{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,18]],"date-time":"2026-07-18T19:49:26Z","timestamp":1784404166939,"version":"3.55.0"},"publisher-location":"New York, NY, USA","reference-count":66,"publisher":"ACM","license":[{"start":{"date-parts":[[2022,11,7]],"date-time":"2022-11-07T00:00:00Z","timestamp":1667779200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2022,11,7]]},"DOI":"10.1145\/3548606.3560589","type":"proceedings-article","created":{"date-parts":[[2022,11,7]],"date-time":"2022-11-07T11:41:28Z","timestamp":1667821288000},"page":"2145-2158","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":15,"title":["Detecting Missing-Permission-Check Vulnerabilities in Distributed Cloud Systems"],"prefix":"10.1145","author":[{"given":"Jie","family":"Lu","sequence":"first","affiliation":[{"name":"SKLP, Institute of Computing Technology, CAS, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Haofeng","family":"Li","sequence":"additional","affiliation":[{"name":"SKLP, Institute of Computing Technology, CAS & University of Chinese Academy of Sciences, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Chen","family":"Liu","sequence":"additional","affiliation":[{"name":"SKLP, Institute of Computing Technology, CAS & University of Chinese Academy of Sciences, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Lian","family":"Li","sequence":"additional","affiliation":[{"name":"SKLP, Institute of Computing Technology, CAS & University of Chinese Academy of Sciences, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Kun","family":"Cheng","sequence":"additional","affiliation":[{"name":"Huawei Technologies Co. Ltd, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2022,11,7]]},"reference":[{"key":"e_1_3_2_2_1_1","unstructured":"2018. North Branford Man Who Hacked into More Than 200 Apple iCloud Accounts Sentenced to Prison. https:\/\/www.justice.gov\/usao-ct\/pr\/north-branford-man-who-hacked-more-200-apple-icloud-accounts-sentenced-prison.  2018. North Branford Man Who Hacked into More Than 200 Apple iCloud Accounts Sentenced to Prison. https:\/\/www.justice.gov\/usao-ct\/pr\/north-branford-man-who-hacked-more-200-apple-icloud-accounts-sentenced-prison."},{"key":"e_1_3_2_2_2_1","unstructured":"2019. Apache log4j a logging library for Java. http:\/\/logging.apache.org\/log4j\/ 2.x\/.  2019. Apache log4j a logging library for Java. http:\/\/logging.apache.org\/log4j\/ 2.x\/."},{"key":"e_1_3_2_2_3_1","unstructured":"2019. Simple logging facade for Java (SLF4J). http:\/\/www.slf4j.org\/.  2019. Simple logging facade for Java (SLF4J). http:\/\/www.slf4j.org\/."},{"key":"e_1_3_2_2_4_1","unstructured":"2019. United States: Biggest Cloud Security Vulnerability Is Misuse Of Employee Credentials And Improper Access Controls! https:\/\/www.mondaq.com\/unitedstates\/security\/822364\/biggest-cloud-security-vulnerability-is-misuse- of-employee-credentials-and-improper-access-controls.  2019. United States: Biggest Cloud Security Vulnerability Is Misuse Of Employee Credentials And Improper Access Controls! https:\/\/www.mondaq.com\/unitedstates\/security\/822364\/biggest-cloud-security-vulnerability-is-misuse- of-employee-credentials-and-improper-access-controls."},{"key":"e_1_3_2_2_5_1","unstructured":"2020. Common Vulnerabilities and Exposures (CVE). https:\/\/cve.mitre.org\/.  2020. Common Vulnerabilities and Exposures (CVE). https:\/\/cve.mitre.org\/."