234 citations
- Universität HamburgDE106 papers
- Freie Universität BerlinDE31 papers
- Technische Universität DresdenDE16 papers
- Centre National de la Recherche ScientifiqueFR11 papers
- Deutsches Elektronen-Synchrotron DESYDE9 papers
- Hamburg University of TechnologyDE8 papers
- University of BolognaIT8 papers
- Hamburg Institut (Germany)DE6 papers
- Istituto Nazionale di Fisica Nucleare, Sezione di BolognaIT6 papers
- Istituto Nazionale di Fisica Nucleare, Sezione di NapoliIT6 papers
- Middle East Technical UniversityTR6 papers
- AIT Austrian Institute of Technology GmbHAT5 papers
12 papers · 1 filter
Secrets Best Not Shared: DNS Privacy Enhancements for the Constrained IoT
Martine S. Lenders, Thomas C. Schmidt, Matthias Wählisch
Attackers often identify DNS traffic to disrupt or compromise Internet services. While prior work has focused on encrypting queries using DNS over TLS, HTTPS, or QUIC to counter su…
Forward to Hell? On the Potentials of Misusing Transparent DNS Forwarders in Reflective Amplification Attacks
Maynard Koch, Florian Dolzmann, Thomas C. Schmidt +1
The DNS infrastructure is infamous for facilitating reflective amplification attacks. Various countermeasures such as server shielding, access control, rate limiting, and protocol…
A Call to Reconsider Certification Authority Authorization (CAA)
Pouyan Fotouhi Tehrani, Raphael Hiesgen, Thomas C. Schmidt +1
Certification Authority Authentication (CAA) is a safeguard against illegitimate certificate issuance. We show how shortcomings in CAA concepts and operational aspects undermine it…
The Age of DDoScovery: An Empirical Comparison of Industry and Academic DDoS Assessments
Raphael Hiesgen, Marcin Nawrocki, Marinho Barcellos +14
Motivated by the impressive but diffuse scope of DDoS research and reporting, we undertake a multistakeholder (joint industry-academic) analysis to seek convergence across the best…
Do CAA, CT, and DANE Interlink in Certificate Deployments? A Web PKI Measurement Study
Pouyan Fotouhi Tehrani, Raphael Hiesgen, Teresa Lübeck +2
Integrity and trust on the web build on X.509 certificates. Misuse or misissuance of these certificates threaten the Web PKI security model, which led to the development of several…
SoK: A Data-driven View on Methods to Detect Reflective Amplification DDoS Attacks Using Honeypots
Marcin Nawrocki, John Kristoff, Raphael Hiesgen +3
In this paper, we revisit the use of honeypots for detecting reflective amplification attacks. These measurement tools require careful design of both data collection and data analy…