of AWS S3 honeybuckets with different names and content…
Cloud Watching: Understanding Attacks Against Cloud-Hosted Services
Liz Izhikevich, Manda Tran, Michalis Kallitsis +2
Cloud computing has dramatically changed service deployment patterns. In this work, we analyze how attackers identify and target cloud services in contrast to traditional enterpris…
Stratosphere: Finding Vulnerable Cloud Storage Buckets
Jack Cable, Drew Gregory, Liz Izhikevich +1
Misconfigured cloud storage buckets have leaked hundreds of millions of medical, voter, and customer records. These breaches are due to a combination of easily-guessable bucket nam…
LZR: Identifying Unexpected Internet Services
Liz Izhikevich, Renata Teixeira, Zakir Durumeric
Internet-wide scanning is a commonly used research technique that has helped uncover real-world attacks, find cryptographic weaknesses, and understand both operator and miscreant b…