},{"key":"e_1_3_2_2_6_1","unstructured":"2021. wala\/WALA: T.J. Watson Libraries for Analysis. https:\/\/github.com\/wala\/ WALA.  2021. wala\/WALA: T.J. Watson Libraries for Analysis. https:\/\/github.com\/wala\/ WALA."},{"key":"e_1_3_2_2_7_1","volume-title":"13th {USENIX} Symposium on Operating Systems Design and Implementation ({OSDI}. 51--68.","author":"Alquraan Ahmed","unstructured":"Ahmed Alquraan , Hatem Takruri , Mohammed Alfatafta , and Samer Al-Kiswany . 2018. An analysis of network-partitioning failures in cloud systems . In 13th {USENIX} Symposium on Operating Systems Design and Implementation ({OSDI}. 51--68. Ahmed Alquraan, Hatem Takruri, Mohammed Alfatafta, and Samer Al-Kiswany. 2018. An analysis of network-partitioning failures in cloud systems. In 13th {USENIX} Symposium on Operating Systems Design and Implementation ({OSDI}. 51--68."},{"key":"e_1_3_2_2_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/2723372.2723711"},{"key":"e_1_3_2_2_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/72551.72552"},{"key":"e_1_3_2_2_10_1","doi-asserted-by":"publisher","DOI":"10.1109\/MCC.2014.51"},{"key":"e_1_3_2_2_11_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-30555-2_18"},{"key":"e_1_3_2_2_12_1","first-page":"1","article-title":"HDFS architecture guide","volume":"53","author":"Dhruba Borthakur","year":"2008","unstructured":"Dhruba Borthakur et al. 2008 . HDFS architecture guide . Hadoop Apache Project 53 , 1 -- 13 (2008), 2. Dhruba Borthakur et al. 2008. HDFS architecture guide. Hadoop Apache Project 53, 1--13 (2008), 2.","journal-title":"Hadoop Apache Project"},{"key":"e_1_3_2_2_13_1","unstructured":"Thomas Brewster. 2017. Massive WWE Leak Exposes 3 Million Wrestling Fans' Addresses Ethnicities And More. https:\/\/www.forbes.com\/sites\/ thomasbrewster\/2017\/07\/06\/massive-wwe-leak-exposes-3-million-wrestling-fans-addresses-ethnicities-and-more\/'sh=56477fb175dd.  Thomas Brewster. 2017. Massive WWE Leak Exposes 3 Million Wrestling Fans' Addresses Ethnicities And More. https:\/\/www.forbes.com\/sites\/ thomasbrewster\/2017\/07\/06\/massive-wwe-leak-exposes-3-million-wrestling-fans-addresses-ethnicities-and-more\/'sh=56477fb175dd."},{"key":"e_1_3_2_2_14_1","doi-asserted-by":"publisher","DOI":"10.1109\/ASE.2019.00040"},{"key":"e_1_3_2_2_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/3324884.3416548"},{"key":"e_1_3_2_2_16_1","volume-title":"MongoDB: the definitive guide: powerful and scalable data storage. \"O'Reilly Media","author":"Chodorow Kristina","unstructured":"Kristina Chodorow . 2013. MongoDB: the definitive guide: powerful and scalable data storage. \"O'Reilly Media , Inc .\". Kristina Chodorow. 2013. MongoDB: the definitive guide: powerful and scalable data storage. \"O'Reilly Media, Inc.\"."},{"key":"e_1_3_2_2_17_1","unstructured":"Cyber. 2019. Information on the Capital One Cyber Incident. https:\/\/ www.capitalone.com\/digital\/facts2019\/.  Cyber. 2019. Information on the Capital One Cyber Incident. https:\/\/ www.capitalone.com\/digital\/facts2019\/."},{"key":"e_1_3_2_2_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/3267809.3267844"},{"key":"e_1_3_2_2_19_1","volume-title":"Nemesis: Preventing Authentication & [and] Access Control Vulnerabilities in Web Applications.","author":"Dalton Michael","year":"2009","unstructured":"Michael Dalton , Christos Kozyrakis , and Nickolai Zeldovich . 2009 . Nemesis: Preventing Authentication & [and] Access Control Vulnerabilities in Web Applications. (2009). Michael Dalton, Christos Kozyrakis, and Nickolai Zeldovich. 