Hey, You, Get Off My Cloud: Exploring Information Leakage in Third-Party Clouds Thomas Ristenpart, Eran Tromer UC San Diego Hovav Shacham, Stefan Savage MIT Cambridge by Noor Ahmed and Rohit RanchalSlides provided by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
View Full Document
Unlocking...