{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,13]],"date-time":"2026-07-13T10:10:56Z","timestamp":1783937456420,"version":"3.55.0"},"publisher-location":"New York, NY, USA","reference-count":38,"publisher":"ACM","license":[{"start":{"date-parts":[[2022,11,7]],"date-time":"2022-11-07T00:00:00Z","timestamp":1667779200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2022,11,7]]},"DOI":"10.1145\/3560810.3564264","type":"proceedings-article","created":{"date-parts":[[2022,11,4]],"date-time":"2022-11-04T10:14:35Z","timestamp":1667556875000},"page":"63-74","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":7,"title":["Detecting Anomalous Misconfigurations in AWS Identity and Access Management Policies"],"prefix":"10.1145","author":[{"given":"Thijs","family":"van Ede","sequence":"first","affiliation":[{"name":"University of Twente, Enschede, Netherlands"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Niek","family":"Khasuntsev","sequence":"additional","affiliation":[{"name":"University of Twente, Enschede, Netherlands"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Bas","family":"Steen","sequence":"additional","affiliation":[{"name":"PwC Advisory N.V., Amsterdam, Netherlands"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Andrea","family":"Continella","sequence":"additional","affiliation":[{"name":"University of Twente, Enschede, Netherlands"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2022,11,7]]},"reference":[{"key":"e_1_3_2_2_1_1","unstructured":"2006. AWS Command Line Interface. https:\/\/aws.amazon.com\/cli\/  2006. AWS Command Line Interface. https:\/\/aws.amazon.com\/cli\/"},{"key":"e_1_3_2_2_2_1","unstructured":"2020. Misconfigured AWS S3 Bucket Leaks 36 000 Inmate Records. https:\/\/www.trendmicro.com\/vinfo\/us\/security\/news\/virtualization-andcloud\/misconfigured-aws-s3-bucket-leaks-36-000-inmate-records  2020. Misconfigured AWS S3 Bucket Leaks 36 000 Inmate Records. https:\/\/www.trendmicro.com\/vinfo\/us\/security\/news\/virtualization-andcloud\/misconfigured-aws-s3-bucket-leaks-36-000-inmate-records"},{"key":"e_1_3_2_2_3_1","unstructured":"2021. AWS CloudTrail. https:\/\/aws.amazon.com\/cloudtrail\/  2021. AWS CloudTrail. https:\/\/aws.amazon.com\/cloudtrail\/"},{"key":"e_1_3_2_2_4_1","unstructured":"2021. Graph Database Platform: Graph Database Management System: Neo4j. https:\/\/neo4j.com\/  2021. Graph Database Platform: Graph Database Management System: Neo4j. https:\/\/neo4j.com\/"},{"key":"e_1_3_2_2_5_1","volume-title":"31st USENIX Security Symposium (USENIX Security 22)","unstructured":"2022. Dos and Don'ts of Machine Learning in Computer Security . In 31st USENIX Security Symposium (USENIX Security 22) . USENIX Association, Boston, MA. https:\/\/www.usenix.org\/conference\/usenixsecurity22\/presentation\/arp 2022. Dos and Don'ts of Machine Learning in Computer Security. In 31st USENIX Security Symposium (USENIX Security 22). USENIX Association, Boston, MA. https:\/\/www.usenix.org\/conference\/usenixsecurity22\/presentation\/arp"},{"key":"e_1_3_2_2_6_1","unstructured":"AmazonWebServices. 2003. AWS IAM. https:\/\/aws.amazon.com\/iam\/  AmazonWebServices. 