2009. Nemesis: Preventing Authentication & [and] Access Control Vulnerabilities in Web Applications. (2009)."},{"key":"e_1_3_2_2_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/1327452.1327492"},{"key":"e_1_3_2_2_21_1","volume-title":"Seth Hallem, Andy Chou, and Benjamin Chelf.","author":"Engler Dawson","year":"2001","unstructured":"Dawson Engler , David Yu Chen , Seth Hallem, Andy Chou, and Benjamin Chelf. 2001 . Bugs as Deviant Behavior : A General Approach to Inferring Errors in Systems Code . (Oct. 2001), 57--72. Dawson Engler, David Yu Chen, Seth Hallem, Andy Chou, and Benjamin Chelf. 2001. Bugs as Deviant Behavior: A General Approach to Inferring Errors in Systems Code. (Oct. 2001), 57--72."},{"key":"e_1_3_2_2_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/3236024.3236030"},{"key":"e_1_3_2_2_23_1","volume-title":"Understanding cloud computing vulnerabilities","author":"Grobauer Bernd","year":"2010","unstructured":"Bernd Grobauer , Tobias Walloschek , and Elmar Stocker . 2010. Understanding cloud computing vulnerabilities . IEEE Security & privacy 9, 2 ( 2010 ), 50--57. Bernd Grobauer, Tobias Walloschek, and Elmar Stocker. 2010. Understanding cloud computing vulnerabilities. IEEE Security & privacy 9, 2 (2010), 50--57."},{"key":"e_1_3_2_2_24_1","volume-title":"Proceedings of NSDI'11: 8th USENIX Symposium on Networked Systems Design and Implementation. 239","author":"Gunawi Haryadi S","year":"2011","unstructured":"Haryadi S Gunawi , Thanh Do , Pallavi Joshi , Peter Alvaro , Joseph M Hellerstein , Andrea C Arpaci-Dusseau , Remzi H Arpaci-Dusseau , Koushik Sen , and Dhruba Borthakur . 2011 . FATE and DESTINI: A framework for cloud recovery testing . In Proceedings of NSDI'11: 8th USENIX Symposium on Networked Systems Design and Implementation. 239 . Haryadi S Gunawi, Thanh Do, Pallavi Joshi, Peter Alvaro, Joseph M Hellerstein, Andrea C Arpaci-Dusseau, Remzi H Arpaci-Dusseau, Koushik Sen, and Dhruba Borthakur. 2011. FATE and DESTINI: A framework for cloud recovery testing. In Proceedings of NSDI'11: 8th USENIX Symposium on Networked Systems Design and Implementation. 239."},{"key":"e_1_3_2_2_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/2043556.2043582"},{"key":"e_1_3_2_2_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/ASE.2019.00034"},{"key":"e_1_3_2_2_27_1","first-page":"22","article-title":"Mesos: A platform for fine-grained resource sharing in the data center","volume":"11","author":"Hindman Benjamin","year":"2011","unstructured":"Benjamin Hindman , Andy Konwinski , Matei Zaharia , Ali Ghodsi , Anthony D Joseph , Randy H Katz , Scott Shenker , and Ion Stoica . 2011 . Mesos: A platform for fine-grained resource sharing in the data center .. In NSDI , Vol. 11. 22 -- 22 . Benjamin Hindman, Andy Konwinski, Matei Zaharia, Ali Ghodsi, Anthony D Joseph, Randy H Katz, Scott Shenker, and Ion Stoica. 2011. Mesos: A platform for fine-grained resource sharing in the data center.. In NSDI, Vol. 11. 22--22.","journal-title":"NSDI"},{"key":"e_1_3_2_2_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/3468264.3468627"},{"key":"e_1_3_2_2_29_1","volume-title":"Flavio Paiva Junqueira, and Benjamin Reed","author":"Hunt Patrick","year":"2010","unstructured":"Patrick Hunt , Mahadev Konar , Flavio Paiva Junqueira, and Benjamin Reed . 