{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,18]],"date-time":"2026-08-18T14:11:06Z","timestamp":1787062266855,"version":"build-2736575974"},"publisher-location":"New York, NY, USA","reference-count":53,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,7,1]],"date-time":"2024-07-01T00:00:00Z","timestamp":1719792000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"ATHENE"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,7]]},"DOI":"10.1145\/3634737.3656295","type":"proceedings-article","created":{"date-parts":[[2024,6,28]],"date-time":"2024-06-28T07:51:38Z","timestamp":1719561098000},"page":"589-604","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":6,"title":["External Attack-Surface of Modern Organizations"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0005-8371-5021","authenticated-orcid":false,"given":"Nethanel","family":"Gelernter","sequence":"first","affiliation":[{"name":"IONIX, Tel Aviv, Israel"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8130-0472","authenticated-orcid":false,"given":"Haya","family":"Schulmann","sequence":"additional","affiliation":[{"name":"Goethe-Universit\u00e4t Frankfurt and ATHENE, Frankfurt on Main, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7919-9961","authenticated-orcid":false,"given":"Michael","family":"Waidner","sequence":"additional","affiliation":[{"name":"Fraunhofer SIT and TU Darmstadt and ATHENE, Frankfurt, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2024,7]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"2022 Year in Review","author":"Cybersecurity and I. S. Agency","year":"2022","unstructured":"Cybersecurity and I. S. Agency, \"2022 Year in Review,\" June, 2022, https:\/\/www.cisa.gov."},{"key":"e_1_3_2_1_2_1","volume-title":"2022 Year in Review","author":"Cybersecurity and I. S. Agency","year":"2022","unstructured":"Cybersecurity and I. S. Agency, \"2022 Year in Review,\" June, 2022, https:\/\/www.verizon.com\/business\/resources\/reports\/dbir\/."},{"key":"e_1_3_2_1_3_1","volume-title":"CISA Vulnerability Scanning","author":"Cybersecurity and I. S. Agency","year":"2022","unstructured":"Cybersecurity and I. S. Agency, \"CISA Vulnerability Scanning,\" 2022, https:\/\/www.cisa.gov\/resources-tools\/services\/cisa-vulnerability-scanning."},{"key":"e_1_3_2_1_4_1","unstructured":"J. L. Hardcastle \"Uncle Sam orders federal agencies to step up scans for govt IT security holes \" 2022 https:\/\/www.theregister.com\/2022\/10\/04\/cisa_software_vulnerability_directive\/."},{"key":"e_1_3_2_1_5_1","unstructured":"N. C. S. Centre \"Scanning the internet for fun and profit \" 2022 https:\/\/www.ncsc.gov.uk\/blog-post\/scanning-the-internet-for-fun-and-profit."},{"key":"e_1_3_2_1_6_1","first-page":"65","volume-title":"An internet-wide view of internet-wide scanning,\" in 23rd USENIX Security Symposium (USENIX Security 14)","author":"Durumeric Z.","year":"2014","unstructured":"Z. Durumeric, M. Bailey, and J. A. Halderman, \"An internet-wide view of internet-wide scanning,\" in 23rd USENIX Security Symposium (USENIX Security 14), 2014, pp. 65--78."},{"key":"e_1_3_2_1_7_1","first-page":"95","volume-title":"A large-scale analysis of the security of embedded firmwares,\" in 23rd USENIX Security Symposium (USENIX Security 14)","author":"Costin A.","year":"2014","unstructured":"A. Costin, J. Zaddach, A. Francillon, and D. Balzarotti, \"A large-scale analysis of the security of embedded firmwares,\" in 23rd USENIX Security Symposium (USENIX Security 14), 2014, pp. 95--110."},{"key":"e_1_3_2_1_8_1","first-page":"1009","volume-title":"Cloudy with a chance of breach: Forecasting cyber security incidents,\" in 24th USENIX security symposium (USENIX Security 15)","author":"Liu Y.","year":"2015","unstructured":"Y. Liu, A. Sarabi, J. Zhang, P. Naghizadeh, M. Karir, M. Bailey, and M. Liu, \"Cloudy with a chance of breach: Forecasting cyber security incidents,\" in 24th USENIX security symposium (USENIX Security 15), 2015, pp. 1009--1024."