{"id":"https://openalex.org/W4396735870","doi":"https://doi.org/10.1145/3589334.3645499","title":"Unfiltered: Measuring Cloud-based Email Filtering Bypasses","display_name":"Unfiltered: Measuring Cloud-based Email Filtering Bypasses","publication_year":2024,"publication_date":"2024-05-08","ids":{"openalex":"https://openalex.org/W4396735870","doi":"https://doi.org/10.1145/3589334.3645499"},"language":"en","primary_location":{"id":"doi:10.1145/3589334.3645499","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3589334.3645499","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Web Conference 2024","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3589334.3645499","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5004355007","display_name":"Sumanth Rao","orcid":"https://orcid.org/0000-0002-0075-457X"},"institutions":[{"id":"https://openalex.org/I36258959","display_name":"University of California San Diego","ror":"https://ror.org/0168r3w48","country_code":"US","type":"education","lineage":["https://openalex.org/I36258959"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Sumanth Rao","raw_affiliation_strings":["UC San Diego, La Jolla, CA, USA"],"affiliations":[{"raw_affiliation_string":"UC San Diego, La Jolla, CA, USA","institution_ids":["https://openalex.org/I36258959"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5000651880","display_name":"Enze Liu","orcid":"https://orcid.org/0000-0003-4288-8485"},"institutions":[{"id":"https://openalex.org/I36258959","display_name":"University of California San Diego","ror":"https://ror.org/0168r3w48","country_code":"US","type":"education","lineage":["https://openalex.org/I36258959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Enze Liu","raw_affiliation_strings":["UC San Diego, La Jolla, CA, USA"],"affiliations":[{"raw_affiliation_string":"UC San Diego, La Jolla, CA, USA","institution_ids":["https://openalex.org/I36258959"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5093406308","display_name":"Grant Ho","orcid":"https://orcid.org/0009-0002-4216-951X"},"institutions":[{"id":"https://openalex.org/I39422238","display_name":"University of Illinois Chicago","ror":"https://ror.org/02mpq6x41","country_code":"US","type":"education","lineage":["https://openalex.org/I39422238"]},{"id":"https://openalex.org/I40347166","display_name":"University of Chicago","ror":"https://ror.org/024mw5h28","country_code":"US","type":"education","lineage":["https://openalex.org/I40347166"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Grant Ho","raw_affiliation_strings":["University of Chicago, Chicago, IL, USA"],"affiliations":[{"raw_affiliation_string":"University of Chicago, Chicago, IL, USA","institution_ids":["https://openalex.org/I40347166","https://openalex.org/I39422238"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5081366293","display_name":"Geoffrey M. Voelker","orcid":"https://orcid.org/0000-0003-0865-7499"},"institutions":[{"id":"https://openalex.org/I36258959","display_name":"University of California San Diego","ror":"https://ror.org/0168r3w48","country_code":"US","type":"education","lineage":["https://openalex.org/I36258959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Geoffrey M. Voelker","raw_affiliation_strings":["UC San Diego, La Jolla, CA, USA"],"affiliations":[{"raw_affiliation_string":"UC San Diego, La Jolla, CA, USA","institution_ids":["https://openalex.org/I36258959"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5048394730","display_name":"Stefan Savage","orcid":"https://orcid.org/0000-0001-6617-8029"},"institutions":[{"id":"https://openalex.org/I36258959","display_name":"University of California San Diego","ror":"https://ror.org/0168r3w48","country_code":"US","type":"education","lineage":["https://openalex.org/I36258959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Stefan Savage","raw_affiliation_strings":["UC San Diego, La Jolla, CA, USA"],"affiliations":[{"raw_affiliation_string":"UC San Diego, La Jolla, CA, USA","institution_ids":["https://openalex.org/I36258959"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5004355007"],"corresponding_institution_ids":["https://openalex.org/I36258959"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.08091396,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1702","last_page":"1711"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9983999729156494,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7732661962509155},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.7227372527122498},{"id":"https://openalex.org/keywords/service-provider","display_name":"Service provider","score":0.6067389845848083},{"id":"https://openalex.org/keywords/guard","display_name":"Guard (computer science)","score":0.5781856179237366},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.5397722125053406},{"id":"https://openalex.org/keywords/cloud-service-provider","display_name":"Cloud service provider","score":0.43062710762023926},{"id":"https://openalex.org/keywords/service","display_name":"Service (business)","score":0.40790241956710815},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.391612708568573},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.33300334215164185},{"id":"https://openalex.org/keywords/cloud-computing-security","display_name":"Cloud computing security","score":0.14858689904212952},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.0774255096912384},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.07661163806915283}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7732661962509155},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.7227372527122498},{"id":"https://openalex.org/C116537","wikidata":"https://www.wikidata.org/wiki/Q2169973","display_name":"Service