2003. AWS IAM. https:\/\/aws.amazon.com\/iam\/"},{"key":"e_1_3_2_2_7_1","unstructured":"AWS. 2002. Amazon Simple Storage Service (Amazon S3). https:\/\/ aws.amazon.com\/s3\/  AWS. 2002. Amazon Simple Storage Service (Amazon S3). https:\/\/ aws.amazon.com\/s3\/"},{"key":"e_1_3_2_2_8_1","unstructured":"AWS. 2003. AWS IAM Best Practices. https:\/\/docs.aws.amazon.com\/IAM\/latest\/ UserGuide\/best-practices.html  AWS. 2003. AWS IAM Best Practices. https:\/\/docs.aws.amazon.com\/IAM\/latest\/ UserGuide\/best-practices.html"},{"key":"e_1_3_2_2_9_1","doi-asserted-by":"publisher","DOI":"10.1117\/12.2521821"},{"key":"e_1_3_2_2_10_1","doi-asserted-by":"crossref","unstructured":"Markus M Breunig Hans-Peter Kriegel Raymond T Ng and J\u00f6rg Sander. 2000. LOF: identifying density-based local outliers. 93--104 pages.  Markus M Breunig Hans-Peter Kriegel Raymond T Ng and J\u00f6rg Sander. 2000. LOF: identifying density-based local outliers. 93--104 pages.","DOI":"10.1145\/335191.335388"},{"key":"e_1_3_2_2_11_1","volume-title":"Cloud Computing: The Egregious Eleven. Cloud Security Alliance","author":"Brook JM","year":"2019","unstructured":"JM Brook , A Getsin , G Jensen , L Jameson , M Roza , N Thethi , A Kurmi , S Levy , S Shamban , V Hargrave , 2019 . Top Threats to Cloud Computing: The Egregious Eleven. Cloud Security Alliance (2019). JM Brook, A Getsin, G Jensen, L Jameson, M Roza, N Thethi, A Kurmi, S Levy, S Shamban, V Hargrave, et al. 2019. Top Threats to Cloud Computing: The Egregious Eleven. Cloud Security Alliance (2019)."},{"key":"e_1_3_2_2_12_1","unstructured":"Herbert G. Buff. 2000. Compliance. https:\/\/aws.amazon.com\/compliance\/sharedresponsibility-model\/  Herbert G. Buff. 2000. Compliance. https:\/\/aws.amazon.com\/compliance\/sharedresponsibility-model\/"},{"key":"e_1_3_2_2_13_1","volume-title":"Aditya Krishna Menon, and Sanjay Chawla","author":"Chalapathy Raghavendra","year":"2018","unstructured":"Raghavendra Chalapathy , Aditya Krishna Menon, and Sanjay Chawla . 2018 . Anomaly de tection using one-class neural networks. arXiv preprint arXiv:1802.06360 (2018). Raghavendra Chalapathy, Aditya Krishna Menon, and Sanjay Chawla. 2018. Anomaly detection using one-class neural networks. arXiv preprint arXiv:1802.06360 (2018)."},{"key":"e_1_3_2_2_14_1","volume-title":"Proceedings of the ACM Annual Computer Security Applications Conference (ACSAC).","author":"Continella Andrea","year":"2018","unstructured":"Andrea Continella , Mario Polino , Marcello Pogliani , and Stefano Zanero . 2018 . There's a Hole in that Bucket! A Large-scale Analysis of Misconfigured S3 Buckets . In Proceedings of the ACM Annual Computer Security Applications Conference (ACSAC). Andrea Continella, Mario Polino, Marcello Pogliani, and Stefano Zanero. 2018. There's a Hole in that Bucket! A Large-scale Analysis of Misconfigured S3 Buckets. In Proceedings of the ACM Annual Computer Security Applications Conference (ACSAC)."},{"key":"e_1_3_2_2_15_1","volume-title":"USENIX Security Symposium. 161--176","author":"Das Tathagata","year":"2010","unstructured":"Tathagata Das , Ranjita Bhagwan , and Prasad Naldurg . 2010 . Baaz: A System for Detecting Access Control Misconfigurations .. In USENIX Security Symposium. 161--176 . Tathagata Das, Ranjita Bhagwan, and Prasad Naldurg. 2010. Baaz: A System for Detecting Access Control Misconfigurations.. In USENIX Security Symposium. 161--176."},{"key":"e_1_3_2_2_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243794"},{"key":"e_1_3_2_2_17_1","unstructured":"Flatironhealth. 2021. Aws Remediation Framework. https:\/\/github.com\/ flatironhealth\/aws-remediation-framework  Flatironhealth. 2021. Aws Remediation Framework. https:\/\/github.com\/ flatironhealth\/aws-remediation-framework"},{"key":"e_1_3_2_2_18_1","unstructured":"Emily Flitter and Karen Weise. 