• DOI:10.1145/3372297.3417892
Corpus ID: 221557401

Impersonation-as-a-Service: Characterizing the Emerging Criminal Infrastructure for User Impersonation at Scale

@article{Campobasso2020ImpersonationasaServiceCT,
  title={Impersonation-as-a-Service: Characterizing the Emerging Criminal Infrastructure for User Impersonation at Scale},
  author={M. Campobasso and Luca Allodi},
  journal={Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security},
  year={2020}
}

M. Campobasso, Luca Allodi

Published 2020

Computer Science

Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security

In this paper we provide evidence of an emerging criminal infrastructure enabling impersonation attacks at scale. Impersonation-as-a-Service (IMPaaS) allows attackers to systematically collect and enforce user profiles (consisting of user credentials, cookies, device and behavioural fingerprints, and other metadata) to circumvent risk-based authentication system and effectively bypass multi-factor authentication mechanisms. We present the IMPaaS model and evaluate its implementation by… CONTINUE READING

View on ACM

arxiv.org

Save to Library

Create Alert

Cite

Launch Research Feed