provider","level":3,"score":0.6067389845848083},{"id":"https://openalex.org/C141141315","wikidata":"https://www.wikidata.org/wiki/Q2379942","display_name":"Guard (computer science)","level":2,"score":0.5781856179237366},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.5397722125053406},{"id":"https://openalex.org/C2983819522","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud service provider","level":4,"score":0.43062710762023926},{"id":"https://openalex.org/C2780378061","wikidata":"https://www.wikidata.org/wiki/Q25351891","display_name":"Service (business)","level":2,"score":0.40790241956710815},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.391612708568573},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.33300334215164185},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.14858689904212952},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0774255096912384},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.07661163806915283},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3589334.3645499","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3589334.3645499","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Web Conference 2024","raw_type":"proceedings-article"},{"id":"pmh:oai:uchicago.tind.io:11812","is_oa":true,"landing_page_url":"http://knowledge.uchicago.edu/record/11812","pdf_url":null,"source":{"id":"https://openalex.org/S4306402460","display_name":"Knowledge@UChicago (University of Chicago)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I40347166","host_organization_name":"University of Chicago","host_organization_lineage":["https://openalex.org/I40347166"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://knowledge.uchicago.edu/record/11812","raw_type":"Text"}],"best_oa_location":{"id":"doi:10.1145/3589334.3645499","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3589334.3645499","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Web Conference 2024","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1169421534","display_name":null,"funder_award_id":"CNS-2152644","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G4394157179","display_name":null,"funder_award_id":"CNS-2152644","funder_id":"https://openalex.org/F4320323817","funder_display_name":"Universitas Brawijaya"},{"id":"https://openalex.org/G848032724","display_name":null,"funder_award_id":"Science","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320323817","display_name":"Universitas Brawijaya","ror":"https://ror.org/01wk3d929"},{"id":"https://openalex.org/F4320332603","display_name":"University of California, San Diego","ror":"https://ror.org/0168r3w48"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":18,"referenced_works":["https://openalex.org/W1996430944","https://openalex.org/W2159256070","https://openalex.org/W2161444396","https://openalex.org/W2290364176","https://openalex.org/W2344804892","https://openalex.org/W2734941459","https://openalex.org/W2914982603","https://openalex.org/W2963945982","https://openalex.org/W3205434230","https://openalex.org/W3208153782","https://openalex.org/W3216586764","https://openalex.org/W4206688049","https://openalex.org/W4307020323","https://openalex.org/W4307020407","https://openalex.org/W4323349071","https://openalex.org/W4385412234","https://openalex.org/W4387880895","https://openalex.org/W4388857906"],"related_works":["https://openalex.org/W3082957696","https://openalex.org/W809504972","https://openalex.org/W2946446321","https://openalex.org/W2168825410","https://openalex.org/W2294541949","https://openalex.org/W2176896229","https://openalex.org/W2515603152","https://openalex.org/W3183876646","https://openalex.org/W2767841637","https://openalex.org/W3215009256"],"abstract_inverted_index":{"Email":[0],"service":[1,39],"has":[2,12,114],"increasingly":[3],"been":[4],"outsourced":[5],"to":[6,34,53,82,109,121,167],"cloud-based":[7,151],"providers":[8],"and":[9,44,133,170,180],"so":[10],"too":[11],"the":[13,46,75,89,175],"task":[14],"of":[15,131,144,149],"filtering":[16,38,91,153,179],"such":[17,99,124,145,168],"messages":[18,48,85],"for":[19],"potential":[20],"threats.":[21],"Thus,":[22],"customers":[23],"will":[24],"commonly":[25,102],"direct":[26],"that":[27,86,98,142,165],"their":[28,54],"incoming":[29],"email":[30,37,55,76,90,118,152,178],"is":[31,79],"first":[32],"sent":[33,51],"a":[35,106,137],"third-party":[36],"(e.g.,":[40,58],"Proofpoint":[41],"or":[42,60],"Barracuda)":[43],"only":[45,83],"\"clean\"":[47],"are":[49,101],"then":[50],"on":[52],"hosting":[56,77,119,181],"provider":[57,78,120],"Gmail":[59],"Microsoft":[61],"Exchange":[62],"Online).":[63],"However,":[64],"this":[65,94,159],"loosely":[66],"coupled":[67],"approach":[68],"can,":[69],"in":[70,158,173],"theory,":[71],"be":[72,156],"bypassed":[73,157],"if":[74,111],"not":[80],"configured":[81,116],"accept":[84],"arrive":[87],"from":[88],"service.":[92],"In":[93],"paper":[95],"we":[96,140],"demonstrate":[97],"bypasses":[100],"possible.":[103],"We":[104,161],"document":[105],"multi-step":[107],"methodology":[108],"infer":[110],"an":[112,128],"organization":[113],"correctly":[115],"its":[117],"guard":[122],"against":[123],"scenarios.":[125],"Then,":[126],"using":[127],"empirical":[129],"measurement":[130],"edu":[132],"com":[134],"domains":[135],"as":[136],"case":[138],"study,":[139],"show":[141],"80%":[143],"organizations":[146],"making":[147],"use":[148],"popular":[150],"services":[154],"can":[155],"manner.":[160],"also":[162],"discuss":[163],"reasons":[164],"lead":[166],"misconfigurations":[169],"outline":[171],"challenges":[172],"hardening":[174],"binding":[176],"between":[177],"providers.":[182]},"counts_by_year":[],"updated_date":"2026-04-10T15:06:20.359241","created_date":"2025-10-10T00:00:00"}