2010 . ZooKeeper: Wait-free Coordination for Internet-scale Systems.. In USENIX annual technical conference, Vol. 8 . Patrick Hunt, Mahadev Konar, Flavio Paiva Junqueira, and Benjamin Reed. 2010. ZooKeeper: Wait-free Coordination for Internet-scale Systems.. In USENIX annual technical conference, Vol. 8."},{"key":"e_1_3_2_2_30_1","unstructured":"Amir Jerbi. 2019. Docker Hub Unauthorized Access Incident: What You Should Know. https:\/\/blog.aquasec.com\/docker-hub-incident-container-encryption.  Amir Jerbi. 2019. Docker Hub Unauthorized Access Incident: What You Should Know. https:\/\/blog.aquasec.com\/docker-hub-incident-container-encryption."},{"key":"e_1_3_2_2_31_1","unstructured":"O'Ryan Johnson. 2019. ConnectWise Hit In EU Ransomware Attack. https:\/\/www.crn.com\/news\/channel-programs\/connectwise-hit-in-eu- ransomware-attack.  O'Ryan Johnson. 2019. ConnectWise Hit In EU Ransomware Attack. https:\/\/www.crn.com\/news\/channel-programs\/connectwise-hit-in-eu- ransomware-attack."},{"key":"e_1_3_2_2_32_1","unstructured":"Charles Killian James W Anderson Ranjit Jhala and Amin Vahdat. 2007. Life death and the critical transition: Finding liveness bugs in systems code. NSDI.  Charles Killian James W Anderson Ranjit Jhala and Amin Vahdat. 2007. Life death and the critical transition: Finding liveness bugs in systems code. NSDI."},{"key":"e_1_3_2_2_33_1","unstructured":"Steve Kosten. 2020. 7 Cloud Computing Security Vulnerabilities and What to Do About Them. https:\/\/towardsdatascience.com\/7-cloud-computing-security-vulnerabilities-and-what-to-do-about-them-e061bbe0faee.  Steve Kosten. 2020. 7 Cloud Computing Security Vulnerabilities and What to Do About Them. https:\/\/towardsdatascience.com\/7-cloud-computing-security-vulnerabilities-and-what-to-do-about-them-e061bbe0faee."},{"key":"e_1_3_2_2_34_1","unstructured":"Brian Krebs. 2018. USPS Site Exposed Data on 60 Million Users. https: \/\/krebsonsecurity.com\/2018\/11\/usps-site-exposed-data-on-60-million-users\/.  Brian Krebs. 2018. USPS Site Exposed Data on 60 Million Users. https: \/\/krebsonsecurity.com\/2018\/11\/usps-site-exposed-data-on-60-million-users\/."},{"key":"e_1_3_2_2_35_1","first-page":"1","article-title":"Kafka: A distributed messaging system for log processing","volume":"11","author":"Kreps Jay","year":"2011","unstructured":"Jay Kreps , Neha Narkhede , Jun Rao , 2011 . Kafka: A distributed messaging system for log processing . In Proceedings of the NetDB , Vol. 11. 1 -- 7 . Jay Kreps, Neha Narkhede, Jun Rao, et al. 2011. Kafka: A distributed messaging system for log processing. In Proceedings of the NetDB, Vol. 11. 1--7.","journal-title":"Proceedings of the NetDB"},{"key":"e_1_3_2_2_36_1","first-page":"116","article-title":"Apache cloudstack: Open source infrastructure as a service cloud computing platform","volume":"111","author":"Kumar Rakesh","year":"2014","unstructured":"Rakesh Kumar , Kanishk Jain , Hitesh Maharwal , Neha Jain , and Anjali Dadhich . 2014 . Apache cloudstack: Open source infrastructure as a service cloud computing platform . Proceedings of the International Journal of advancement in Engineering technology, Management and Applied Science 111 (2014), 116 . Rakesh Kumar, Kanishk Jain, Hitesh Maharwal, Neha Jain, and Anjali Dadhich. 