Skip to main content
USENIX
  • Conferences
  • Students
Sign in
  • HotSec '12 Home
  • Organizers
  • Registration Information
  • Registration Discounts
  • Workshop Program
  • Co-located Workshops
  • Hotel and Travel Information
  • Students
  • Help Promote
  • For Participants
  • Call for Papers
  • Past Workshops

twitter

Tweets by @usenix

usenix conference policies

  • Event Code of Conduct
  • Conference Network Policy
  • Statement on Environmental Responsibility Policy

You are here

Home » When Good Services Go Wild: Reassembling Web Services for Unintended Purposes
Tweet

connect with us

https://twitter.com/#!/usenix
https://www.facebook.com/events/311239542267623/

When Good Services Go Wild: Reassembling Web Services for Unintended Purposes

Authors: 

Feng Lu, Jiaqi Zhang, and Stefan Savage, University of California, San Diego

Abstract: 

The rich nature of modern Web services and the emerging “mash-up” programming model, make it difficult to predict the potential interactions and usage scenarios that can emerge. Moreover, while the potential security implications for individual client browsers have been widely internalized (e.g., XSS, CSRF, etc.) there is less appreciation of the risks posed in the other direction—of user abuse on Web service providers. In particular, we argue that Web services and pieces of services can be easily combined to create entirely new capabilities that may themselves be at odds with the security policies that providers (or the Internet community at large) desire to enforce. As a proof-of-concept we demonstrate a fully-functioning Web proxy service called CloudProxy. Constructed entirely out of pieces of unrelated Google and Facebook functionality, CloudProxy effectively launders a user’s connection through these provider’s resources.

Open Access Media

USENIX is committed to Open Access to the research presented at our events. Papers and proceedings are freely available to everyone once the event begins. Any video, audio, and/or slides that are posted after the event are also free and open to everyone. Support USENIX and our commitment to Open Access.

BibTeX
@inproceedings {179472,
title = {When Good Services Go Wild: Reassembling Web Services for Unintended Purposes},
booktitle = {7th USENIX Workshop on Hot Topics in Security (HotSec 12)},
year = {2012},
address = {Bellevue, WA},
url = {https://www.usenix.org/conference/hotsec12/workshop-program/presentation/Lu},
publisher = {USENIX Association},
month = aug,
}
Download
Lu PDF
PC Comments on Lu Paper
View the slides

Presentation Video

Presentation Audio

MP3 Download OGG Download

Download Audio

  • Log in or    Register to post comments

© USENIX

  • Privacy Policy
  • Contact Us