{"id":"https://openalex.org/W4288057795","doi":"https://doi.org/10.1109/sp46214.2022.9833784","title":"Measuring and Mitigating the Risk of IP Reuse on Public Clouds","display_name":"Measuring and Mitigating the Risk of IP Reuse on Public Clouds","publication_year":2022,"publication_date":"2022-05-01","ids":{"openalex":"https://openalex.org/W4288057795","doi":"https://doi.org/10.1109/sp46214.2022.9833784"},"language":"en","primary_location":{"id":"doi:10.1109/sp46214.2022.9833784","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp46214.2022.9833784","pdf_url":null,"source":{"id":"https://openalex.org/S4363606603","display_name":"2022 IEEE Symposium on Security and Privacy (SP)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5023371126","display_name":"Eric Pauley","orcid":"https://orcid.org/0000-0002-2197-9137"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Eric Pauley","raw_affiliation_strings":["The Pennsylvania State University,Computer Science & Engineering"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Pennsylvania State University,Computer Science & Engineering","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5056794879","display_name":"Ryan Sheatsley","orcid":"https://orcid.org/0000-0001-8447-602X"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ryan Sheatsley","raw_affiliation_strings":["The Pennsylvania State University,Computer Science & Engineering"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Pennsylvania State University,Computer Science & Engineering","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5088915686","display_name":"Blaine Hoak","orcid":"https://orcid.org/0000-0003-2960-0686"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Blaine Hoak","raw_affiliation_strings":["The Pennsylvania State University,Computer Science & Engineering"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Pennsylvania State University,Computer Science & Engineering","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5031987483","display_name":"Quinn Burke","orcid":"https://orcid.org/0000-0003-1719-3112"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Quinn Burke","raw_affiliation_strings":["The Pennsylvania State University,Computer Science & Engineering"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Pennsylvania State University,Computer Science & Engineering","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5007771274","display_name":"Yohan Beugin","orcid":"https://orcid.org/0000-0003-0991-7926"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yohan Beugin","raw_affiliation_strings":["The Pennsylvania State University,Computer Science & Engineering"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Pennsylvania State University,Computer Science & Engineering","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5055368149","display_name":"Patrick McDaniel","orcid":"https://orcid.org/0000-0003-2091-7484"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Patrick McDaniel","raw_affiliation_strings":["The Pennsylvania State University,Computer Science & Engineering"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Pennsylvania State University,Computer Science & Engineering","institution_ids":["https://openalex.org/I130769515"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I130769515"],"apc_list":null,"apc_paid":null,"fwci":2.1412,"has_fulltext":false,"cited_by_count":11,"citation_normalized_percentile":{"value":0.8857538,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"558","last_page":"575"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/reuse","display_name":"Reuse","score":0.7795828580856323},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5888932943344116},{"id":"https://openalex.org/keywords/risk-analysis","display_name":"Risk analysis (engineering)","score":0.3647041916847229},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.23298949003219604},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.15507760643959045},{"id":"https://openalex.org/keywords/waste-management","display_name":"Waste management","score":0.12318769097328186}],"concepts":[{"id":"https://openalex.org/C206588197","wikidata":"https://www.wikidata.org/wiki/Q846574","display_name":"Reuse","level":2,"score":0.7795828580856323},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5888932943344116},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.3647041916847229},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.23298949003219604},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.15507760643959045},{"id":"https://openalex.org/C548081761","wikidata":"https://www.wikidata.org/wiki/Q180388","display_name":"Waste management","level":1,"score":0.12318769097328186}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/sp46214.2022.9833784","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp46214.2022.9833784","pdf_url":null,"source":{"id":"https://openalex.org/S4363606603","display_name":"2022 IEEE Symposium on Security and Privacy (SP)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":39,"referenced_works":["https://openalex.org/W304986642","https://openalex.org/W1546137167","https://openalex.org/W1586988631","https://openalex.org/W1674877186","https://openalex.org/W1894850789","https://openalex.org/W1973980104","https://openalex.org/W2000497232","https://openalex.org/W2001637908","https://openalex.org/W2029591949","https://openalex.org/W2098611419","https://openalex.org/W2102262986","https://openalex.org/W2119359024","https://openalex.org/W2131906261","https://openalex.org/W2136717145","https://openalex.org/W2158060559","https://openalex.org/W2211371252","https://openalex.org/W2522470548","https://openalex.org/W2535407856","https://openalex.org/W2748868501","https://openalex.org/W2766428736","https://openalex.org/W2889270945","https://openalex.org/W2889478221","https://openalex.org/W2889665541","https://openalex.org/W2904027722","https://openalex.org/W2962940036","https://openalex.org/W2963054141","https://openalex.org/W2981181114","https://openalex.org/W3110237032","https://openalex.org/W4237301809","https://openalex.org/W4298869031","https://openalex.org/W6610827491","https://openalex.org/W6632538867","https://openalex.org/W6635090551","https://openalex.org/W6637096788","https://openalex.org/W6642943877","https://openalex.org/W6688097089","https://openalex.org/W6727065167","https://openalex.org/W6743493502","https://openalex.org/W6754404224"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W2384475851","https://openalex.org/W2000444236","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109"],"abstract_inverted_index":{"Public":[0],"clouds":[1,18,51],"provide":[2],"scalable":[3],"and":[4,36,74,85,143,159,182,207,224,252,270],"cost-efficient":[5],"computing":[6],"through":[7],"resource":[8],"sharing.":[9],"However,":[10],"moving":[11],"from":[12],"traditional":[13],"on-premises":[14],"service":[15,250],"management":[16],"to":[17,23,33,38,55,79,255,274,281],"introduces":[19],"new":[20],"challenges;":[21],"failure":[22,35,254],"correctly":[24],"provision,":[25],"maintain,":[26],"or":[27],"decommission":[28],"elastic":[29],"services":[30],"can":[31],"lead":[32],"functional":[34],"vulnerability":[37],"attack.":[39],"In":[40,59],"this":[41,103,282],"paper,":[42],"we":[43,53,89,105,165,191,211,235],"explore":[44],"a":[45,60,91,243,262],"broad":[46],"class":[47],"of":[48,119,129,135,140,147,188,194,200,245,264,267],"attacks":[49],"on":[50],"which":[52],"refer":[54],"as":[56,145,177],"cloud":[57,61,70,87,136,170],"squatting.":[58],"squatting":[62,88],"attack,":[63],"an":[64],"adversary":[65],"allocates":[66],"resources":[67],"in":[68,127,160,220,226,279],"the":[69,96,120,185,221,227,265,272],"(e.g.,":[71,202],"IP":[72,115],"addresses)":[73],"thereafter":[75],"leverages":[76],"latent":[77,149],"configuration":[78],"exploit":[80],"prior":[81],"tenants.":[82],"To":[83],"measure":[84],"categorize":[86],"deployed":[90,106,276],"custom":[92],"Internet":[93],"telescope":[94],"within":[95],"Amazon":[97,278],"Web":[98],"Services":[99],"us-east-1":[100],"region.":[101],"Using":[102],"apparatus,":[104],"over":[107,123,167],"3":[108],"million":[109,113,169],"servers":[110,201],"receiving":[111],"1.5":[112],"unique":[114],"addresses":[116],"($\\approx$":[117],"56%":[118],"available":[121],"pool)":[122],"101":[124],"days":[125],"beginning":[126],"March":[128],"2021.":[130],"We":[131,151,259],"identified":[132,192,212,237],"4":[133],"classes":[134,139,187],"services,":[137,142,190],"7":[138,186],"third-party":[141,189],"DNS":[144],"sources":[146],"exploitable":[148,154,195,214],"configurations.":[150],"discovered":[152],"that":[153],"configurations":[155],"were":[156],"both":[157],"common":[158],"many":[161,172],"cases":[162],"extremely":[163],"dangerous;":[164],"received":[166],"5":[168],"messages,":[171],"containing":[173],"sensitive":[174],"data":[175],"such":[176],"financial":[178],"transactions,":[179],"GPS":[180],"location,":[181],"PII.":[183],"Within":[184],"dozens":[193],"software":[196],"systems":[197],"spanning":[198],"hundreds":[199],"databases,":[203],"caches,":[204],"mobile":[205],"applications,":[206],"web":[208],"services).":[209],"Lastly,":[210],"5446":[213],"domains":[215],"panning":[216],"231":[217],"eTLDs\u2014including":[218],"105":[219],"top":[222,228],"10000":[223],"23":[225],"1000":[229],"popular":[230],"domains.":[231],"Through":[232],"tenant":[233],"disclosures":[234],"have":[236],"several":[238],"root":[239],"causes,":[240],"including":[241],"(a)":[242],"lack":[244],"organizational":[246],"controls,":[247],"(b)":[248],"poor":[249],"hygiene,":[251],"(c)":[253],"follow":[256],"best":[257],"practices.":[258],"conclude":[260],"with":[261],"discussion":[263],"space":[266],"possible":[268],"mitigations":[269,273],"describe":[271],"be":[275],"by":[277],"response":[280],"study.":[283]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":5},{"year":2023,"cited_by_count":2}],"updated_date":"2026-06-26T08:34:08.712188","created_date":"2025-10-10T00:00:00"}