2014. Apache cloudstack: Open source infrastructure as a service cloud computing platform. Proceedings of the International Journal of advancement in Engineering technology, Management and Applied Science 111 (2014), 116.","journal-title":"Proceedings of the International Journal of advancement in Engineering technology, Management and Applied Science"},{"key":"e_1_3_2_2_37_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2017.53"},{"key":"e_1_3_2_2_38_1","volume-title":"11th USENIX Symposium on Operating Systems Design and Implementation (OSDI 14)","author":"Leesatapornwongsa Tanakorn","year":"2014","unstructured":"Tanakorn Leesatapornwongsa , Mingzhe Hao , Pallavi Joshi , Jeffrey F Lukman , and Haryadi S Gunawi . 2014 . {SAMC}: Semantic-Aware Model Checking for Fast Discovery of Deep Bugs in Cloud Systems . In 11th USENIX Symposium on Operating Systems Design and Implementation (OSDI 14) . 399--414. Tanakorn Leesatapornwongsa, Mingzhe Hao, Pallavi Joshi, Jeffrey F Lukman, and Haryadi S Gunawi. 2014. {SAMC}: Semantic-Aware Model Checking for Fast Discovery of Deep Bugs in Cloud Systems. In 11th USENIX Symposium on Operating Systems Design and Implementation (OSDI 14). 399--414."},{"key":"e_1_3_2_2_39_1","doi-asserted-by":"publisher","DOI":"10.1145\/2872362.2872374"},{"key":"e_1_3_2_2_40_1","volume-title":"Scaling Up the IFDS Algorithm with Efficient Disk-Assisted Computing. In 2021 IEEE\/ACM International Symposium on Code Generation and Optimization (CGO). IEEE, 236--247","author":"Li Haofeng","year":"2021","unstructured":"Haofeng Li , Haining Meng , Hengjie Zheng , Liqing Cao , Jie Lu , Lian Li , and Lin Gao . 2021 . Scaling Up the IFDS Algorithm with Efficient Disk-Assisted Computing. In 2021 IEEE\/ACM International Symposium on Code Generation and Optimization (CGO). IEEE, 236--247 . Haofeng Li, Haining Meng, Hengjie Zheng, Liqing Cao, Jie Lu, Lian Li, and Lin Gao. 2021. Scaling Up the IFDS Algorithm with Efficient Disk-Assisted Computing. In 2021 IEEE\/ACM International Symposium on Code Generation and Optimization (CGO). IEEE, 236--247."},{"key":"e_1_3_2_2_41_1","doi-asserted-by":"publisher","DOI":"10.1145\/2025113.2025160"},{"key":"e_1_3_2_2_42_1","volume-title":"Precise and Scalable Context-Sensitive Pointer Analysis via Value Flow Graph (ISMM '13)","author":"Li Lian","year":"1894","unstructured":"Lian Li , Cristina Cifuentes , and Nathan Keynes . 2013. Precise and Scalable Context-Sensitive Pointer Analysis via Value Flow Graph (ISMM '13) . Association for Computing Machinery , New York, NY, USA , 85--96. https:\/\/doi.org\/10.1145\/ 249 1894 .2466483 Lian Li, Cristina Cifuentes, and Nathan Keynes. 2013. Precise and Scalable Context-Sensitive Pointer Analysis via Value Flow Graph (ISMM '13). Association for Computing Machinery, New York, NY, USA, 85--96. https:\/\/doi.org\/10.1145\/ 2491894.2466483"},{"key":"e_1_3_2_2_43_1","doi-asserted-by":"publisher","DOI":"10.1145\/3093337.3037735"},{"key":"e_1_3_2_2_44_1","doi-asserted-by":"publisher","DOI":"10.1145\/3296957.3177161"},{"key":"e_1_3_2_2_45_1","volume-title":"CloudRaid: Detecting Distributed Concurrency Bugs via Log-Mining and Enhancement","author":"Lu Jie","year":"2020","unstructured":"Jie Lu , Chen Liu , Feng Li , Lian Li , Xiaobing Feng , and Jingling Xue . 2020. CloudRaid: Detecting Distributed Concurrency Bugs via Log-Mining and Enhancement . IEEE Transactions on Software Engineering ( 2020 ). Jie Lu, Chen Liu, Feng Li, Lian Li, Xiaobing Feng, and Jingling Xue. 2020. CloudRaid: Detecting Distributed Concurrency Bugs via Log-Mining and Enhancement. IEEE Transactions on Software Engineering (2020)."},{"key":"e_1_3_2_2_46_1","volume-title":"28th {USENIX} Security Symposium ({USENIX} Security 19). 