Bypassing Cloud Providers' data validation to store arbitrary data

Proceedings of the 2013 IFIP/IEEE International Symposium on Integrated Network Management, IM 2013

Volumn , Issue , 2013, Pages 1-8

  Machado, Guilherme Sperb ^a   Hecht, Fabio V ^a   Waldburger, Martin ^a   Stiller, Burkhard ^a  

^a UNIVERSITY OF ZURICH   (Switzerland)

Author keywords

Cloud Computing; Cloud Providers; Cloud Services; Data Validation; Security; Software as a Service

Indexed keywords

CLOUD PROVIDERS; CLOUD SERVICES; DATA VALIDATION; SECURITY; SOFTWARE-AS-A-SERVICE;

APPLICATION PROGRAMS; CLOUD COMPUTING; NETWORK MANAGEMENT; SOFTWARE AS A SERVICE (SAAS);

SECURITY OF DATA;

EID: 84883467550     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (21)

1. Alexa Website: "The Web Information Company". http://www.alexa.com. Last visited on: September 2012.
2. Amazon Web Services: Products and Services. http://aws.amazon.com/ products. Last visited on: Aug. 2012.
3. M. Armbrust, A. Fox, R. Griffith, A. D. Joseph, R. H. Katz, A. Konwinski, G. Lee, D. A. Patterson, A. Rabkin, I. Stoica, M. Zaharia: "Above the Clouds: A Berkeley View of Cloud Computing". Technical report UCB/EECS-2009-28, Electrical Engineering and Computer Sciences, University of California at Berkeley, Berkeley, USA, February 2009.
4. J. Bach: "Explanatory Testing Explained". Satisfice Inc., Technical Report, Version 1.3. http://www.satisfice.com/articles/et-Article.pdf, April 2003.
5. D. Brumley, P. Poosankam, D. X. Song, and J. Zheng: "Automatic Patch-based Exploit Generation is Possible: Techniques and Implications". 2008 IEEE Symposium on Security and Privacy (SP 2008). Washington, DC, USA, pp. 143-157. doi: 10.1109/SP.2008.17.
6. J. Fridrich, M. Goljan, and R. Du: "Steganalysis Based on JPEG Compatibility". SPIE Multimedia Systems and Applications IV, Special Session on Theoretical and Practical Issues in Digital Watermarking and Data Hiding, Vol. 4518, August 2001, pp. 275-280.
7. V. Gancheva: "Data Security and Validation Framework for a Scientific Data Processing SOA Based System", Developments in E-systems Engineering (DeSE), December 2011, pp. 576-580, doi: 10.1109/DeSE.2011.75
8. Google Picasa: "Organize, Edit, and Share Your Photos". http://picasa.google.com. Last visited on: August 2012.
9. D. Groenewegen, E. Visser: "Integration of Data Validation and User Interface Concerns in a DSL for Web Applications". International Conference of Software Language Engineering (SLE 2009), Lecture Notes in Computer Science, Revised Selected Paper, Denver, CO, USA, October 5-6, 2009, vol. 5969, pp. pp 164-173. doi: 10.1007/978-3-642-12107-4
10. N. F. Johnson and S. Jajodia: "Steganalysis of Images Created using Current Steganography Software". Second International Workshop on Information Hiding (IH 1998), Lecture Notes in Computer Science, Vol. 1525, 1998, pp. 273-289.
11. G. C. Kessler: "An Overview of Steganography for the Computer Forensics Examiner". Technical Report, Gary Kessler Associates, February 2004. http://www.garykessler.net/library/fsc-stego.html.
12. M. Nilsson: "ID3 Tag Version 2.3". Informal Standard, February 1999. http://www.id3.org/id3v2.3.0.
13. A. Petukhov and D. Kozlov: "Detecting Security Vulnerabilities in Web Applications Using Dynamic Analysis with Penetration Testing". Application Security Confernce, Ghent, Belgium, May 2008.
14. C. S. Sapp: "WAVE PCM SoundFile Format". Project for the lecture Perceptual Audio Coding. https://ccrma.stanford.edu/courses/422/ projects/WaveFormat/. Last visited on: August 2012.
15. SoundCloud: "Share your Sounds". http://www.soundcloud.com. Last visited on: August 2012.
16. ITU Standard: "Digital Compression and Coding of Continuous-Tone Still Images". http://www.w3.org/Graphics/JPEG/itu-t81.pdf. Last visited on: August 2012.
17. E. Swanson, C. J. Ganier, R. Holman, and J. Rosser: "Steganography in Signals". Lecture Project, 2001. http://www.clear.rice.edu/elec301/ Projects01/smokey-steg/. Last visited on: August 2012.
18. Wikipedia: "File Format". http://en.wikipedia.org/wiki/File- format. Last visited on: August 2012.
19. Wikipedia: "GMailFS". http://en.wikipedia.org/wiki/GMailFS. Last visited on: August 2012.
20. W3C Website: "Portable Network Graphics (PNG) Specification". Available at: http://www.w3.org/TR/PNG/. Last visited on: Aug. 2012.
21. J.P. Yoon: "Techniques for Data and Rule Validation in Knowledge based Systems", Fourth Annual Conference on Systems Integrity, Software Safety and Process Security (COMPASS 1989), June 1989, pp. 62-70. doi: 10.1109/CMPASS.1989.76042