research
∙
03/21/2023
Keep Your Friends Close, but Your Routeservers Closer: Insights into RPKI Validation in the Internet
IP prefix hijacks allow adversaries to redirect and intercept traffic, p...
share
research
∙
08/25/2022
XDRI Attacks - and - How to Enhance Resilience of Residential Routers
We explore the security of residential routers and find a range of criti...
research
∙
05/21/2022
SERVFAIL: The Unintended Consequences of Algorithm Agility in DNSSEC
Cryptographic algorithm agility is an important property for DNSSEC: it ...
research
∙
05/12/2022
From IP to transport and beyond: cross-layer attacks against applications
We perform the first analysis of methodologies for launching DNS cache p...
research
∙
05/12/2022
Stalloris: RPKI Downgrade Attack
We demonstrate the first downgrade attacks against RPKI. The key design ...
research
∙
05/11/2022
The Hijackers Guide To The Galaxy: Off-Path Taking Over Internet Resources
Internet resources form the basic fabric of the digital society. They pr...
research
∙
05/11/2022
Injection Attacks Reloaded: Tunnelling Malicious Payloads over DNS
The traditional design principle for Internet protocols indicates: "Be s...
research
∙
07/13/2021
The Master and Parasite Attack
We explore a new type of malicious script attacks: the persistent parasi...
research
∙
02/04/2021
Privacy Preserving and Resilient RPKI
Resource Public Key Infrastructure (RPKI) is vital to the security of in...
research
∙
10/19/2020
The Impact of DNS Insecurity on Time
We demonstrate the first practical off-path time shifting attacks agains...
research
∙
10/19/2020
Secure Consensus Generation with Distributed DoH
Many applications and protocols depend on the ability to generate a pool...
research
∙
10/16/2020
Pitfalls of Provably Secure Systems in Internet The Case of Chronos-NTP
The critical role that Network Time Protocol (NTP) plays in the Internet...
research
∙
03/12/2020