2019. Capital One Data Breach Compromises Data of Over 100 Million. https:\/\/www.nytimes.com\/2019\/07\/29\/business\/capitalone-data-breach-hacked.html  Emily Flitter and Karen Weise. 2019. Capital One Data Breach Compromises Data of Over 100 Million. https:\/\/www.nytimes.com\/2019\/07\/29\/business\/capitalone-data-breach-hacked.html"},{"key":"e_1_3_2_2_19_1","unstructured":"Linux Foundation. 2020. Cloud Custodian. https:\/\/cloudcustodian.io\/  Linux Foundation. 2020. Cloud Custodian. https:\/\/cloudcustodian.io\/"},{"key":"e_1_3_2_2_20_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.knosys.2018.03.022"},{"key":"e_1_3_2_2_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/2939672.2939754"},{"key":"e_1_3_2_2_22_1","volume-title":"Inductive representation learning on large graphs. arXiv preprint arXiv:1706.02216","author":"Hamilton William L","year":"2017","unstructured":"William L Hamilton , Rex Ying , and Jure Leskovec . 2017. Inductive representation learning on large graphs. arXiv preprint arXiv:1706.02216 ( 2017 ). William L Hamilton, Rex Ying, and Jure Leskovec. 2017. Inductive representation learning on large graphs. arXiv preprint arXiv:1706.02216 (2017)."},{"key":"e_1_3_2_2_23_1","doi-asserted-by":"crossref","unstructured":"Muhammad Kazim and Shao Ying Zhu. 2015. A survey on top security threats in cloud computing. (2015).  Muhammad Kazim and Shao Ying Zhu. 2015. A survey on top security threats in cloud computing. (2015).","DOI":"10.14569\/IJACSA.2015.060316"},{"key":"e_1_3_2_2_24_1","doi-asserted-by":"publisher","DOI":"10.1109\/ITNG.2013.127"},{"key":"e_1_3_2_2_25_1","volume-title":"Semi-supervised classification with graph convolutional networks. arXiv preprint arXiv:1609.02907","author":"Kipf Thomas N","year":"2016","unstructured":"Thomas N Kipf and Max Welling . 2016. Semi-supervised classification with graph convolutional networks. arXiv preprint arXiv:1609.02907 ( 2016 ). Thomas N Kipf and Max Welling. 2016. Semi-supervised classification with graph convolutional networks. arXiv preprint arXiv:1609.02907 (2016)."},{"key":"e_1_3_2_2_26_1","unstructured":"Nag. 2021. S3-Leaks. https:\/\/github.com\/nagwww\/s3-leaks  Nag. 2021. S3-Leaks. https:\/\/github.com\/nagwww\/s3-leaks"},{"key":"e_1_3_2_2_27_1","volume-title":"graph2vec: Learning distributed representations of graphs. arXiv preprint arXiv:1707.05005","author":"Narayanan Annamalai","year":"2017","unstructured":"Annamalai Narayanan , Mahinthan Chandramohan , Rajasekar Venkatesan , Lihui Chen , Yang Liu , and Shantanu Jaiswal . 2017. graph2vec: Learning distributed representations of graphs. arXiv preprint arXiv:1707.05005 ( 2017 ). Annamalai Narayanan, Mahinthan Chandramohan, Rajasekar Venkatesan, Lihui Chen, Yang Liu, and Shantanu Jaiswal. 2017. graph2vec: Learning distributed representations of graphs. arXiv preprint arXiv:1707.05005 (2017)."},{"key":"e_1_3_2_2_28_1","doi-asserted-by":"publisher","DOI":"10.5120\/13715-1478"},{"key":"e_1_3_2_2_29_1","volume-title":"Scikit-learn: Machine Learning in Python. , 2825--2830 pages.","author":"Pedregosa F.","year":"2011","unstructured":"F. Pedregosa , G. Varoquaux , A. Gramfort , V. Michel , B. Thirion , O. Grisel , M. Blondel , P. Prettenhofer , R. Weiss , V. Dubourg , J. Vanderplas , A. Passos , D. Cournapeau , M. Brucher , M. Perrot , and E. Duchesnay . 2011 . Scikit-learn: Machine Learning in Python. , 2825--2830 pages. F. Pedregosa, G. Varoquaux, A. Gramfort, V. Michel, B. Thirion, O. Grisel, M. Blondel, P. Prettenhofer, R. Weiss, V. Dubourg, J. Vanderplas, A. Passos, D. Cournapeau, M. Brucher, M. Perrot, and E. Duchesnay. 