验证云提供商的数据验证以存储任意数据
Bypassing Cloud Providers' Data Validation to Store Arbitrary Data
摘要：
云计算中的一个基本的软件即服务（SaaS）特性是特定于应用程序的;根据应用程序，云提供商（CP）通过数据验证过程限制允许进入其服务器的数据格式和属性。定义不明确的数据验证过程可能会直接影响安全性（例如应用程序故障，法律问题）以及会计和收费（例如信任文件头中的元数据）。因此，本文调查，评估（通过测试），并讨论流行的CP的数据验证过程。因此，构建了一个概念验证系统，实现了精心设计的编码器来规避数据验证过程，最终演示了如何将大量未说明的任意数据存储到CP中。
英文摘要：
A fundamental Software-as-a-Service (SaaS) characteristic in Cloud Computing is to be application-specific; depending on the application, Cloud Providers (CPs) restrict data formats and attributes allowed into their servers via a data validation process. An ill-defined data validation process may directly impact both security (e.g. application failure, legal issues) and accounting and charging (e.g. trusting metadata in file headers). Therefore, this paper investigates, evaluates (by means of tests), and discusses data validation processes of popular CPs. A proof of concept system was thus built, implementing encoders carefully crafted to circumvent data validation processes, ultimately demonstrating how large amounts of unaccounted, arbitrary data can be stored into CPs.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