1769--1786.","author":"Lu Kangjie","unstructured":"Kangjie Lu , Aditya Pakki , and Qiushi Wu. 2019. Detecting missing-check bugs via semantic-and context-aware criticalness and constraints inferences . In 28th {USENIX} Security Symposium ({USENIX} Security 19). 1769--1786. Kangjie Lu, Aditya Pakki, and Qiushi Wu. 2019. Detecting missing-check bugs via semantic-and context-aware criticalness and constraints inferences. In 28th {USENIX} Security Symposium ({USENIX} Security 19). 1769--1786."},{"key":"e_1_3_2_2_47_1","unstructured":"Lindsey O'Donnell. 2019. U.S. Government Military Personnel Data Leaked By Autoclerk. https:\/\/threatpost.com\/government-military-personnel-data-leaked\/149386\/.  Lindsey O'Donnell. 2019. U.S. Government Military Personnel Data Leaked By Autoclerk. https:\/\/threatpost.com\/government-military-personnel-data-leaked\/149386\/."},{"key":"e_1_3_2_2_48_1","unstructured":"Patrick Howell O'Neill. 2017. Booz Allen Hamilton leaves 60 000 unsecured DOD files on AWS server. https:\/\/www.cyberscoop.com\/booz-allen-hamilion-amazon-s3-chris-vickery\/.  Patrick Howell O'Neill. 2017. Booz Allen Hamilton leaves 60 000 unsecured DOD files on AWS server. https:\/\/www.cyberscoop.com\/booz-allen-hamilion-amazon-s3-chris-vickery\/."},{"key":"e_1_3_2_2_49_1","unstructured":"Patrick Howell O'Neill. 2017. GOP Data Firm Accidentally Leaks Personal Details of Nearly 200 Million American Voters. https:\/\/gizmodo.com\/gop-data-firm-accidentally-leaks-personal-details-of-ne-1796211612.  Patrick Howell O'Neill. 2017. GOP Data Firm Accidentally Leaks Personal Details of Nearly 200 Million American Voters. https:\/\/gizmodo.com\/gop-data-firm-accidentally-leaks-personal-details-of-ne-1796211612."},{"key":"e_1_3_2_2_50_1","volume-title":"Deploying openstack. \"O'Reilly Media","author":"Pepple Ken","unstructured":"Ken Pepple . 2011. Deploying openstack. \"O'Reilly Media , Inc .\". Ken Pepple. 2011. Deploying openstack. \"O'Reilly Media, Inc.\"."},{"key":"e_1_3_2_2_51_1","doi-asserted-by":"publisher","DOI":"10.1145\/199448.199462"},{"key":"e_1_3_2_2_52_1","unstructured":"JASON SILVERSTEIN. 2019. Hundreds of millions of Facebook user records were exposed on Amazon cloud server. https:\/\/www.cbsnews.com\/news\/millions-facebook-user-records-exposed-amazon-cloud-server\/.  JASON SILVERSTEIN. 2019. Hundreds of millions of Facebook user records were exposed on Amazon cloud server. https:\/\/www.cbsnews.com\/news\/millions-facebook-user-records-exposed-amazon-cloud-server\/."},{"key":"e_1_3_2_2_53_1","doi-asserted-by":"publisher","DOI":"10.1145\/2048066.2048146"},{"key":"e_1_3_2_2_54_1","volume-title":"USENIX Security Symposium","volume":"64","author":"Sun Fangqi","year":"2011","unstructured":"Fangqi Sun , Liang Xu , and Zhendong Su . 2011 . Static Detection of Access Control Vulnerabilities in Web Applications .. In USENIX Security Symposium , Vol. 64 . Fangqi Sun, Liang Xu, and Zhendong Su. 2011. Static Detection of Access Control Vulnerabilities in Web Applications.. In USENIX Security Symposium, Vol. 64."},{"key":"e_1_3_2_2_55_1","unstructured":"Bruce Sussman. 2020. Top 4 Types of Security Vulnerabilities in the Cloud. https:\/\/www.secureworldexpo.com\/industry-news\/4-types-cloud-security-vulnerability-mitigation.  Bruce Sussman. 2020. Top 4 Types of Security Vulnerabilities in the Cloud. https:\/\/www.secureworldexpo.com\/industry-news\/4-types-cloud-security-vulnerability-mitigation."},{"key":"e_1_3_2_2_56_1","volume-title":"USENIX Security Symposium. 