other · CISPA Helmholtz Center · 2023

Cloud Watching: Understanding Attacks Against Cloud-Hosted Services

Izhikevich, Liz, Tran, Manda, Kallitsis, Michalis, Durumeric, Zakir, Fass, Aurore

Cited by 0Open access

Abstract

Cloud computing has dramatically changed service deployment patterns. In this work, we analyze how attackers identify and target cloud services in contrast to traditional enterprise networks and network telescopes. Using a diverse set of cloud honeypots in 5 providers and 23 countries as well as 2 educational networks and 1 network telescope, we analyze how IP address assignment, geography, network, and service-port selection, influence what services are targeted in the cloud. We find that scanners that target cloud compute are selective: they avoid scanning networks without legitimate services and they discriminate between geographic regions. Further, attackers mine Internet-service search engines to find exploitable services and, in some cases, they avoid targeting IANA-assigned protocols, causing researchers to misclassify at least 15% of traffic on select ports. Based on our results, we derive recommendations for researchers and operators.

Cite this paper

APA 7

Izhikevich, L., Tran, M., Kallitsis, M., Durumeric, Z., & Fass, A. (2023). Cloud Watching: Understanding Attacks Against Cloud-Hosted Services. CISPA Helmholtz Center. https://doi.org/10.60882/cispa.25303891

MLA 9

Izhikevich, Liz, et al. “Cloud Watching: Understanding Attacks Against Cloud-Hosted Services.” CISPA Helmholtz Center, 2023, https://doi.org/10.60882/cispa.25303891.

Chicago

Izhikevich, Liz, Manda Tran, Michalis Kallitsis, Zakir Durumeric, and Aurore Fass. 2023. “Cloud Watching: Understanding Attacks Against Cloud-Hosted Services.” CISPA Helmholtz Center. https://doi.org/10.60882/cispa.25303891.

Harvard

Izhikevich, L. et al. (2023) ‘Cloud Watching: Understanding Attacks Against Cloud-Hosted Services’, CISPA Helmholtz Center. Available at: https://doi.org/10.60882/cispa.25303891.

BibTeX

@misc{izhikevich2023cloud,
  title = {{Cloud Watching: Understanding Attacks Against Cloud-Hosted Services}},
  author = {Izhikevich, Liz and Tran, Manda and Kallitsis, Michalis and Durumeric, Zakir and Fass, Aurore},
  journal = {CISPA Helmholtz Center},
  year = {2023},
  doi = {10.60882/cispa.25303891}
}

Made from the index record. Check names, capitalisation and page numbers against the paper. Need another style? AI for Research has over 10,000.