},{"key":"e_1_3_2_1_9_1","first-page":"1169","volume-title":"All things considered: an analysis of iot devices on home networks,\" in Proceedings of the 28th USENIX Conference on Security Symposium","author":"Kumar D.","year":"2019","unstructured":"D. Kumar, K. Shen, B. Case, D. Garg, G. Alperovich, D. Kuznetsov, D. Kuznetsov, R. Gupta, and Z. Durumeric, \"All things considered: an analysis of iot devices on home networks,\" in Proceedings of the 28th USENIX Conference on Security Symposium, 2019, pp. 1169--1185."},{"key":"e_1_3_2_1_10_1","first-page":"3111","article-title":"Lzr: Identifying unexpected internet services","author":"Izhikevich L.","year":"2021","unstructured":"L. Izhikevich, R. Teixeira, and Z. Durumeric, \"Lzr: Identifying unexpected internet services.\" in USENIX Security Symposium, 2021, pp. 3111--3128.","journal-title":"USENIX Security Symposium"},{"key":"e_1_3_2_1_11_1","first-page":"3505","article-title":"The circle of life: A large-scale study of the iot malware lifecycle","author":"Alrawi O.","year":"2021","unstructured":"O. Alrawi, C. Lever, K. Valakuzhy, R. Court, K. Z. Snow, F. Monrose, and M. Antonakakis, \"The circle of life: A large-scale study of the iot malware lifecycle.\" in USENIX Security Symposium, 2021, pp. 3505--3522.","journal-title":"USENIX Security Symposium"},{"key":"e_1_3_2_1_12_1","first-page":"4473","volume-title":"Xdri attacks-and-how to enhance resilience of residential routers,\" in 31st USENIX Security Symposium (USENIX Security 22)","author":"Jeitner P.","year":"2022","unstructured":"P. Jeitner, H. Shulman, L. Teichmann, and M. Waidner, \"Xdri attacks-and-how to enhance resilience of residential routers,\" in 31st USENIX Security Symposium (USENIX Security 22), 2022, pp. 4473--4490."},{"key":"e_1_3_2_1_13_1","first-page":"543","volume-title":"Towards a complete view of the certificate ecosystem,\" in Proceedings of the 2016 Internet Measurement Conference","author":"VanderSloot B.","year":"2016","unstructured":"B. VanderSloot, J. Amann, M. Bernhard, Z. Durumeric, M. Bailey, and J. A. Halderman, \"Towards a complete view of the certificate ecosystem,\" in Proceedings of the 2016 Internet Measurement Conference, 2016, pp. 543--549."},{"key":"e_1_3_2_1_14_1","first-page":"47","article-title":"Zmap: Fast internet-wide scanning and its security applications","volume":"8","author":"Durumeric Z.","year":"2013","unstructured":"Z. Durumeric, E. Wustrow, and J. A. Halderman, \"Zmap: Fast internet-wide scanning and its security applications.\" in USENIX Security Symposium, vol. 8, 2013, pp. 47--53.","journal-title":"USENIX Security Symposium"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/2896816"},{"key":"e_1_3_2_1_16_1","first-page":"23","article-title":"On the mismanagement and maliciousness of networks","volume":"14","author":"Zhang J.","year":"2014","unstructured":"J. Zhang, Z. Durumeric, M. Bailey, M. Liu, and M. Karir, \"On the mismanagement and maliciousness of networks.\" in NDSS, vol. 14, 2014, pp. 23--26.","journal-title":"NDSS"},{"key":"e_1_3_2_1_17_1","first-page":"1117","volume-title":"An epidemiological study of malware encounters in a large enterprise,\" in Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications Security","author":"Yen T.-F.","year":"2014","unstructured":"T.-F. Yen, V. Heorhiadi, A. Oprea, M. K. Reiter, and A. Juels, \"An epidemiological study of malware encounters in a large enterprise,\" in Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications Security, 2014, pp. 1117--1130."},{"key":"e_1_3_2_1_18_1","volume-title":"Mind your own business: A longitudinal study of threats and vulnerabilities in enterprises.