379--394","author":"Tan Lin","year":"2008","unstructured":"Lin Tan , Xiaolan Zhang , Xiao Ma , Weiwei Xiong , and Yuanyuan Zhou . 2008 . AutoISES: Automatically Inferring Security Specification and Detecting Violations .. In USENIX Security Symposium. 379--394 . Lin Tan, Xiaolan Zhang, Xiao Ma, Weiwei Xiong, and Yuanyuan Zhou. 2008. AutoISES: Automatically Inferring Security Specification and Detecting Violations.. In USENIX Security Symposium. 379--394."},{"key":"e_1_3_2_2_57_1","volume-title":"Cloud Leak: WSJ Parent Company Dow Jones Exposed Customer Data. https:\/\/www.upguard.com\/breaches\/cloud-leak-dow-jones.","author":"Team UpGuard","year":"2017","unstructured":"UpGuard Team . 2017 . Cloud Leak: WSJ Parent Company Dow Jones Exposed Customer Data. https:\/\/www.upguard.com\/breaches\/cloud-leak-dow-jones. UpGuard Team. 2017. Cloud Leak: WSJ Parent Company Dow Jones Exposed Customer Data. https:\/\/www.upguard.com\/breaches\/cloud-leak-dow-jones."},{"key":"e_1_3_2_2_58_1","unstructured":"Keir Thomas. 2010. Microsoft Cloud Data Breach Heralds Things to Come. https:\/\/www.pcworld.com\/article\/214775\/microsoft_cloud_data_breach_sign_of_future.html.  Keir Thomas. 2010. Microsoft Cloud Data Breach Heralds Things to Come. https:\/\/www.pcworld.com\/article\/214775\/microsoft_cloud_data_breach_sign_of_future.html."},{"key":"e_1_3_2_2_59_1","doi-asserted-by":"crossref","unstructured":"Vinod Kumar Vavilapalli Arun C Murthy Chris Douglas Sharad Agarwal Mahadev Konar Robert Evans Thomas Graves Jason Lowe Hitesh Shah Siddharth Seth etal 2013. Apache hadoop yarn: Yet another resource negotiator. In Pro- ceedings of the 4th annual Symposium on Cloud Computing. 1--16.  Vinod Kumar Vavilapalli Arun C Murthy Chris Douglas Sharad Agarwal Mahadev Konar Robert Evans Thomas Graves Jason Lowe Hitesh Shah Siddharth Seth et al. 2013. Apache hadoop yarn: Yet another resource negotiator. In Pro- ceedings of the 4th annual Symposium on Cloud Computing. 1--16.","DOI":"10.1145\/2523616.2523633"},{"key":"e_1_3_2_2_60_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCSNT.2011.6182030"},{"key":"e_1_3_2_2_61_1","unstructured":"Zack Whittaker. 2019. FormGet security lapse exposed thousands of sensitive user-uploaded documents. https:\/\/techcrunch.com\/2019\/07\/25\/formget-security-lapse-exposed-documents\/.  Zack Whittaker. 2019. FormGet security lapse exposed thousands of sensitive user-uploaded documents. https:\/\/techcrunch.com\/2019\/07\/25\/formget-security-lapse-exposed-documents\/."},{"key":"e_1_3_2_2_62_1","volume-title":"Ottawa Linux Symposium","volume":"8032","author":"Wright Chris","year":"2002","unstructured":"Chris Wright , Crispin Cowan , James Morris , Stephen Smalley , and Greg Kroah- Hartman . 2002 . Linux security module framework . In Ottawa Linux Symposium , Vol. 8032 . Citeseer, 6--16. Chris Wright, Crispin Cowan, James Morris, Stephen Smalley, and Greg Kroah- Hartman. 2002. Linux security module framework. In Ottawa Linux Symposium, Vol. 8032. Citeseer, 6--16."},{"key":"e_1_3_2_2_63_1","volume-title":"Proceedings of the ACM SIGOPS 22Nd Symposium on Operating Systems Principles (SOSP '09)","author":"Xu Wei","unstructured":"Wei Xu , Ling Huang , Armando Fox , David Patterson , and Michael I. Jordan . 2009. Detecting Large-scale System Problems by Mining Console Logs . In Proceedings of the ACM SIGOPS 22Nd Symposium on Operating Systems Principles (SOSP '09) . ACM, New York, NY, USA, 117--132. Wei Xu, Ling Huang, Armando Fox, David Patterson, and Michael I. Jordan. 