{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,12,23]],"date-time":"2025-12-23T06:40:04Z","timestamp":1766472004711,"version":"3.48.0"},"reference-count":27,"publisher":"IEEE","license":[{"start":{"date-parts":[[2025,10,27]],"date-time":"2025-10-27T00:00:00Z","timestamp":1761523200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,10,27]],"date-time":"2025-10-27T00:00:00Z","timestamp":1761523200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025,10,27]]},"DOI":"10.23919\/cnsm67658.2025.11297453","type":"proceedings-article","created":{"date-parts":[[2025,12,22]],"date-time":"2025-12-22T18:40:10Z","timestamp":1766428810000},"page":"1-9","source":"Crossref","is-referenced-by-count":0,"title":["Characterizing Hosting and Security Practices for Public-Facing LDAP Servers"],"prefix":"10.23919","author":[{"given":"Gustavo Luvizotto","family":"Cesar","sequence":"first","affiliation":[{"name":"University of Twente"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Gurur","family":"\u00d6ndar\u00f6","sequence":"additional","affiliation":[{"name":"Münster University of Applied Sciences"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jonas","family":"Kaspereit","sequence":"additional","affiliation":[{"name":"Münster University of Applied Sciences"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Fabian","family":"Ising","sequence":"additional","affiliation":[{"name":"Fraunhofer SIT and National Research Center for Applied Cybersecurity ATHENE"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sebastian","family":"Schinzel","sequence":"additional","affiliation":[{"name":"Münster University of Applied Sciences"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mattijs","family":"Jonker","sequence":"additional","affiliation":[{"name":"University of Twente"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ralph","family":"Holz","sequence":"additional","affiliation":[{"name":"University of Twente"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","article-title":"S\/MINE: Collecting and Analyzing S\/MIME Certificates at Scale","author":"\u00d6ndar\u00f6","year":"2025","journal-title":"USENIX"},{"key":"ref2","article-title":"LanDscAPe: Exploring LDAP weaknesses and data leaks at internet scale","author":"Kaspereit","year":"2024","journal-title":"USENIX"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/3503158"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/IFIPNetworking.2015.7145335"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/3487552.3487820"},{"article-title":"Global Catalog - Win32 apps","year":"2020","author":"Ashcraft","key":"ref6"},{"year":"2025","key":"ref7","article-title":"Latest Baseline Requirements"},{"article-title":"Project sonar study of ldap on the internet: Rapid7 blog","year":"2016","author":"Sellers","key":"ref8"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/CTS.2015.7210446"},{"key":"ref10","article-title":"Deceptive directories and \u201dvulnerable\u201c","author":"Srinivasa","year":"2022","journal-title":"logs: a honeypot study of the ldap and log 4j attack landscape,\u201d in EuroS&PW"},{"year":"2025","key":"ref11","article-title":"What Is a CLDAP Reflection DDoS Attack?"},{"article-title":"Why TLS is better without STARTTLS: A security analysis of STARTTLS in the email context","volume-title":"30th USENIX Security Symposium","author":"Poddebniak","key":"ref12"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/2815675.2815695"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/3411740.3411742"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/2504730.2504755"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2016.23055"},{"article-title":"Microsoft Entra Connect Sync: Attributes synchronized to Microsoft Entra ID","year":"2023","author":"Mathers","key":"ref17"},{"year":"2014","key":"ref18","article-title":"Recog: A recognition framework"},{"author":"B\u00f6ck","key":"ref19","article-title":"badkeys"},{"key":"ref20","article-title":"pwnedkeys"},{"year":"2024","key":"ref21","article-title":"IP geolocation capabilities: Myths and facts"},{"article-title":"Protocols in TLS\/SSL (Schannel SSP) - Win32 apps","year":"2024","author":"Ashcraft","key":"ref22"},{"key":"ref23","article-title":"ZMap: Fast internetwide scanning and its security applications","author":"Durumeric","year":"2013","journal-title":"USENIX"},{"year":"2020","key":"ref24","article-title":"Does digitalocean host windows servers?"},{"key":"ref25","article-title":"OpenLDAP Faq-O-Matic: Start TLS v. ldaps:\/\/"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/2068816.2068856"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.17487\/rfc9325"}],"event":{"name":"2025 21st International Conference on Network and Service Management (CNSM)","start":{"date-parts":[[2025,10,27]]},"location":"Bologna, Italy","end":{"date-parts":[[2025,10,31]]}},"container-title":["2025 21st International Conference on Network and Service Management (CNSM)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11297200\/11297407\/11297453.pdf?arnumber=11297453","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,12,23]],"date-time":"2025-12-23T06:36:21Z","timestamp":1766471781000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11297453\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,10,27]]},"references-count":27,"URL":"https:\/\/doi.org\/10.23919\/cnsm67658.2025.11297453","relation":{},"subject":[],"published":{"date-parts":[[2025,10,27]]}}}