A Comprehensive Approach to Abusing Locality in Shared Web Hosting Servers

With the growing of network technology along with the need of human for social interaction, using websites nowadays becomes critically important which leads in the increasing number of websites and servers. One popular solution for managing these large numbers of websites is using shared web hosting servers in order to decrease the overall cost of server maintenance. Despite affordability, this solution is insecure and risky according to high amount of reported defaces and attacks during recent years. In this paper, we introduce top ten most common attacks in shared web hosting servers which can occur because of the nature and bad configuration in these servers. Moreover, we present several simple scenarios that are capable of penetrating these kinds of servers even with the existence of several securing mechanisms. Finally, we provide a comprehensive secure configuration for confronting these attacks.

• Publication year

  2013

• Venue

  2013 12th IEEE International Conference on Trust, Security and Privacy in Computing and Communications

• Publication date

  2013-07-16

• Fields of study

  Computer Science

• Identifiers
  DOI 10.1109/TrustCom.2013.200arXiv 1811.00922
• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• Performance Evaluation of Shared Hosting Security Methods

  2012influential reference
• Two novel server-side attacks against log file in Shared Web Hosting servers

  2012cited by this paper
• Abusing locality in shared web hosting

  2011cited by this paper
• Robust defenses for cross-site request forgery

  2008cited by this paper
• Preventing Cross Site Request Forgery Attacks

  2006cited by this paper
• Phishing and Countermeasures: Understanding the Increasing Problem of Electronic Identity Theft (Edited by Markus Jakobsson and Steven Myers)

  2006cited by this paper
• Phishing and Countermeasures: Understanding the Increasing Problem of Electronic Identity Theft

  2006cited by this paper
• Protecting users against phishing attacks with AntiPhish

  2005cited by this paper
• Apache

  1965cited by this paper
• October

  1855cited by this paper

• SoK: The Design Paradigm of Safe and Secure Defaults

  2024cites this paper
• Log Poisoning Attacks in IoT: Methodologies, Evasion, Detection, Mitigation, and Criticality Analysis

  2024cites this paper
• Sharing is Caring: Towards Analyzing Attack Surfaces on Shared Hosting Providers

  2024cites this paper
• The Infrastructure Utilization of Free Contents Websites Reveal their Security Characteristics

  2023cites this paper
• An Empricial Study of Brute Force Attack on Wordpress Website

  2023cites this paper
• Entangled Clouds: Measuring the Hosting Infrastructure of the Free Contents Web

  2023cites this paper
• Preventing the attempts of abusing cheap-hosting Web-servers for monetization attacks

  2019cites this paper
• Correlating file-based malware graphs against the empirical ground truth of DNS graphs

  2016cites this paper