2009. Detecting Large-scale System Problems by Mining Console Logs. In Proceedings of the ACM SIGOPS 22Nd Symposium on Operating Systems Principles (SOSP '09). ACM, New York, NY, USA, 117--132."},{"key":"e_1_3_2_2_64_1","volume-title":"11th USENIX Symposium on Operating Systems Design and Implementation (OSDI 14)","author":"Yuan Ding","year":"2014","unstructured":"Ding Yuan , Yu Luo , Xin Zhuang , Guilherme Renna Rodrigues , Xu Zhao , Yongle Zhang , Pranay U Jain , and Michael Stumm . 2014 . Simple Testing Can Prevent Most Critical Failures: An Analysis of Production Failures in Distributed {Data-Intensive} Systems . In 11th USENIX Symposium on Operating Systems Design and Implementation (OSDI 14) . 249--265. Ding Yuan, Yu Luo, Xin Zhuang, Guilherme Renna Rodrigues, Xu Zhao, Yongle Zhang, Pranay U Jain, and Michael Stumm. 2014. Simple Testing Can Prevent Most Critical Failures: An Analysis of Production Failures in Distributed {Data-Intensive} Systems. In 11th USENIX Symposium on Operating Systems Design and Implementation (OSDI 14). 249--265."},{"key":"e_1_3_2_2_65_1","volume-title":"Pex: A permission check analysis framework for linux kernel. In 28th {USENIX} Security Symposium ({USENIX} Security 19). 1205--1220.","author":"Zhang Tong","year":"2019","unstructured":"Tong Zhang , Wenbo Shen , Dongyoon Lee , Changhee Jung , Ahmed M Azab , and Ruowen Wang . 2019 . Pex: A permission check analysis framework for linux kernel. In 28th {USENIX} Security Symposium ({USENIX} Security 19). 1205--1220. Tong Zhang, Wenbo Shen, Dongyoon Lee, Changhee Jung, Ahmed M Azab, and Ruowen Wang. 2019. Pex: A permission check analysis framework for linux kernel. In 28th {USENIX} Security Symposium ({USENIX} Security 19). 1205--1220."},{"key":"e_1_3_2_2_66_1","volume-title":"Proceedings of the 11th USENIX Conference on Operating Systems Design and Implementation (OSDI '14)","author":"Zhao Xu","year":"2014","unstructured":"Xu Zhao , Yongle Zhang , David Lion , Muhammad Faizan Ullah , Yu Luo , Ding Yuan , and Michael Stumm . 2014 . Lprof: A Non-intrusive Request Flow Profiler for Distributed Systems . In Proceedings of the 11th USENIX Conference on Operating Systems Design and Implementation (OSDI '14) . USENIX Association, Berkeley, CA, USA, 629--644. Xu Zhao, Yongle Zhang, David Lion, Muhammad Faizan Ullah, Yu Luo, Ding Yuan, and Michael Stumm. 2014. Lprof: A Non-intrusive Request Flow Profiler for Distributed Systems. In Proceedings of the 11th USENIX Conference on Operating Systems Design and Implementation (OSDI '14). USENIX Association, Berkeley, CA, USA, 629--644."}],"event":{"name":"CCS '22: 2022 ACM SIGSAC Conference on Computer and Communications Security","location":"Los Angeles CA USA","acronym":"CCS '22","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3548606.3560589","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3548606.3560589","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T17:50:57Z","timestamp":1750182657000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3548606.3560589"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,11,7]]},"references-count":66,"alternative-id":["10.1145\/3548606.3560589","10.1145\/3548606"],"URL":"https:\/\/doi.org\/10.1145\/3548606.3560589","relation":{},"subject":[],"published":{"date-parts":[[2022,11,7]]},"assertion":[{"value":"2022-11-07","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}