A framework for risk analysis in virtual directory security
William R. Claycomb, Dongwan Shin · 2010
Directory services are used by almost every enterprise computing environment. Virtual directories are components that provide directory services in a highly customized manner. Unfortunately, an analysis of risks posed by their unique position and architecture has not been completed. We present a detailed analysis of six attacks to virtual directory services. We also describe various categories of attack risks, and discuss what is necessary to launch an attack. Finally, we present a framework to use in analyzing these risks.