{"id":"https://openalex.org/W3213369372","doi":"https://doi.org/10.1145/3484266.3487380","title":"Watching the watchmen","display_name":"Watching the watchmen","publication_year":2021,"publication_date":"2021-11-04","ids":{"openalex":"https://openalex.org/W3213369372","doi":"https://doi.org/10.1145/3484266.3487380","mag":"3213369372"},"language":"en","primary_location":{"id":"doi:10.1145/3484266.3487380","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3484266.3487380","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3484266.3487380","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Twentieth ACM Workshop on Hot Topics in Networks","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3484266.3487380","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5065693468","display_name":"Guyue Liu","orcid":"https://orcid.org/0000-0002-5103-3174"},"institutions":[{"id":"https://openalex.org/I57206974","display_name":"New York University","ror":"https://ror.org/0190ak572","country_code":"US","type":"education","lineage":["https://openalex.org/I57206974"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Guyue Liu","raw_affiliation_strings":["New York University Shanghai"],"affiliations":[{"raw_affiliation_string":"New York University Shanghai","institution_ids":["https://openalex.org/I57206974"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100359745","display_name":"Ao Li","orcid":"https://orcid.org/0000-0002-8866-2302"},"institutions":[{"id":"https://openalex.org/I74973139","display_name":"Carnegie Mellon University","ror":"https://ror.org/05x2bcf33","country_code":"US","type":"education","lineage":["https://openalex.org/I74973139"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ao Li","raw_affiliation_strings":["Carnegie Mellon University"],"affiliations":[{"raw_affiliation_string":"Carnegie Mellon University","institution_ids":["https://openalex.org/I74973139"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075154772","display_name":"Christopher Canel","orcid":"https://orcid.org/0000-0001-9047-8996"},"institutions":[{"id":"https://openalex.org/I74973139","display_name":"Carnegie Mellon University","ror":"https://ror.org/05x2bcf33","country_code":"US","type":"education","lineage":["https://openalex.org/I74973139"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Christopher Canel","raw_affiliation_strings":["Carnegie Mellon University"],"affiliations":[{"raw_affiliation_string":"Carnegie Mellon University","institution_ids":["https://openalex.org/I74973139"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5079175103","display_name":"Vyas Sekar","orcid":"https://orcid.org/0000-0001-5452-8976"},"institutions":[{"id":"https://openalex.org/I74973139","display_name":"Carnegie Mellon University","ror":"https://ror.org/05x2bcf33","country_code":"US","type":"education","lineage":["https://openalex.org/I74973139"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Vyas Sekar","raw_affiliation_strings":["Carnegie Mellon University"],"affiliations":[{"raw_affiliation_string":"Carnegie Mellon University","institution_ids":["https://openalex.org/I74973139"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5065693468"],"corresponding_institution_ids":["https://openalex.org/I57206974"],"apc_list":null,"apc_paid":null,"fwci":0.16,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":{"value":0.54675793,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":95},"biblio":{"volume":null,"issue":null,"first_page":"147","last_page":"154"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9976999759674072,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9976999759674072,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9891999959945679,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9825000166893005,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/outsourcing","display_name":"Outsourcing","score":0.8415951132774353},{"id":"https://openalex.org/keywords/troubleshooting","display_name":"Troubleshooting","score":0.8349350094795227},{"id":"https://openalex.org/keywords/privilege","display_name":"Privilege (computing)","score":0.665410578250885},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6473554968833923},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.6184859275817871},{"id":"https://openalex.org/keywords/service-provider","display_name":"Service provider","score":0.5700933933258057},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5536221861839294},{"id":"https://openalex.org/keywords/production","display_name":"Production (economics)","score":0.4927652180194855},{"id":"https://openalex.org/keywords/work","display_name":"Work (physics)","score":0.43611985445022583},{"id":"https://openalex.org/keywords/service","display_name":"Service (business)","score":0.4064542353153229},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.3016831874847412},{"id":"https://openalex.org/keywords/marketing","display_name":"Marketing","score":0.11212271451950073}],"concepts":[{"id":"https://openalex.org/C46934059","wikidata":"https://www.wikidata.org/wiki/Q61515","display_name":"Outsourcing","level":2,"score":0.8415951132774353},{"id":"https://openalex.org/C147494362","wikidata":"https://www.wikidata.org/wiki/Q2078905","display_name":"Troubleshooting","level":2,"score":0.8349350094795227},{"id":"https://openalex.org/C2780138299","wikidata":"https://www.wikidata.org/wiki/Q3404265","display_name":"Privilege (computing)","level":2,"score":0.665410578250885},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6473554968833923},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.6184859275817871},{"id":"https://openalex.org/C116537","wikidata":"https://www.wikidata.org/wiki/Q2169973","display_name":"Service provider","level":3,"score":0.5700933933258057},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5536221861839294},{"id":"https://openalex.org/C2778348673","wikidata":"https://www.wikidata.org/wiki/Q739302","display_name":"Production (economics)","level":2,"score":0.4927652180194855},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.43611985445022583},{"id":"https://openalex.org/C2780378061","wikidata":"https://www.wikidata.org/wiki/Q25351891","display_name":"Service (business)","level":2,"score":0.4064542353153229},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.3016831874847412},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.11212271451950073},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.0},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C139719470","wikidata":"https://www.wikidata.org/wiki/Q39680","display_name":"Macroeconomics","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3484266.3487380","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3484266.3487380","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3484266.3487380","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Twentieth ACM Workshop on Hot Topics in Networks","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3484266.3487380","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3484266.3487380","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3484266.3487380","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Twentieth ACM Workshop on Hot Topics in Networks","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1006881031","display_name":null,"funder_award_id":"CONIX","funder_id":"https://openalex.org/F4320306087","funder_display_name":"Semiconductor Research Corporation"},{"id":"https://openalex.org/G160550121","display_name":null,"funder_award_id":"-FEDER-","funder_id":"https://openalex.org/F4320335322","funder_display_name":"European Regional Development Fund"},{"id":"https://openalex.org/G274581676","display_name":null,"funder_award_id":"POCI-01","funder_id":"https://openalex.org/F4320335322","funder_display_name":"European Regional Development Fund"},{"id":"https://openalex.org/G397169038","display_name":null,"funder_award_id":"POCI-01-0247-FEDER-045907","funder_id":"https://openalex.org/F4320306087","funder_display_name":"Semiconductor Research Corporation"},{"id":"https://openalex.org/G4455079242","display_name":null,"funder_award_id":"POCI-01-","funder_id":"https://openalex.org/F4320335322","funder_display_name":"European Regional Development Fund"},{"id":"https://openalex.org/G4975383095","display_name":null,"funder_award_id":"POCI-01-0247-FEDER-045907","funder_id":"https://openalex.org/F4320335322","funder_display_name":"European Regional Development Fund"},{"id":"https://openalex.org/G7143676625","display_name":null,"funder_award_id":"CNS-1700521","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G8300720798","display_name":null,"funder_award_id":"1700521","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320306087","display_name":"Semiconductor Research Corporation","ror":"https://ror.org/047z4n946"},{"id":"https://openalex.org/F4320316785","display_name":"VMware","ror":null},{"id":"https://openalex.org/F4320332180","display_name":"Defense Advanced Research Projects Agency","ror":"https://ror.org/02caytj08"},{"id":"https://openalex.org/F4320335322","display_name":"European Regional Development Fund","ror":"https://ror.org/00k4n6c32"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3213369372.pdf","grobid_xml":"https://content.openalex.org/works/W3213369372.grobid-xml"},"referenced_works_count":18,"referenced_works":["https://openalex.org/W6385438","https://openalex.org/W95608104","https://openalex.org/W170020907","https://openalex.org/W1249296113","https://openalex.org/W1489067988","https://openalex.org/W1516211918","https://openalex.org/W1531637205","https://openalex.org/W1587010340","https://openalex.org/W1961595467","https://openalex.org/W2065076704","https://openalex.org/W2095881341","https://openalex.org/W2098081907","https://openalex.org/W2125530623","https://openalex.org/W2156299128","https://openalex.org/W2604648215","https://openalex.org/W2764015261","https://openalex.org/W2953498285","https://openalex.org/W3010476191"],"related_works":["https://openalex.org/W3013479934","https://openalex.org/W4210597238","https://openalex.org/W4318325534","https://openalex.org/W4206476896","https://openalex.org/W4240398146","https://openalex.org/W2950310564","https://openalex.org/W4238338086","https://openalex.org/W2467308209","https://openalex.org/W2382515644","https://openalex.org/W1930396972"],"abstract_inverted_index":{"Many":[0],"enterprises":[1],"outsource":[2],"network":[3],"management":[4],"(e.g.,":[5,132],"troubleshooting":[6],"failures,":[7],"monitoring":[8],"performance)":[9],"to":[10,16,31,34,47,92],"third-party":[11],"managed":[12],"service":[13],"providers":[14,97],"(MSPs)":[15],"reduce":[17],"cost.":[18],"Unfortunately,":[19],"recent":[20],"incidents":[21,44],"show":[22,124],"that":[23,42,125],"MSPs":[24],"themselves":[25],"have":[26],"become":[27],"an":[28,87],"attractive":[29],"launchpad":[30],"gain":[32],"access":[33],"customer":[35,102],"networks.":[36],"In":[37,79],"this":[38,62,70,77],"work,":[39],"we":[40,81],"argue":[41],"such":[43],"arise":[45],"due":[46],"a":[48],"violation":[49],"of":[50],"the":[51,57,84,101,112,139],"least":[52],"privilege":[53,119],"principle.":[54],"We":[55],"revisit":[56],"MSP":[58,85,143],"outsourcing":[59],"problem":[60],"through":[61],"least-privilege":[63],"view,":[64],"identify":[65],"key":[66],"challenges":[67],"in":[68,137],"realizing":[69],"framework,":[71],"and":[72,95,134],"present":[73],"initial":[74],"ideas":[75],"toward":[76],"goal.":[78],"particular,":[80],"propose":[82],"providing":[83],"provider":[86],"isolated":[88],"\"digital":[89],"twin\"":[90],"environment":[91],"resolve":[93,129],"problems":[94,131],"prevent":[96],"from":[98],"directly":[99],"accessing":[100],"production":[103,113],"network.":[104],"Changes":[105],"are":[106,117],"verified":[107],"before":[108],"importing":[109],"them":[110],"into":[111],"network,":[114],"ensuring":[115],"there":[116],"no":[118],"violations.":[120],"Our":[121],"preliminary":[122],"experiments":[123],"our":[126],"approach":[127],"can":[128],"practical":[130],"misconfigurations)":[133],"is":[135],"effective":[136],"reducing":[138],"attack":[140],"surfaces":[141],"for":[142],"customers.":[144]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2023,"cited_by_count":1}],"updated_date":"2026-04-10T15:06:20.359241","created_date":"2025-10-10T00:00:00"}