Eric Pauley
Recent content on Eric Pauley
Latest posts
Squatspotting: Towards the Systematic Measurement of Typosquatting Techniques
Toward a Representative DNS Data Corpus: A Longitudinal Comparison of Collection Methods
Securing Cloud File Systems With Trusted Execution
On the Robustness Tradeoff in Fine-Tuning
Adversarial Agents: Black-Box Evasion Attacks with Reinforcement Learning
Targeting Alignment: Extracting Safety Classifiers of Aligned LLMs
DScope: A Cloud-Native Internet Telescope

 Visit dscope.org for more information on this project.

Securing Cloud File Systems using Shielded Execution
Farewell to the Era of Cheap EC2 Spot Instances
AWS EC2 Spot prices have surged since the start of 2023. In this article I investigate this trend, possible causes, and how AWS customers can improve their deployments to get the maximum discount possible.
The Need for Standardized Secret Scanning
It’s no secret that leaving credentials in source code is risky, especially when tools like GitHub make it easy to share code publicly with a single command. The major players have long had tooling to help prevent this like GitHub Secret Scanning , and GitHub also makes it possible (at least in theory) for third-party providers to join the program . Unfortunately, out of the countless…
Efficient Storage Integrity in Adversarial Settings
Secure IP Address Allocation at Cloud Scale
Leveraging Mispriced AWS Spot Instances for Fun and Savings
AWS creates a market for spot instance pricing, but this market is inefficient as customers don’t consider all instance types available. Leveraging this mispricing can save even more than spot pricing already does.
Saving 90% vs. GitHub Codespaces with EC2 Spot Instances
GitHub Codespaces offer convenient hosting for VSCode at a high price. Using EC2 spot instances and Wireguard we can achieve a more flexible setup for nearly 90% less.
Privacy-Preserving Protocols for Smart Cameras and Other IoT Devices
ParTEETor: A System for Partial Deployments of TEEs within Tor
Characterizing the Modification Space of Signature IDS Rules
The CVE Wayback Machine: Measuring Coordinated Disclosure from Exploits Against 2 Years of Zero-Days
Systematic Evaluation of Geolocation Privacy Mechanisms
The Space of Adversarial Strategies
Understanding the Ethical Frameworks of Internet Measurement Studies
Performant Binary Fuzzing without Source Code using Static Instrumentation
Measuring and Mitigating the Risk of IP Reuse on Public Clouds
Securing Cloud Services against Squatting Attacks
IT organizations must take steps to protect their users against cloud Squatting. This post discusses the root causes of cloud squatting from an IT practitioner’s perspective, and demonstrates the steps companies can take to harden their infrastructure.
Measuring and Mitigating the Risk of IP Reuse on Public Clouds

 Click here for frequently asked questions on this work.

Cloud Squatting: The Risk of IP Reuse on Public Clouds
Our new research details a broad class of attacks against services hosted on public clouds.
Static Instrumentation for Performant Binary Fuzzing
Program Analysis of Commodity IoT Applications for Security and Privacy: Opportunities and Challenges
Broadcast Channels in Go
Go channels implement a simple way to pass data between concurrent processes. Their one-to-one nature makes them great for handling ownership of resources or allocation of work to a pool of workers. However, in some cases it’s useful to have a different type of channel – a channel in which a single message sent can be received by multiple processes simultaneously.
Single-Implementation Interfaces in Go
In Java, classes can be instantiated using the default constructor unless there is a non-default constructor defined. One feature that I’ve often missed in Go is the ability to have such control over struct instantiation. Any exported struct definition can be defined from any other package, and methods on that struct should be written to work with the struct zero values. For example, from my…