\" in NDSS","author":"Kotzias P.","year":"2019","unstructured":"P. Kotzias, L. Bilge, P.-A. Vervier, and J. Caballero, \"Mind your own business: A longitudinal study of threats and vulnerabilities in enterprises.\" in NDSS, 2019."},{"key":"e_1_3_2_1_19_1","unstructured":"Cybersecurity and Infrastructure Security Agency (CISA) \"Reducing the Significant Risk of Known Exploited Vulnerabilities \" https:\/\/www.cisa.gov\/known-exploited-vulnerabilities."},{"key":"e_1_3_2_1_20_1","volume-title":"Tranco: A research-oriented top sites ranking hardened against manipulation,\" arXiv preprint arXiv:1806.01156","author":"Pochat V. L.","year":"2018","unstructured":"V. L. Pochat, T. Van Goethem, S. Tajalizadehkhoob, M. Korczy\u0144ski, and W. Joosen, \"Tranco: A research-oriented top sites ranking hardened against manipulation,\" arXiv preprint arXiv:1806.01156, 2018."},{"key":"e_1_3_2_1_21_1","volume-title":"http:\/\/nmap.org\/ [Consulta: 8 de junio de 2012]","author":"Lyon G.","year":"2014","unstructured":"G. Lyon, \"Nmap security scanner,\" l\u00ednea] URL: http:\/\/nmap.org\/ [Consulta: 8 de junio de 2012], 2014."},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.17487\/RFC8996"},{"key":"e_1_3_2_1_23_1","first-page":"1414","volume-title":"All your dns records point to us: Understanding the security threats of dangling dns records,\" in Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security","author":"Liu D.","year":"2016","unstructured":"D. Liu, S. Hao, and H. Wang, \"All your dns records point to us: Understanding the security threats of dangling dns records,\" in Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security, 2016, pp. 1414--1425."},{"key":"e_1_3_2_1_24_1","volume-title":"Cloud strife: Mitigating the security risks of domain-validated certificates,\" in Internet Society Symposium on Network and Distributed System Security (NDSS)","author":"Borgolte K.","year":"2018","unstructured":"K. Borgolte, T. Fiebig, S. Hao, C. Kruegel, and G. Vigna, \"Cloud strife: Mitigating the security risks of domain-validated certificates,\" in Internet Society Symposium on Network and Distributed System Security (NDSS), 2018."},{"key":"e_1_3_2_1_25_1","first-page":"2917","article-title":"Can i take your subdomain? exploring same-site attacks in the modern web","author":"Squarcina M.","year":"2021","unstructured":"M. Squarcina, M. Tempesta, L. Veronese, S. Calzavara, and M. Maffei, \"Can i take your subdomain? exploring same-site attacks in the modern web.\" in USENIX Security Symposium, 2021, pp. 2917--2934.","journal-title":"USENIX Security Symposium"},{"key":"e_1_3_2_1_26_1","unstructured":"\"Common Crawl \" https:\/\/commoncrawl.org\/."},{"key":"e_1_3_2_1_27_1","unstructured":"\"Internet Archive - Wayback Machine \" https:\/\/web.archive.org\/."},{"key":"e_1_3_2_1_28_1","unstructured":"\"command line tool and library for transferring data with URLs (since 1998) \" https:\/\/curl.se\/."},{"key":"e_1_3_2_1_29_1","volume-title":"Passive and Active Measurement Conference (PAM)","author":"Gustafsson J.","year":"2017","unstructured":"J. Gustafsson, G. Overier, M. Arlitt, and N. Carlsson, \"A first look at the ct landscape: Certificate transparency logs in practice,\" Proc. Passive and Active Measurement Conference (PAM), 2017."},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/1842733.1842751"},{"key":"e_1_3_2_1_31_1","volume-title":"Government Towards a Zero Trust Architecture","author":"House W.","year":"2022","unstructured":"W. House, \"Office of Management and Budget Releases Federal Strategy to Move the U.S. Government Towards a Zero Trust Architecture,\" January, 2022, https:\/\/www.whitehouse.gov\/omb\/briefing-room\/2022\/01\/26\/office-of-management-and-budget-releases-federal-strategy-to-move-the-u-s-government-toward"},{"key":"e_1_3_2_1_32_1","unstructured":"G. Alvarenga \"Shared Responsibility Model \" November 2022 https:\/\/www.crowdstrike.com\/cybersecurity-101\/cloud-security\/shared-responsibility-model."