Title
Abuse Of The Cloud As An Attack Platform
Abstract
We present an exploratory study of responses from 75 security professionals and ethical hackers in order to understand how they abuse cloud platforms for attack purposes. The participants were recruited at the Black Hat and DEF CON conferences. We presented the participants' with various attack scenarios and asked them to explain the steps they would have carried out for launching the attack in each scenario. Participants' responses were studied to understand attackers' mental models, which would improve our understanding of necessary security controls and recommendations regarding precautionary actions to circumvent the exploitation of clouds for malicious activities. We observed that in 93.78% of the responses, participants are abusing cloud services to establish their attack environment and launch attacks.
Year
DOI
Venue
2020
10.1109/COMPSAC48688.2020.0-125
2020 IEEE 44TH ANNUAL COMPUTERS, SOFTWARE, AND APPLICATIONS CONFERENCE (COMPSAC 2020)
Keywords
DocType
ISSN
Cloud Abuse, Attacker Behavior, IaaS Cloud
Conference
0730-3157
Citations 
PageRank 
References 
0
0.34
0
Authors
5
Name
Order
Citations
PageRank
Moitrayee Chatterjee101.01
Prerit Datta201.01
Faranak Abri301.69
Akbar Siami Namin448137.30
Keith S. Jones565.85