Collected research

Maneuvering Around Clouds: Bypassing Cloud-based Security Providers

Thomas Vissers, Tom Van Goethem, Wouter Joosen and Nick Nikiforakis · dl.acm.org

Cloud-based DDoS protection that reroutes traffic purely by changing DNS records is circumvented once a site's real origin IP leaks. The paper gathers eight origin-exposing vectors, including historical DNS data, subdomains and TLS certificates, into an automated tool called Cloudpiercer, and shows that most of 17,877 protected domains expose their origin.

Record

Researcher

Thomas Vissers, Tom Van Goethem, Wouter Joosen and Nick Nikiforakis

Published by

dl.acm.org

Topic

Server

In the archive

• Collected in the 2015 research round

Tags

• dos
• dns
• cdn
• info-leak
• large-scale-scan
• tooling
• measurement-study
• tls
• owasp-a02-2021

This page is the archive's own catalogue record. The research is the work of Thomas Vissers, Tom Van Goethem, Wouter Joosen and Nick Nikiforakis, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 10 August 2026.