},{"key":"e_1_3_2_1_33_1","first-page":"191","volume-title":"The long \"taile\" of typosquatting domain names,\" in 23rd {USENIX} Security Symposium ({USENIX} Security 14)","author":"Szurdi J.","year":"2014","unstructured":"J. Szurdi, B. Kocso, G. Cseh, J. Spring, M. Felegyhazi, and C. Kanich, \"The long \"taile\" of typosquatting domain names,\" in 23rd {USENIX} Security Symposium ({USENIX} Security 14), 2014, pp. 191--206."},{"key":"e_1_3_2_1_34_1","volume-title":"Internet Society","author":"Agten P.","year":"2015","unstructured":"P. Agten, W. Joosen, F. Piessens, and N. Nikiforakis, \"Seven months' worth of mistakes: A longitudinal study of typosquatting abuse,\" in Proceedings of the 22nd Network and Distributed System Security Symposium (NDSS 2015). Internet Society, 2015."},{"key":"e_1_3_2_1_35_1","unstructured":"\"OVH Cloud \" https:\/\/www.ovhcloud.com\/."},{"key":"e_1_3_2_1_36_1","unstructured":"Nmap.org \"Port Selection Data and Strategies \" https:\/\/nmap.org\/book\/performance-port-selection.html."},{"key":"e_1_3_2_1_37_1","volume-title":"The crime attack,\" in ekoparty security conference","author":"Rizzo J.","year":"2012","unstructured":"J. Rizzo and T. Duong, \"The crime attack,\" in ekoparty security conference, vol. 2012, 2012."},{"key":"e_1_3_2_1_38_1","volume-title":"Smack: State machine attacks. mar","author":"Beurdouche B.","year":"2015","unstructured":"B. Beurdouche et al., \"Smack: State machine attacks. mar. 2015,\" URl: https:\/\/www.smacktls.com."},{"key":"e_1_3_2_1_39_1","first-page":"5","volume-title":"Valenta et al., \"Imperfect forward secrecy: How diffie-hellman fails in practice,\" in Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security","author":"Adrian D.","year":"2015","unstructured":"D. Adrian, K. Bhargavan, Z. Durumeric, P. Gaudry, M. Green, J. A. Halderman, N. Heninger, D. Springall, E. Thom\u00e9, L. Valenta et al., \"Imperfect forward secrecy: How diffie-hellman fails in practice,\" in Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security, 2015, pp. 5--17."},{"key":"e_1_3_2_1_40_1","first-page":"34","article-title":"This poodle bites: exploiting the ssl 3.0 fallback","volume":"21","author":"M\u00f6ller B.","year":"2014","unstructured":"B. M\u00f6ller, T. Duong, and K. Kotowicz, \"This poodle bites: exploiting the ssl 3.0 fallback,\" Security Advisory, vol. 21, pp. 34--58, 2014.","journal-title":"Security Advisory"},{"key":"e_1_3_2_1_41_1","first-page":"213","article-title":"Raccoon attack: Finding and exploiting most-significant-bit-oracles in tls-dh (e)","author":"Merget R.","year":"2021","unstructured":"R. Merget, M. Brinkmann, N. Aviram, J. Somorovsky, J. Mittmann, and J. Schwenk, \"Raccoon attack: Finding and exploiting most-significant-bit-oracles in tls-dh (e).\" in USENIX Security Symposium, 2021, pp. 213--230.","journal-title":"USENIX Security Symposium"},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"crossref","unstructured":"A. Popov \"Prohibiting RC4 cipher suites \" Tech. Rep. 2015 https:\/\/www.rfc-editor.org\/rfc\/rfc7465.html.","DOI":"10.17487\/rfc7465"},{"key":"e_1_3_2_1_44_1","unstructured":"V. Bernat \"Ssl\/tls & perfect forward secrecy \" http:\/\/vincent.bernat.im\/en\/blog\/2011-ssl-perfect-forward-secrecy.html 2011."},{"key":"e_1_3_2_1_45_1","first-page":"817","volume-title":"Return of bleichenbacher's oracle threat ({ROBOT}),\" in 27th USENIX Security Symposium (USENIX Security 18)","author":"B\u00f6ck H.","year":"2018","unstructured":"H. B\u00f6ck, J. Somorovsky, and C. Young, \"Return of bleichenbacher's oracle threat ({ROBOT}),\" in 27th USENIX Security Symposium (USENIX Security 18), 2018, pp. 817--849."