2011. Scikit-learn: Machine Learning in Python. , 2825--2830 pages."},{"key":"e_1_3_2_2_30_1","volume-title":"28th USENIX Security Symposium (USENIX Security 19)","author":"Pendlebury Feargus","year":"2019","unstructured":"Feargus Pendlebury , Fabio Pierazzi , Roberto Jordaney , Johannes Kinder , and Lorenzo Cavallaro . 2019 . {TESSERACT}: Eliminating experimental bias in malware classification across space and time . In 28th USENIX Security Symposium (USENIX Security 19) . 729--746. Feargus Pendlebury, Fabio Pierazzi, Roberto Jordaney, Johannes Kinder, and Lorenzo Cavallaro. 2019. {TESSERACT}: Eliminating experimental bias in malware classification across space and time. In 28th USENIX Security Symposium (USENIX Security 19). 729--746."},{"key":"e_1_3_2_2_31_1","unstructured":"Tara Seals. 2020. Good Heavens! 10M Impacted in Pray.com Data Exposure. https:\/\/threatpost.com\/10m-impacted-pray-com-data-exposure\/161459\/  Tara Seals. 2020. Good Heavens! 10M Impacted in Pray.com Data Exposure. https:\/\/threatpost.com\/10m-impacted-pray-com-data-exposure\/161459\/"},{"key":"e_1_3_2_2_32_1","unstructured":"Tara Seals. 2020. Millions of Hotel Guests Worldwide Caught Up in Mass Data Leak. https:\/\/threatpost.com\/millions-hotel-guests-worldwide-dataleak\/161044\/  Tara Seals. 2020. Millions of Hotel Guests Worldwide Caught Up in Mass Data Leak. https:\/\/threatpost.com\/millions-hotel-guests-worldwide-dataleak\/161044\/"},{"key":"e_1_3_2_2_33_1","unstructured":"Katy Stalcup. 2020. AWS vs Azure vs Google Cloud Market Share 2020: What the Latest Data Shows. https:\/\/www.parkmycloud.com\/blog\/aws-vs-azure-vsgoogle-cloud-market-share\/  Katy Stalcup. 2020. AWS vs Azure vs Google Cloud Market Share 2020: What the Latest Data Shows. https:\/\/www.parkmycloud.com\/blog\/aws-vs-azure-vsgoogle-cloud-market-share\/"},{"key":"e_1_3_2_2_34_1","unstructured":"Lance Whitney. 2021. 2020 sees huge increase in records exposed in data breaches. https:\/\/www.techrepublic.com\/article\/2020-sees-huge-increase-inrecords-exposed-in-data-breaches\/  Lance Whitney. 2021. 2020 sees huge increase in records exposed in data breaches. https:\/\/www.techrepublic.com\/article\/2020-sees-huge-increase-inrecords-exposed-in-data-breaches\/"},{"key":"e_1_3_2_2_35_1","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3363191"},{"key":"e_1_3_2_2_36_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-67262-5_5"},{"key":"e_1_3_2_2_37_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-03638-6_17"},{"key":"e_1_3_2_2_38_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00009"}],"event":{"name":"CCS '22: 2022 ACM SIGSAC Conference on Computer and Communications Security","location":"Los Angeles CA USA","acronym":"CCS '22","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2022 on Cloud Computing Security Workshop"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3560810.3564264","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3560810.3564264","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T19:00:34Z","timestamp":1750186834000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3560810.3564264"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,11,7]]},"references-count":38,"alternative-id":["10.1145\/3560810.3564264","10.1145\/3560810"],"URL":"https:\/\/doi.org\/10.1145\/3560810.3564264","relation":{},"subject":[],"published":{"date-parts":[[2022,11,7]]},"assertion":[{"value":"2022-11-07","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}