arXiv:1404.2637cs.NI
Bypassing Cloud Providers' Data Validation to Store Arbitrary Data
Early discovery. Linked by one identifiable commenter. This paper is outside the main ranking; a mention is not an endorsement.
Abstract
A fundamental Software-as-a-Service (SaaS) characteristic in Cloud Computing is to be application-specific; depending on the application, Cloud Providers (CPs) restrict data formats and attributes allowed into their servers via a data validation process. An ill-defined data validation process may directly impact both security (e.g. application failure, legal issues) and accounting and charging (e.g. trusting metadata in file headers). Therefore, this paper investigates, evaluates (by means of tests), and discusses data validation processes of popular CPs. A proof of concept system was thus built, implementing encoders carefully crafted to circumvent data validation processes, ultimately demonstrating how large amounts of unaccounted, arbitrary data can be stored into CPs.
"I was working on this instead of my finals, hope you appreciate it." We do! https://github.com/DvorakDwarf/Infinite-Storage-Glitch p.s. this interesting paper (2014) also showed up in ISG issue regarding file systems. https://arxiv.org/abs/1404.2637 A fundamental…
eternalbanView on HNParent context