},{"issue":"6","key":"e_1_3_2_1_46_1","doi-asserted-by":"crossref","first-page":"6545","DOI":"10.1109\/TPWRS.2018.2827060","article-title":"Cyber cascades screening considering the impacts of false data injection attacks","volume":"33","author":"Che L.","year":"2018","unstructured":"L. Che, X. Liu, Z. Shuai, Z. Li, and Y. Wen, \"Cyber cascades screening considering the impacts of false data injection attacks,\" IEEE Transactions on Power Systems, vol. 33, no. 6, pp. 6545--6556, 2018.","journal-title":"IEEE Transactions on Power Systems"},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"crossref","first-page":"475","DOI":"10.1145\/2663716.2663755","volume-title":"Bailey et al., \"The matter of heartbleed,\" in Proceedings of the 2014 conference on internet measurement conference","author":"Durumeric Z.","year":"2014","unstructured":"Z. Durumeric, F. Li, J. Kasten, J. Amann, J. Beekman, M. Payer, N. Weaver, D. Adrian, V. Paxson, M. Bailey et al., \"The matter of heartbleed,\" in Proceedings of the 2014 conference on internet measurement conference, 2014, pp. 475--488."},{"key":"e_1_3_2_1_49_1","first-page":"445","volume-title":"Ethical issues in research using datasets of illicit origin,\" in Proceedings of the 2017 Internet Measurement Conference","author":"Thomas D. R.","year":"2017","unstructured":"D. R. Thomas, S. Pastrana, A. Hutchings, R. Clayton, and A. R. Beresford, \"Ethical issues in research using datasets of illicit origin,\" in Proceedings of the 2017 Internet Measurement Conference, 2017, pp. 445--462."},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1038\/s42256-021-00389-w"},{"key":"e_1_3_2_1_52_1","volume-title":"Rep.","year":"2023","unstructured":"Microsoft, \"Overview - Apply Zero Trust principles to Azure IaaS,\" Tech. Rep., 2023, https:\/\/learn.microsoft.com\/en-us\/security\/zero-trust\/azure-infrastructure-overview."},{"key":"e_1_3_2_1_53_1","unstructured":"G. Cloud \"Applying the NCSC Zero Trust Principles on Google Cloud \" Tech. Rep. 2022 https:\/\/services.google.com\/fh\/files\/misc\/ncsc_zero_trust_principles_on_google_cloud_v1.pdf."},{"key":"e_1_3_2_1_54_1","first-page":"999","volume-title":"Tell me about yourself: The malicious captcha attack,\" in Proceedings of the 25th International Conference on World Wide Web","author":"Gelernter N.","year":"2016","unstructured":"N. Gelernter and A. Herzberg, \"Tell me about yourself: The malicious captcha attack,\" in Proceedings of the 25th International Conference on World Wide Web, 2016, pp. 999--1008."},{"key":"e_1_3_2_1_55_1","unstructured":"National Institute of Standards and Technology (NIST) \"National Vulnerability Database \" https:\/\/nvd.nist.gov\/vuln."},{"key":"e_1_3_2_1_56_1","unstructured":"National Institute of Standards and Technology (NIST) \"Vulnerability Metrics \" https:\/\/nvd.nist.gov\/vuln-metrics\/cvss."}],"event":{"name":"ASIA CCS '24: 19th ACM Asia Conference on Computer and Communications Security","location":"Singapore Singapore","acronym":"ASIA CCS '24","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 19th ACM Asia Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3634737.3656295","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T19:44:07Z","timestamp":1750275847000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3634737.3656295"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,7]]},"references-count":53,"alternative-id":["10.1145\/3634737.3656295","10.1145\/3634737"],"URL":"https:\/\/doi.org\/10.1145\/3634737.3656295","relation":{},"subject":[],"published":{"date-parts":[[2024,7]]},"assertion":[{"value":"2024-07-01","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}